Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier: 2mHiNICtgSCPSk790HlcOKreEQQd1Q9Flqnbw1l+hMU=
Subject key identifier: 66:3B:44:08:89:DF:AF:B4:88:00:96:AA:24:01:BA:7F:AB:CC:83:4E
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial: 01984A40DD6BC8FA8A72923B67E089B43E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number: 05BF
Signing time: Sun 27 Jul 2025 05:00:21 +0000
Manifest this update: Sun 27 Jul 2025 05:00:21 +0000
Manifest next update: Mon 28 Jul 2025 05:00:21 +0000
Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: USSCM3mFYvVzDRD1DZhhYc34joEdS44tON0QkesWQLY=)
2: gQ1Mk4Ko4bazOy7pZDxAv9B_6qk.roa (hash: FoB5dUGf24mZ9gRXtihHS6AK0Gj+K7gCvGHMZywvDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:dd:6b:c8:fa:8a:72:92:3b:67:e0:89:b4:3e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
Validity
Not Before: Jul 27 05:00:21 2025 GMT
Not After : Jul 28 05:00:21 2025 GMT
Subject: CN=663b440889dfafb4880096aa2401ba7fabcc834e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:8b:3b:e4:98:93:0d:7e:e5:6d:d3:59:2a:
e9:8e:3c:e0:2d:ce:48:6c:26:ef:54:dd:64:db:6d:
ba:31:16:fd:b6:4b:63:10:3e:77:bc:48:04:18:a9:
82:bb:0a:37:ef:f1:a7:62:bc:96:a9:22:0d:4c:33:
ed:3b:22:2b:c5:af:49:3d:21:d4:f7:99:6d:dc:67:
e4:c8:d1:d1:9a:cb:28:bc:d8:dd:15:ae:4c:4b:e8:
b0:36:b2:9f:1e:45:9d:c2:19:61:4b:13:2b:94:a6:
80:b5:e2:e1:0c:49:e6:b2:8b:3f:c8:f2:80:39:7e:
19:22:b2:8c:97:1f:de:5e:f1:76:9a:f4:69:dc:80:
d3:75:45:e2:35:06:61:81:42:d9:53:47:c8:4f:bc:
36:87:71:24:f6:3a:64:44:9c:b5:e6:56:5f:14:6d:
c3:20:15:22:67:bf:98:bf:40:45:a5:b3:02:b2:d6:
3e:18:52:18:23:10:97:4a:b2:14:58:a2:24:7f:80:
52:ca:d5:6f:b1:06:dd:7d:8b:d1:83:15:35:34:d0:
ea:b8:94:e3:57:ab:ed:49:85:05:f1:97:c7:f2:d7:
14:16:c0:a7:75:f4:a1:c4:9b:ea:87:f0:0a:f1:37:
37:83:26:15:9c:fc:26:51:c2:84:60:86:f0:d7:68:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3B:44:08:89:DF:AF:B4:88:00:96:AA:24:01:BA:7F:AB:CC:83:4E
X509v3 Authority Key Identifier:
keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:7b:10:ea:1b:af:a3:65:71:43:58:78:3f:8c:9f:bf:38:f6:
a1:2f:98:b2:84:67:af:2b:46:62:65:df:01:1f:15:20:c8:c5:
ce:7a:af:7d:13:ce:1d:62:c7:b6:63:bc:42:03:b8:a5:fb:83:
5b:c3:15:06:05:72:e8:47:62:2d:59:eb:c5:a7:ec:22:01:92:
74:93:05:f5:56:69:c6:f3:65:27:ea:cc:96:01:49:6a:7f:87:
5b:d1:48:8a:f5:2d:04:6a:e8:e5:7f:59:9b:b5:9f:76:7c:37:
0f:bd:b8:9a:be:58:71:9b:8c:34:6b:33:1d:de:45:30:6b:44:
5d:db:61:3d:0f:88:64:45:91:33:51:cd:04:18:b0:1f:26:f2:
ba:01:dd:d0:88:bc:55:78:36:88:32:ea:a6:df:70:e4:ce:04:
6a:00:32:a0:b4:07:96:3e:59:05:95:ab:e8:4f:8f:72:37:58:
07:4f:17:8a:1f:a3:29:51:5c:85:a0:ab:66:92:27:a9:9d:a6:
8d:60:42:b1:6c:b0:0f:22:cc:20:7a:e5:3a:3c:39:30:7d:66:
67:70:4a:4e:b9:de:93:69:ce:6a:22:59:23:45:95:39:9c:b8:
22:cc:f7:05:ca:38:86:bf:48:ea:87:73:63:ba:d2:3b:45:43:
9d:63:34:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:29:24 2025 by rpki-client