Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: 2kjjZuGLjgEJFUSPqaj2WCb0xtgLjwO9cIlp1VM3pH0=
Subject key identifier: DC:A3:19:30:35:77:A8:30:0B:C2:E4:68:A1:3A:F3:76:87:57:71:E2
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 01984776994C925B827D57B10F991E1A66A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 1328
Signing time: Sat 26 Jul 2025 16:00:11 +0000
Manifest this update: Sat 26 Jul 2025 16:00:11 +0000
Manifest next update: Sun 27 Jul 2025 16:00:11 +0000
Files and hashes: 1: 0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa (hash: usdtXTbOrc0vwd46ZO8C/l/xue6j9QcbuHgY1Bupvvo=)
2: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: GNKHAy7rLZOvXzleOPyi4Y6NPLfcmFzwax83tOvjN+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:99:4c:92:5b:82:7d:57:b1:0f:99:1e:1a:66:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Jul 26 16:00:11 2025 GMT
Not After : Jul 27 16:00:11 2025 GMT
Subject: CN=dca319303577a8300bc2e468a13af376875771e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:71:3b:d0:69:c7:df:96:2c:da:d6:5c:23:
3c:3f:bb:dc:36:91:54:d4:ba:e1:3c:b9:03:75:36:
9d:96:79:52:60:e5:dd:e7:16:98:b3:d0:6b:a1:68:
f8:bd:31:98:e6:c0:00:79:ba:78:15:28:b0:cf:c6:
90:eb:e2:24:12:4b:56:c7:b9:31:b0:dd:2c:95:da:
6f:10:7b:ff:85:20:ad:a1:86:ae:f4:e9:e1:c1:01:
eb:0b:ae:b3:51:97:a3:94:a3:2f:04:5e:29:78:9a:
e8:4f:ea:80:ac:bd:c6:06:8b:5c:98:c4:e9:1b:6d:
25:b7:eb:56:ae:a3:45:30:86:0e:45:3f:3d:4f:0a:
ca:d5:52:6a:16:9d:90:c6:15:92:37:fe:53:bb:96:
c2:7c:ad:df:f9:22:01:6e:3f:8b:13:b7:7a:43:62:
f8:5c:3e:3d:08:e8:fa:00:23:e7:e8:33:8f:c1:07:
ff:03:89:07:70:04:d4:ee:e4:52:a8:7d:e2:91:fd:
4a:df:65:46:b5:fb:1c:41:f8:a3:bd:0e:e0:eb:4d:
00:8a:33:b7:5f:36:0a:79:69:00:a1:b2:00:b7:61:
6d:46:d5:ae:68:eb:5f:c2:0c:e3:e1:02:3a:c5:59:
a6:31:ff:a8:49:49:fa:79:ea:98:45:e6:5d:a5:06:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A3:19:30:35:77:A8:30:0B:C2:E4:68:A1:3A:F3:76:87:57:71:E2
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:02:9c:f5:3c:e0:f8:bd:31:35:a6:3e:ff:9e:4e:8c:e1:22:
3b:9d:57:6c:2b:c8:b5:f2:ca:21:62:d2:29:07:78:47:0f:7d:
ac:d0:d3:8e:b9:2a:28:37:fa:0f:e8:83:a5:61:43:77:cf:96:
b2:c2:06:66:ca:a7:8e:68:3d:1e:74:87:06:06:ee:4b:d8:56:
50:78:03:d5:8e:57:e7:60:35:75:87:3f:8d:23:f3:08:7e:19:
48:47:6c:02:d0:84:8d:89:18:f4:e1:69:96:59:03:b6:e9:2b:
3f:1d:0b:7b:d0:61:dc:2c:ca:72:29:75:40:f9:3f:eb:d6:e6:
d8:d7:52:17:80:da:65:aa:bc:11:7e:d3:2a:a1:1f:f1:a7:bf:
d2:93:f5:88:39:7a:5a:5a:62:cb:cd:c9:17:c7:42:63:fc:de:
46:dd:ab:6b:2c:86:e8:27:9c:08:b9:51:ef:b2:4a:75:8b:fe:
b6:de:d2:15:41:40:4a:3a:dd:52:cb:ce:b2:65:b6:52:ab:f4:
47:cd:a3:c4:cf:e0:a9:cd:96:b6:ed:8d:59:db:59:23:dc:58:
76:c3:05:f6:d3:01:1e:ac:64:7c:0b:6d:78:94:60:77:09:ad:
94:36:3b:a8:7b:85:fd:01:d1:81:4c:82:8a:90:e4:cf:9b:a2:
cf:b0:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:30:10 2025 by rpki-client