Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier: elpg0jDyJTFRaamXFBI5FMqdGUxDUY6/YL088Jx1Ohs=
Subject key identifier: 43:B9:B5:22:92:B4:76:FB:FB:95:55:D1:AC:FD:AA:8F:22:D9:63:B6
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 0198530D9F5D3E0F7A8B50CAE58C6EC4E779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number: 1536
Signing time: Mon 28 Jul 2025 22:00:58 +0000
Manifest this update: Mon 28 Jul 2025 22:00:58 +0000
Manifest next update: Tue 29 Jul 2025 22:00:58 +0000
Files and hashes: 1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: IQ7D3vgd3FlsWN/QTnpEaKKfhFVBtedDrAOnmCCwnpI=)
2: trc9WRrx0GcsdoyWUNx1ByDuLOs.roa (hash: O5foXyUGS0pgYakUN+dT6VqKLJZgwkNIaZ4jTeLOo7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:9f:5d:3e:0f:7a:8b:50:ca:e5:8c:6e:c4:e7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Jul 28 22:00:58 2025 GMT
Not After : Jul 29 22:00:58 2025 GMT
Subject: CN=43b9b52292b476fbfb9555d1acfdaa8f22d963b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:d6:40:8a:cc:4e:54:e2:ec:44:ee:4d:da:
b1:81:a4:2b:b6:4d:d9:75:05:f6:c6:60:e6:f5:0c:
51:87:cf:27:86:34:61:91:c8:83:7d:be:30:ff:71:
fc:fc:0c:aa:8c:8a:d4:d6:eb:fd:5d:17:53:03:2c:
11:64:b1:7a:d7:80:f1:62:59:8c:60:d6:2d:04:11:
df:50:55:a7:e3:c8:73:ec:b7:14:67:4c:a2:7c:cb:
a2:d6:c9:a0:07:0a:58:48:8b:64:f4:46:47:40:14:
cd:c8:7a:b9:f1:5c:ec:5a:ed:8c:35:2a:43:a8:27:
0a:53:43:d5:67:c9:4d:09:0c:bd:ef:80:bf:bf:d3:
2d:89:0f:fa:25:3f:0d:44:f5:f5:92:b5:06:b4:39:
1d:a8:51:26:4c:01:26:79:3f:ca:03:4c:19:4c:69:
39:63:46:fc:55:ff:2d:07:9a:ef:64:89:42:15:76:
dc:e5:49:e1:14:89:a5:bc:c6:8e:7b:d7:20:3c:1d:
0a:52:82:b9:e8:37:d9:b3:f0:56:1b:e0:bf:be:d5:
db:b5:59:09:63:ae:87:22:25:f3:e6:1e:30:37:89:
13:84:5a:6c:c1:22:d5:fb:0b:02:5f:76:80:b7:1b:
81:79:eb:8a:0b:b3:26:ac:e0:81:bd:12:0f:91:6d:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B9:B5:22:92:B4:76:FB:FB:95:55:D1:AC:FD:AA:8F:22:D9:63:B6
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0e:71:72:c1:a5:9f:d3:f0:c7:53:cd:27:44:dc:85:c8:3d:
01:64:41:0f:2b:c7:8b:0c:af:25:30:ba:64:b7:52:24:8c:c2:
30:cb:74:69:11:68:4f:de:ab:90:5e:7c:69:c0:65:80:f9:e6:
ea:5a:a7:cb:9a:48:b2:00:a3:59:3e:2e:57:d9:17:e4:3b:1f:
29:53:d9:97:06:d2:18:40:bd:16:e5:88:ee:2d:e5:8a:f4:1b:
b4:e8:4c:37:1a:6d:20:ff:51:dd:d3:a7:7d:83:86:40:5f:23:
70:47:73:f4:52:2f:30:77:41:3e:59:d4:51:46:ce:e7:25:dd:
0d:60:ea:ed:f7:28:32:d3:83:4f:72:2b:7b:60:c7:92:23:00:
30:a2:2e:8c:35:bb:d9:b3:e2:d2:43:df:33:57:7e:21:a2:dc:
59:58:1d:2e:71:0e:87:15:6d:5b:61:f7:5b:66:97:e6:bb:02:
f3:1e:11:f8:a0:b2:cd:b1:77:bb:27:af:dc:06:5d:53:59:32:
e4:5d:eb:f2:88:ae:c0:9f:fd:05:88:69:ed:e2:bb:79:10:de:
85:58:e7:6e:77:bd:9c:b5:9c:ec:c6:3e:5d:e5:ac:34:f2:2b:
68:4b:bb:9c:f6:99:7e:32:bc:9a:10:00:44:f0:af:a0:1b:1b:
e1:cf:ab:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:44:57 2025 by rpki-client