Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: 3modH8PJa76aLHm14gbIFKw0F/t5kDZw02yM+Mkr5Pw=
Subject key identifier: 20:FC:12:1A:D6:3E:EE:CC:51:14:B6:E0:CF:54:A2:22:AA:79:79:AF
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 01984A77D3346269DC830FEC966024ACE8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 0BE4
Signing time: Sun 27 Jul 2025 06:00:23 +0000
Manifest this update: Sun 27 Jul 2025 06:00:23 +0000
Manifest next update: Mon 28 Jul 2025 06:00:23 +0000
Files and hashes: 1: 2ATvNbnGawNlZZ5eknfDSbXFIzQ.roa (hash: tXSd9lU5fCgD64Z/fTQv/A1ZJJrB3ZcLdqsIZET5sKI=)
2: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: et8JjBI+yM0d8t+6Ym1YKaysfwT7egb/HxXzNJ9/FYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:d3:34:62:69:dc:83:0f:ec:96:60:24:ac:e8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Jul 27 06:00:23 2025 GMT
Not After : Jul 28 06:00:23 2025 GMT
Subject: CN=20fc121ad63eeecc5114b6e0cf54a222aa7979af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:6c:4d:50:57:ef:1e:df:26:96:f8:1c:44:
8e:0f:ab:ef:ac:b7:46:b7:b0:c3:52:ef:00:d5:8d:
1d:e7:34:8c:19:30:56:1c:30:ef:33:07:fb:b6:80:
f0:4f:79:56:8b:0a:e2:6d:86:f4:f4:41:be:d5:8b:
99:fb:79:55:be:0b:3c:39:39:cf:3a:d3:c3:aa:66:
52:e9:3a:0c:71:c3:d7:c1:88:ec:89:db:65:96:fc:
ee:36:aa:22:02:4a:7b:2d:46:14:da:f1:22:fc:cc:
f6:12:eb:78:39:dd:6a:29:97:df:20:0e:65:d8:fe:
11:0e:b1:ed:60:4c:01:9f:e6:81:9d:41:f0:1f:30:
31:de:74:7a:7d:0a:0a:b9:44:36:04:43:9b:8f:66:
88:a9:c1:f4:71:7a:2f:e9:38:f7:24:9f:58:d2:e7:
4f:6b:26:69:ae:19:0c:71:97:e0:e5:aa:64:de:0b:
13:0b:53:ba:8b:24:ad:62:90:01:67:aa:79:02:49:
59:cd:1e:a9:c8:cd:20:6c:d4:3b:bd:6b:a1:13:91:
44:b1:13:46:ac:9b:41:97:55:42:84:f9:25:76:f1:
d0:57:24:5e:61:97:56:d5:75:99:f7:5f:de:94:c4:
f7:95:a4:86:0a:1f:33:6e:29:de:76:cf:ac:5a:1d:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FC:12:1A:D6:3E:EE:CC:51:14:B6:E0:CF:54:A2:22:AA:79:79:AF
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d3:bb:be:1c:65:62:e9:26:c8:99:e7:84:c1:e5:9e:40:68:
70:86:d3:17:00:7a:a3:39:13:07:f3:9a:ed:cb:12:ad:ee:ce:
05:c0:9f:41:8e:a6:fc:09:f9:50:7e:65:99:f7:ef:18:3d:9c:
75:05:71:a1:44:b9:ab:84:c9:77:35:25:c5:f0:32:7a:70:44:
39:e7:82:61:2b:7a:a4:ed:e2:ba:c4:08:50:fa:20:b0:f1:8d:
b8:8e:11:3d:d0:c6:2c:37:4c:ae:a3:2e:60:4c:ce:47:c0:d8:
ce:91:39:a1:c8:d5:a5:94:d2:fe:7e:d6:86:45:69:c1:6d:cf:
8d:4b:c9:ea:e4:f3:59:6b:63:f7:51:b9:1d:58:1f:73:9f:45:
1b:e4:48:9e:7c:2e:05:6e:91:f1:46:9a:7c:1d:aa:3f:f9:69:
48:b7:5f:42:30:d8:0a:98:26:42:48:a3:9e:35:7d:9c:2b:63:
45:f7:55:62:b5:5b:de:61:c1:49:c4:ea:5c:ed:63:12:3d:37:
a0:c5:40:d0:64:cf:d2:fb:9f:11:90:9d:6c:7e:b0:ee:ac:7b:
35:ab:ad:7b:82:02:ca:6c:c1:fb:5b:27:70:6e:86:81:7a:9a:
15:9f:43:92:eb:02:ea:cf:51:13:63:c6:9b:06:23:2f:55:72:
08:53:0c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:02:37 2025 by rpki-client