Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier: kSPzpFu36Vlv+ceflqsM7jlBXefGkvskEGsDM89M4Jo=
Subject key identifier: 35:BF:37:3E:55:38:93:AE:C0:BA:CD:9D:7E:2E:75:B9:DD:22:0A:57
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 019852689D633F2B2816C00D195A93D9BF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number: 1609
Signing time: Mon 28 Jul 2025 19:00:44 +0000
Manifest this update: Mon 28 Jul 2025 19:00:44 +0000
Manifest next update: Tue 29 Jul 2025 19:00:44 +0000
Files and hashes: 1: 0DkU2fgO6IQWtgrbjz4ILjM1Zl8.roa (hash: GEp4fdAPa044+J00YTmo8n4i3COcJ21fXImaGvohmEY=)
2: Vuv4D49Do3ihPrgPrplFw5fVmzc.roa (hash: jtLLMKBGV7msWBJkQMiWYOk1XXEmcC3ekc6iXglJO4U=)
3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: MvOhNTU5eZFCufGe4Cm2nqlKZaxzVOJpWa6a7IOCdVU=)
4: jsd32GyUcOABxL3lbaYKa1U9QxQ.roa (hash: iIGtz/WTQ1JA6imPxlRGSNb4RKMQ3XrYAPCJJH9Foiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:9d:63:3f:2b:28:16:c0:0d:19:5a:93:d9:bf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Jul 28 19:00:44 2025 GMT
Not After : Jul 29 19:00:44 2025 GMT
Subject: CN=35bf373e553893aec0bacd9d7e2e75b9dd220a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:4e:2b:48:11:7d:2c:56:e0:bb:36:36:4a:
ba:e0:43:63:37:78:9b:e4:f9:65:56:1c:4c:7d:a5:
c9:9a:1f:6b:11:78:2f:7e:fc:63:95:7e:d2:24:70:
58:74:91:3f:c1:ee:36:de:14:b6:f0:fb:6a:86:2f:
c6:d1:bc:e3:77:35:d0:d7:0d:cf:1a:94:2c:89:3e:
b8:f3:27:80:0f:f1:f3:89:41:0b:46:05:0c:89:cd:
62:04:f1:ba:98:a9:4c:7c:a7:22:47:b5:89:84:37:
02:f0:fd:6e:b9:95:02:55:48:18:8e:65:62:0b:f4:
78:a9:c6:50:65:88:14:2d:9b:79:e8:0b:97:d3:a5:
63:7f:01:9f:59:a8:6f:23:30:c7:74:53:8a:51:c4:
ff:54:ad:27:a6:44:88:cd:18:3e:cd:e9:9c:c4:28:
c8:8f:4d:42:41:2c:be:09:24:f5:c3:92:3a:31:ad:
d7:63:b9:c5:c7:fa:98:92:8d:51:da:72:2d:83:3c:
5c:60:a1:d9:f5:80:fd:ab:74:90:2f:65:a2:21:a0:
6b:df:bf:4d:79:b3:ab:b7:22:e9:ec:98:8c:5e:f4:
f0:f6:d4:7b:6f:20:a4:e2:8a:5d:fa:2b:f8:76:d3:
9c:d6:c5:9f:de:16:64:52:a1:62:34:e1:80:43:9d:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BF:37:3E:55:38:93:AE:C0:BA:CD:9D:7E:2E:75:B9:DD:22:0A:57
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:b5:ac:b0:71:62:48:a7:b5:33:ae:84:cc:38:3e:d5:de:
8c:82:14:8b:17:c3:7e:e6:0c:ec:b2:a9:dc:e0:cd:c6:67:e4:
a4:a3:39:b1:65:17:56:8e:e2:1a:fc:da:1d:eb:4b:c7:12:db:
b0:00:77:44:42:05:c6:25:8d:de:8e:f2:c8:31:1e:64:3a:35:
37:bd:eb:75:20:77:18:5f:2e:c3:a6:16:1c:f9:69:14:0f:8f:
19:80:1b:24:93:ca:cb:71:53:0e:cd:30:d7:8b:47:55:8d:e1:
ae:0b:0c:e6:9c:36:40:f7:c5:1c:b4:2c:ce:b1:16:6b:d2:e1:
77:9c:a8:e7:a3:d9:a8:d6:30:9b:fc:fc:25:89:87:1a:58:94:
5b:74:af:cb:b3:34:a5:3f:a7:eb:a9:32:63:83:10:9b:a9:d5:
be:18:44:15:48:f6:9f:36:35:07:c3:f9:39:df:cb:46:2f:de:
00:02:66:45:70:9c:c2:34:d9:2f:3b:e6:8d:29:41:ce:7d:35:
c4:11:cc:29:45:1d:09:33:e5:23:d9:3c:ac:02:7d:2f:b8:b9:
f9:5c:70:c0:3b:78:75:c2:e0:46:b9:a2:b9:ba:41:a4:5e:bb:
38:be:83:5f:d2:f3:38:6e:e8:35:e5:06:00:1d:18:98:c3:21:
e3:ab:53:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:50:09 2025 by rpki-client