Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: 4OahHga9eON11WkE8xnDCwpgwrmDH75ybWsnSS3cm3A=
Subject key identifier: 2A:6F:62:60:6E:2E:E1:63:BC:5C:36:D2:6A:11:25:88:8F:CD:66:B6
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 01985AFDC4E77F6077DCE612697727823E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 1609
Signing time: Wed 30 Jul 2025 11:00:36 +0000
Manifest this update: Wed 30 Jul 2025 11:00:36 +0000
Manifest next update: Thu 31 Jul 2025 11:00:36 +0000
Files and hashes: 1: 7T8vel-RvUDAb6LdSmoGnY1MBEg.roa (hash: Bv42HU9ZNI49CjZAPUApOp/bLDu91m+dP9rH1Q/6aaU=)
2: sKarxrcp3TYbOa1lj25cFgvPm1M.roa (hash: hzIQC+6QcM0KejfwF/J95Pb7an1/Oimflf+mKhKCBQI=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: Bxj/H+7YmikNiIKgQErQWwHIM8Fax6lMDC9vrLcabzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:fd:c4:e7:7f:60:77:dc:e6:12:69:77:27:82:3e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Jul 30 11:00:36 2025 GMT
Not After : Jul 31 11:00:36 2025 GMT
Subject: CN=2a6f62606e2ee163bc5c36d26a1125888fcd66b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:bb:1b:f4:03:85:a8:d0:79:2d:42:a8:9c:
be:05:45:1e:3c:0f:db:20:e1:a9:67:9c:36:d4:b3:
25:df:ab:79:86:c2:64:27:69:67:fc:00:b9:62:6b:
fc:10:98:ab:97:f5:c8:0d:44:6e:c0:e8:c3:7d:c0:
a9:e7:34:cd:6c:c0:13:4f:eb:be:00:09:35:5a:69:
19:63:13:40:58:eb:26:a2:a0:51:8d:d9:9b:d0:e7:
54:44:a0:e4:28:cf:5d:71:6d:1f:e5:0f:c0:2d:74:
0d:dd:ee:08:4a:82:42:36:38:b0:9c:dd:f9:cd:f8:
1a:f7:93:64:55:90:cc:7a:f1:97:c8:fc:ba:8d:9b:
7a:6e:a9:5e:ae:68:e2:8a:06:63:23:e5:6b:52:f4:
b7:69:8f:66:74:b0:1c:38:5d:4f:0c:b0:b5:60:3b:
3f:11:d0:cf:34:a5:9c:cd:e0:37:45:58:ae:51:8d:
8a:02:f0:fe:07:60:ae:1b:f8:c1:a4:dd:04:b9:c4:
8f:a6:09:95:ce:0f:15:91:a8:08:d5:ea:28:d3:db:
90:75:81:34:e8:7a:5d:60:26:7e:c7:52:c3:c8:d8:
6d:fa:81:a6:e4:94:a0:73:35:dd:09:2f:19:e1:29:
82:92:14:7f:a5:22:d2:ae:bd:04:2a:eb:9e:a1:ab:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6F:62:60:6E:2E:E1:63:BC:5C:36:D2:6A:11:25:88:8F:CD:66:B6
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:17:3a:15:82:9e:bd:82:ef:0a:65:f6:50:63:e1:7c:2f:d6:
60:d0:34:ec:57:c6:4f:40:24:ba:7b:59:15:84:b7:63:62:f0:
75:9b:8e:ff:c4:f6:5e:5e:0e:60:03:9c:8b:8a:8d:54:8a:77:
7b:40:e1:e6:8f:0c:13:9a:cc:70:40:cd:7e:37:03:e4:39:22:
85:7e:82:3b:97:09:8b:1c:ad:b9:23:53:67:43:26:00:b2:06:
37:73:42:10:72:22:47:9e:14:bf:5b:8b:bc:1a:c6:de:87:1e:
40:9f:9d:56:88:6d:e1:4d:a2:d8:6c:e4:62:46:fd:63:4c:e8:
0e:a3:49:41:46:2d:85:bc:f1:b5:e2:be:f4:c5:e0:81:05:98:
9d:bf:0b:72:aa:c4:32:e7:6d:d5:db:7d:ff:38:47:5a:69:e2:
77:20:bc:d5:36:b5:2e:6b:78:9e:72:c5:c2:63:01:06:ed:82:
73:ba:9c:9c:20:99:3e:8c:b7:51:41:32:ad:48:56:a9:ed:c7:
3f:fb:1e:ae:3c:a2:59:73:81:54:85:b5:38:ca:97:20:82:90:
a3:71:95:e5:51:a8:de:21:d6:fa:4b:a9:9c:43:6b:58:50:68:
3c:39:bd:25:f5:4c:ea:e7:2f:7a:d0:6c:8c:9a:f3:29:15:1f:
65:03:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 18:12:11 2025 by rpki-client