Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: lGMZdaFIz0PJ9pdb6JrtCQXSpB3iwr2hyHN5chy1PAA=
Subject key identifier: A3:4B:01:10:96:D1:78:3A:95:24:90:3B:7D:4E:CA:33:F8:D0:C0:44
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 0198529F7EFEC4326EBE385764C3C02594F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 1354
Signing time: Mon 28 Jul 2025 20:00:41 +0000
Manifest this update: Mon 28 Jul 2025 20:00:41 +0000
Manifest next update: Tue 29 Jul 2025 20:00:41 +0000
Files and hashes: 1: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (hash: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=)
2: S7ra6Ov-UpB_vWrQKASj1i2bpWU.roa (hash: kepYC+QCOG1xoHVARWHcfGe1QSDNXlo9WvXDhx0i4AA=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: PAihBP4JpuqGq9v+784sWoGEtfgshMzgcU0XIv6QwSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:7e:fe:c4:32:6e:be:38:57:64:c3:c0:25:94:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Jul 28 20:00:41 2025 GMT
Not After : Jul 29 20:00:41 2025 GMT
Subject: CN=a34b011096d1783a9524903b7d4eca33f8d0c044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:87:3f:43:0c:34:e8:e7:bd:68:42:ac:a8:
4e:1e:87:4a:90:10:56:81:01:f5:1f:11:9e:2d:a7:
23:6d:09:4f:2f:ae:ac:61:62:b1:84:84:40:63:7e:
6b:93:e4:7e:cb:51:21:ff:e0:7e:3d:94:44:d8:45:
0d:4d:4e:30:d6:34:77:47:7b:6c:65:cc:3b:8b:a8:
07:78:8a:c8:0a:4e:2a:b1:16:12:8a:4e:cd:4d:75:
d3:a5:02:7f:9c:e3:23:d3:bb:13:c5:fd:63:c6:c6:
7e:cc:26:6a:35:87:cf:7a:c1:92:94:a3:f8:be:3e:
cb:07:a8:ed:50:91:de:26:ba:37:8c:b5:03:ee:26:
d8:73:79:4f:ca:44:1a:c1:ae:6a:7a:0f:ef:e2:ca:
61:4d:a6:71:fd:9d:2d:96:b6:d5:85:81:01:33:ce:
0b:3a:88:b3:df:58:ba:f7:08:ba:53:a9:13:de:50:
19:4c:01:e5:83:ee:aa:6b:79:f9:2a:96:04:1c:23:
f7:e8:84:96:10:60:4a:75:0d:81:59:23:a7:6f:0f:
b7:bc:6e:f8:fa:49:fb:b3:23:4d:bc:6a:99:fd:fd:
d4:61:e9:19:7c:a5:d8:7c:67:f9:c7:12:65:9b:b7:
50:fd:5d:d1:ac:d1:a6:9a:ef:42:2b:ff:6c:22:6a:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4B:01:10:96:D1:78:3A:95:24:90:3B:7D:4E:CA:33:F8:D0:C0:44
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:42:bb:e5:f9:75:df:80:0c:a4:c9:19:fa:1a:1d:c2:85:5d:
2a:b2:e6:7f:e2:ef:94:b6:48:15:a4:73:d3:9f:c0:66:ff:49:
ef:25:82:13:d4:0d:3b:a4:03:44:46:50:88:b0:5a:50:05:17:
ed:53:26:7a:22:8b:f2:26:3a:8a:4b:19:79:1e:96:8b:47:32:
b0:41:ce:44:42:b8:e6:a7:3b:c5:e0:40:86:ec:f6:0b:2e:75:
08:a3:3a:eb:02:32:e6:52:70:fb:0b:85:86:68:77:7d:56:32:
b9:22:6a:97:1c:af:aa:19:51:f8:6d:85:d6:16:0b:81:0b:89:
5c:77:01:f9:98:c6:1d:48:cc:60:64:2b:2d:08:1a:4f:4f:b0:
60:ba:43:6c:80:10:64:00:88:d2:80:03:26:37:7a:77:bc:fd:
e7:c5:5d:c8:db:84:ba:c9:14:df:02:59:df:53:14:ff:e5:67:
a0:18:12:e7:1c:43:d8:7d:17:05:a8:9c:e0:ec:e7:b7:81:5b:
df:9c:44:dd:2e:40:bb:d1:1f:42:6f:f0:8d:24:7e:1f:38:38:
45:a9:fb:24:a0:c3:a8:4f:2b:a1:07:73:c7:61:81:5d:db:c7:
20:fd:5a:75:e0:01:d0:2a:7d:b2:89:36:24:6b:1b:6d:56:fc:
47:85:18:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:15:29 2025 by rpki-client