Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
File: _YgaVMfaqF6iOSqTEpRXjbzWp3c.mft (raw, json)
Hash identifier: PAT+wvU2YMo8dPS3BaAqShWUM1gQioG+7RdBZH7Vx/I=
Subject key identifier: 7D:1C:58:49:E6:00:74:C6:98:F1:04:46:FA:0A:7F:4F:FB:60:3A:AF
Authority key identifier: FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77
Certificate issuer: /CN=fd881a54c7daa85ea2392a931294578dbcd6a777
Certificate serial: 019853447A13D97C7C76C79DAC8A03DB4871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
Manifest number: 0171
Signing time: Mon 28 Jul 2025 23:00:53 +0000
Manifest this update: Mon 28 Jul 2025 23:00:53 +0000
Manifest next update: Tue 29 Jul 2025 23:00:53 +0000
Files and hashes: 1: _YgaVMfaqF6iOSqTEpRXjbzWp3c.crl (hash: kuzykLlSn3jJSjt9zVQKlpiXxpIftF96E9WqpeDZvyM=)
2: mP9V6Aj18VCMrj4XFwGFW0OW6UE.roa (hash: toSYJiG8N793iae27SJdKYFpAYguNX3k92Kzmh23MYM=)
3: t_aUQpjmHC8hsa9s9dp7snO6GLM.roa (hash: EMjKr1hOyaIzjfvQlqtk+HjL3E6MN7ciA1JY5E4ZJKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:7a:13:d9:7c:7c:76:c7:9d:ac:8a:03:db:48:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd881a54c7daa85ea2392a931294578dbcd6a777
Validity
Not Before: Jul 28 23:00:53 2025 GMT
Not After : Jul 29 23:00:53 2025 GMT
Subject: CN=7d1c5849e60074c698f10446fa0a7f4ffb603aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:87:56:46:20:26:2e:1b:a4:15:8c:9a:fc:
dc:4d:b9:13:d7:b8:90:b9:6a:ad:41:8d:3f:4b:5d:
bf:3d:a4:81:24:20:b8:76:3f:0a:75:38:86:b2:ad:
e1:62:59:2d:df:ce:9c:06:1c:db:aa:7b:a4:16:b4:
ce:39:c1:ed:bc:57:d0:49:1f:7b:66:fe:d4:00:84:
16:58:8c:8e:d4:c7:8f:5b:24:4c:3d:ed:61:33:5d:
ea:95:bf:de:5d:d4:75:cf:a8:85:40:2b:6a:31:49:
c6:b5:00:8a:1d:3f:cb:e7:fc:e0:15:bf:00:88:8a:
42:2e:72:0d:78:eb:7c:39:c5:24:bf:c9:e1:cb:81:
18:b3:93:ac:07:1a:a5:84:6c:d9:ed:48:b3:a2:20:
8c:5c:31:3b:1d:ff:63:ba:52:26:df:93:aa:8a:60:
3c:c9:3e:fc:56:e9:b8:23:f6:61:1e:d5:d9:f3:f0:
86:31:e8:d1:7c:2d:67:43:9f:ff:23:5e:10:c2:39:
db:39:71:2f:b6:11:7c:0e:07:4b:97:79:cf:00:28:
30:1d:2b:1e:68:b1:e1:c9:1c:93:c2:8d:a8:0c:ca:
ef:3c:4b:3d:61:0a:a9:53:ae:e2:ce:b7:5e:6d:36:
55:c1:e4:cf:c2:f5:2f:c2:9b:6a:45:21:0b:d0:26:
e6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:58:49:E6:00:74:C6:98:F1:04:46:FA:0A:7F:4F:FB:60:3A:AF
X509v3 Authority Key Identifier:
keyid:FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:00:fd:11:93:4a:38:c7:9a:34:61:a2:6e:ce:b1:75:76:53:
00:4a:da:a5:3f:d2:67:e1:31:05:76:90:30:2e:32:75:25:17:
03:3e:06:ca:1b:9e:ee:41:c3:5b:e3:2f:6d:38:15:6b:a4:ba:
f3:5d:0e:2f:a3:a4:65:5c:38:ab:73:36:43:3a:16:4e:0c:99:
91:5f:7f:be:b6:35:07:62:39:e2:2b:88:69:fb:d0:3d:6f:be:
df:a1:6e:04:59:a8:72:fa:3f:b5:6e:6c:30:64:2b:07:12:3a:
af:6b:96:78:31:d1:b7:0c:c6:0f:e5:a0:d4:e8:52:5e:f6:6c:
8b:a6:1f:6b:b7:0d:d8:0e:c7:0c:e7:0f:d7:44:ba:b5:85:d8:
ac:8c:a4:e0:66:82:4a:ae:02:f9:aa:4d:c6:6a:59:7c:b9:2e:
a5:96:8f:6d:10:c4:67:1e:f8:b6:b3:3a:d1:29:2e:92:e7:ca:
d2:24:ad:ac:15:10:ea:42:2d:d9:f2:a9:9a:14:e0:9f:6f:2a:
64:c4:66:2f:d5:0a:65:4b:bc:17:5c:ad:ae:85:f3:36:3e:4f:
3a:77:0e:c6:2f:ea:32:84:a2:c4:14:a3:d0:03:a6:3e:a0:64:
2f:73:98:fe:74:59:44:67:e2:cb:17:66:52:83:f9:16:8a:ec:
b7:bf:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:42:42 2025 by rpki-client