Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
File: Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft (raw, json)
Hash identifier: OfCOAK24i2HsOKbZYh8g/OAbX0GaoxG0/A3L4UE2dS8=
Subject key identifier: 74:63:40:A0:61:F7:85:53:E1:CA:1B:80:81:10:6D:57:35:82:3F:90
Authority key identifier: 63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10
Certificate issuer: /CN=63642c1ca3d38c7e15e687e0d9485c7826938c10
Certificate serial: 01984B53FEEEF0679774F7787335EC9D586A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
Manifest number: 032E
Signing time: Sun 27 Jul 2025 10:00:52 +0000
Manifest this update: Sun 27 Jul 2025 10:00:52 +0000
Manifest next update: Mon 28 Jul 2025 10:00:52 +0000
Files and hashes: 1: Qzda_dpxvv_9oCqZ0rKtNjYGFYA.roa (hash: yhmVIZybj8mBYPvdFgcuCe4v8sYhgAuDZKiw+Hdv0f4=)
2: Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl (hash: Acx7C0/qUU3dg1DkKkeS2P8XuSM7eJNOHcEPgc7SeX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:fe:ee:f0:67:97:74:f7:78:73:35:ec:9d:58:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63642c1ca3d38c7e15e687e0d9485c7826938c10
Validity
Not Before: Jul 27 10:00:52 2025 GMT
Not After : Jul 28 10:00:52 2025 GMT
Subject: CN=746340a061f78553e1ca1b8081106d5735823f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:8e:8b:3f:e9:24:b2:8c:d6:98:46:37:3f:
10:50:24:2e:29:60:97:c5:cb:1e:e6:92:34:80:f0:
b8:6f:43:26:71:db:78:9d:8b:4b:2d:66:60:43:c0:
85:57:34:ad:4f:0f:67:af:84:e6:4b:20:56:58:b0:
2a:50:90:09:96:61:2c:1e:bc:f7:65:74:6c:1e:25:
9b:47:e4:ff:80:81:0a:33:c0:4d:d8:0b:81:04:a2:
23:00:56:71:1b:26:0f:c3:e1:71:4b:e5:4b:31:4b:
cc:9d:07:d8:51:33:28:1f:98:4b:17:fb:80:f3:e2:
cf:fd:a2:29:f0:be:78:83:c4:a1:dd:60:9c:4e:e7:
95:dd:10:57:3b:65:8f:0b:86:c8:83:44:9f:38:1c:
47:0f:41:d4:e6:c1:3c:4c:e4:11:d3:a7:bd:73:82:
49:46:53:b9:94:c9:22:96:e8:fa:23:87:6e:ea:89:
d2:79:35:3a:85:30:cd:6a:6c:c1:ae:d2:ee:8c:57:
d2:43:5e:dd:54:06:06:17:30:ef:79:0b:3c:c7:69:
fc:c6:42:58:3e:aa:41:a4:4c:aa:d7:8a:f0:7e:25:
b0:f8:84:08:36:79:cd:c9:40:ec:ca:f9:f7:5c:40:
b9:90:e2:b3:fb:ef:c3:ed:b3:23:a0:0e:d7:cc:9d:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:63:40:A0:61:F7:85:53:E1:CA:1B:80:81:10:6D:57:35:82:3F:90
X509v3 Authority Key Identifier:
keyid:63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e2:00:58:fe:fa:cd:23:fb:44:17:9c:cb:1d:aa:c2:99:9d:
c2:20:8d:89:ab:94:08:ba:63:87:19:12:5a:fc:1f:20:36:8b:
bc:20:5c:8c:8e:8b:92:a2:5d:1d:f6:ee:8e:a4:e7:05:e0:40:
b7:5a:bb:0d:7e:65:53:d0:62:3c:52:7d:68:dc:77:e2:cb:4c:
04:77:be:c8:80:bd:2a:10:eb:28:be:1f:b4:94:c6:c4:b6:be:
b2:47:4d:c5:d5:ca:c5:1f:e2:63:1d:00:6c:c6:e0:e5:7f:36:
2f:1b:c0:12:99:82:2e:79:c1:4a:80:b3:a2:15:84:75:6e:86:
5c:43:d4:6e:40:0c:48:80:f6:79:88:1a:0c:e9:dd:ee:8f:68:
71:bd:68:02:f9:77:b3:75:eb:fc:c4:52:83:af:55:ca:e3:df:
da:96:c7:af:36:f4:37:db:d0:ff:0c:c1:6d:03:be:57:49:12:
f6:82:c8:c5:40:74:75:ac:d5:d6:39:56:d5:35:91:12:6e:9d:
4a:4e:9e:d2:3f:10:a3:58:cb:a2:bd:c4:c6:6b:48:b8:dd:7a:
e3:1b:8c:79:32:74:58:5e:c7:dc:bd:4f:62:5d:cc:49:4c:db:
5e:46:d1:4d:71:9f:26:32:ba:33:5e:36:14:7a:c1:c9:6f:27:
e9:ca:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:11:21 2025 by rpki-client