Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: SiCTSeHXNlIzkuVKPCmd7zjV804JxOk0LRglSoAziwo=
Subject key identifier: 33:45:49:1B:AC:0A:B3:09:E3:AE:4C:4D:78:20:7B:82:F3:1E:0C:83
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 019854FC7F0D9948477A9026715FE7EBB2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 03A0
Signing time: Tue 29 Jul 2025 07:01:30 +0000
Manifest this update: Tue 29 Jul 2025 07:01:30 +0000
Manifest next update: Wed 30 Jul 2025 07:01:30 +0000
Files and hashes: 1: TFa2ZOwxN7oGU3_kx6uIZniyCkM.roa (hash: HhfxSeGnWIjZES5ZMXYca+rgo27hAD/QZjezzNFWuIQ=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: gasRAnealEPo/F9jLPHRZAhchkZjOtOXNtcpyUiMzgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:7f:0d:99:48:47:7a:90:26:71:5f:e7:eb:b2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Jul 29 07:01:30 2025 GMT
Not After : Jul 30 07:01:30 2025 GMT
Subject: CN=3345491bac0ab309e3ae4c4d78207b82f31e0c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:cf:d1:27:d5:66:b9:ae:6e:c9:3a:8c:d0:
cd:53:58:c5:5f:dd:a1:47:2a:0f:a9:44:05:7b:ff:
e0:06:d3:0f:76:a2:88:ba:f1:f7:b3:4d:28:48:42:
6d:ca:41:c6:91:6e:09:f6:f6:30:0e:69:2d:82:f3:
fc:8c:50:76:97:e6:3b:e8:f6:82:50:57:90:eb:1b:
9d:f7:6a:dd:7c:5a:68:c9:dc:98:e1:f3:73:c4:9a:
f1:2b:35:03:e8:d8:e4:a7:bb:2a:65:77:fd:48:52:
75:cb:5f:9e:44:f1:06:5e:6d:40:0a:7a:30:5e:99:
f8:a3:c4:85:cd:c4:07:41:8e:68:63:ce:ac:a2:29:
60:21:7c:d8:4a:1b:0c:b0:e4:7f:08:d8:27:74:e6:
19:8b:42:1a:93:57:ae:c6:09:51:cf:cd:05:bc:bc:
bc:3d:3a:ee:7e:cf:36:99:ad:46:31:2e:a2:39:41:
55:5f:71:78:c6:a6:cc:d8:a6:63:fe:ed:d3:25:a8:
8f:e1:b8:d5:fb:98:cd:17:17:b0:a8:af:03:ca:b8:
b4:b5:68:c1:e6:27:7f:b1:50:1c:d3:1c:38:de:bc:
fc:3f:61:92:36:77:ea:3e:7d:b7:0d:1e:4a:0a:34:
21:8b:f8:a4:d1:51:23:03:e5:a9:50:aa:a3:f4:5a:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:45:49:1B:AC:0A:B3:09:E3:AE:4C:4D:78:20:7B:82:F3:1E:0C:83
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f2:27:d1:1e:7e:0a:93:00:8c:f9:06:d4:4f:8a:12:1e:d5:
d0:6a:44:80:90:b1:4d:ba:43:4d:2f:30:b7:77:5d:ab:b1:00:
71:4c:4c:cd:03:12:73:08:09:1b:ab:7f:0d:b1:34:b5:6c:fc:
80:c9:ce:fe:b6:9b:17:9a:b7:4d:e8:05:d2:c7:8f:12:57:36:
bf:77:5c:d5:d4:87:96:32:e2:a0:0b:73:2f:b0:fa:0d:84:53:
b7:b0:a0:05:f6:b0:4f:fc:a3:86:c6:62:d0:15:53:f5:9d:74:
e4:b3:64:38:96:58:f5:2e:ac:3e:e3:5d:e8:41:13:4c:52:c5:
29:0b:92:b0:6e:9d:3c:7f:c2:57:55:34:b1:d9:2d:19:c1:57:
86:aa:9f:64:04:c0:a4:c6:b0:53:55:a5:91:81:65:f4:bb:60:
9d:75:3a:ae:26:b8:cd:0f:8c:92:a4:24:11:29:81:f8:3c:98:
4e:07:9f:03:f0:b2:34:65:56:cd:7b:73:d8:d7:f6:75:78:60:
e5:3e:a8:66:41:04:1b:29:95:92:70:23:21:89:6b:ff:8e:68:
46:bd:48:26:e0:c3:07:25:d0:4e:ea:5d:c6:34:3a:56:b9:b9:
b7:a7:d9:e3:59:71:6d:2b:aa:f3:db:83:b8:fd:bf:80:4b:c7:
ed:07:c2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:05:12 2025 by rpki-client