Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
File: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json)
Hash identifier: pSiZvnmTduAj4m0zEgRxntF0pMftty1yjlZBDovYWnI=
Subject key identifier: DD:2F:EF:63:9D:56:28:1C:28:3D:09:FA:0E:9A:11:CD:46:2C:64:76
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial: 01984107203E540BADA256C49B7DF5DFBA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
Manifest number: 0696
Signing time: Fri 25 Jul 2025 10:00:42 +0000
Manifest this update: Fri 25 Jul 2025 10:00:42 +0000
Manifest next update: Sat 26 Jul 2025 10:00:42 +0000
Files and hashes: 1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: 3FCZIjfRDlwrax6OCugqPI4/wdy9BHloUgAVXWK1/x4=)
2: 1Xq5NcZrjlFL23QLXPQ2cW-IBls.roa (hash: HbBq96j6XF4InfiwCDfEHXOlCXag1YicK/gCEex0C0Y=)
3: WPkeJ7VVhsQIoqJp0qX_1NW0Ods.roa (hash: mxYAtiu5jjm0C1BeKBzzTHZkmyPXrcSCe59vx0mWEsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:07:20:3e:54:0b:ad:a2:56:c4:9b:7d:f5:df:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Validity
Not Before: Jul 25 10:00:42 2025 GMT
Not After : Jul 26 10:00:42 2025 GMT
Subject: CN=dd2fef639d56281c283d09fa0e9a11cd462c6476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:ba:3d:4c:1c:a3:12:a6:69:cb:b4:e3:f2:
b7:69:54:b7:b7:aa:fc:4d:5e:f9:d6:71:ec:e0:9c:
55:1d:d3:4e:cb:6b:7e:a0:f8:54:2a:dd:02:e3:d0:
d4:29:74:21:73:f9:66:6a:41:a3:73:9e:96:cb:15:
15:07:3e:94:9b:ad:ec:b5:2a:b4:15:38:74:06:3c:
a1:d0:3f:5d:c3:d0:9d:3a:43:6d:3e:c4:80:04:7d:
05:a4:d2:53:23:b3:cd:df:1f:35:dd:bf:ff:0c:d5:
4e:21:36:80:61:4a:ab:3c:9e:60:06:9a:04:5f:41:
0d:60:4b:71:42:6b:95:fd:84:bc:49:ab:8e:ff:39:
e6:34:c4:9d:66:0b:c5:17:73:2f:dc:d9:b2:af:4f:
af:eb:20:ac:16:cb:23:3a:2d:b7:48:d5:70:18:13:
a5:d2:ed:5e:3f:d5:b9:09:28:df:24:f4:d1:18:f6:
04:fd:c6:5c:d6:62:0a:f0:36:74:49:3a:f0:3e:2a:
dd:9c:b6:ee:81:df:55:eb:c7:91:9a:e2:58:59:6a:
78:6e:25:cf:13:f0:16:c4:13:3e:f8:b8:9b:12:ff:
12:81:fc:55:50:76:5d:60:5c:ee:f5:3a:47:9c:ed:
87:42:af:45:9b:cd:e8:81:ff:cc:6f:52:f8:72:e9:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2F:EF:63:9D:56:28:1C:28:3D:09:FA:0E:9A:11:CD:46:2C:64:76
X509v3 Authority Key Identifier:
keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:f9:d2:f0:53:6b:e8:bb:3f:ed:e9:48:05:f1:fa:d1:6c:0c:
e5:8f:92:d9:91:07:b7:0a:78:99:35:3f:4e:d1:6d:63:02:bc:
29:e2:fd:15:41:66:2f:36:c3:91:be:8c:af:1e:09:34:58:50:
78:09:25:48:0d:83:ae:25:00:d9:07:90:f7:25:0e:50:11:ce:
6e:5d:68:ff:55:8b:6b:ca:33:11:61:a2:7b:98:38:f0:2b:01:
9c:c1:cb:80:eb:05:fe:29:14:8c:4a:39:f2:b2:52:c7:b8:7e:
7b:c0:ad:42:f3:65:43:d4:c8:d4:f9:c0:6d:15:1f:31:9d:2a:
a7:b9:c2:52:6e:19:6a:5c:01:28:83:bf:95:d3:f3:3f:32:40:
00:e1:e9:07:2d:52:ad:fe:dc:00:7f:41:8f:9e:83:a1:17:f3:
e9:78:82:61:d3:06:52:0d:05:ba:55:ed:75:02:22:f9:8d:6e:
ee:ee:3a:8c:da:d0:57:46:8f:55:bb:2b:28:9a:2d:cf:bf:3f:
99:b4:54:8e:a9:21:8d:71:fe:41:ee:bb:d0:85:cd:72:cc:d4:
26:a8:aa:9c:40:9e:b9:02:5f:de:ed:f1:62:e3:e0:1b:bf:e2:
23:82:9f:eb:7c:ee:e0:09:2b:f5:29:10:9d:d6:3f:e1:1c:1e:
c8:19:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:51:16 2025 by rpki-client