Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File: Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier: CT+bysOJQDkx8RDiFL2PEcLqsxLpVnJhrckSBx2KhIY=
Subject key identifier: 4F:49:11:C7:51:A8:EF:D0:54:AC:C3:80:A5:10:B6:F0:7A:24:0D:FA
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 019844E374EF489A3AF0DAF0270E11C950BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 04:00:13 +0000
Manifest this update: Sat 26 Jul 2025 04:00:13 +0000
Manifest next update: Sun 27 Jul 2025 04:00:13 +0000
Files and hashes: 1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: mVo9b0nyKAox7HowRsIOtXKr7CDGhasVqffJ++ZAthI=)
2: dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa (hash: PG+NsqO34TjeMURDoubqwQXu9F/XY0vJGA8jsdkgloo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:74:ef:48:9a:3a:f0:da:f0:27:0e:11:c9:50:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: Jul 26 04:00:13 2025 GMT
Not After : Jul 27 04:00:13 2025 GMT
Subject: CN=4f4911c751a8efd054acc380a510b6f07a240dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:a2:e0:b5:9a:86:cf:18:2f:b5:81:fd:3d:
4c:33:15:8a:a1:6a:0e:d0:9a:0c:81:9b:36:ae:ed:
16:14:18:81:59:22:3b:59:da:90:cd:b2:1c:70:44:
c9:b2:83:dd:b4:cb:54:af:c4:e9:f7:7e:7d:76:3a:
c7:5a:28:b8:ee:1a:8d:74:05:a6:5a:4a:fd:a6:c9:
7f:56:a4:8a:24:e3:be:f6:cc:75:b0:b0:9a:c4:c4:
99:e3:d1:ce:91:04:4c:ed:ce:f6:2a:46:4c:dd:59:
b4:8f:29:24:8c:7d:d2:1f:f3:b6:80:c4:ec:d5:c2:
e7:a2:e3:db:4d:b3:e5:cf:84:bd:91:90:d4:1c:03:
d8:87:41:fa:d9:d4:f5:9a:27:24:0a:9b:19:d4:45:
5a:dc:a4:2c:45:5b:6c:b9:56:b8:4b:0e:dd:11:c6:
37:a9:19:c4:a8:1a:2d:9d:0e:c8:ca:8f:d5:75:d9:
49:6b:20:df:43:0e:b9:bb:8f:ef:cf:9e:c7:b0:97:
8f:2f:28:c8:4e:03:b4:1d:75:b1:63:e0:e6:bf:9f:
3b:86:e1:f7:6c:05:2e:87:51:de:88:b9:ae:da:35:
5e:fb:f5:f2:ff:81:b6:f7:0e:f7:83:8b:3f:40:f7:
d6:8c:95:08:3e:34:42:a6:7a:1e:d9:35:86:e3:3b:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:49:11:C7:51:A8:EF:D0:54:AC:C3:80:A5:10:B6:F0:7A:24:0D:FA
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5f:1a:27:b8:61:7f:ab:ec:2e:55:6e:66:ab:4a:12:13:20:
11:33:81:9c:e0:79:42:39:a2:20:6a:03:65:24:e2:cb:8a:22:
e5:cf:55:8f:f5:8c:b3:50:e9:be:6d:5e:e6:ce:2f:5f:9c:88:
59:70:c4:76:3f:55:0f:58:47:52:dc:96:d2:6c:c5:30:79:da:
51:0c:04:15:25:ef:a5:84:2a:28:50:88:3a:00:50:9e:0d:40:
08:63:4c:3e:41:07:cd:00:25:8d:9a:15:58:5e:9d:ec:ae:99:
1f:59:52:9f:fb:f0:66:da:72:f6:74:6f:95:f5:89:cd:2c:a2:
fb:1d:bb:c4:a4:5f:86:44:32:d6:d0:de:23:23:e0:6e:06:e4:
b9:e2:c9:27:6d:9f:c3:3f:1e:04:26:45:16:f5:cb:c1:41:00:
1e:35:cb:29:56:aa:db:7c:0b:5c:aa:f6:cf:85:db:d6:11:27:
80:c3:53:a6:c2:63:06:49:b7:5a:3f:da:17:3b:2c:1e:07:04:
37:54:21:72:bc:c0:5e:e7:b9:83:42:5b:71:32:6b:fa:5e:8d:
e3:6e:76:4c:2f:04:a4:0d:cd:7c:d5:b4:a2:04:55:2b:fd:75:
43:9a:46:bc:5c:dc:78:b0:00:37:f8:91:22:81:f7:7a:7c:18:
a4:11:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:52:04 2025 by rpki-client