Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: cBC+YkP7qQngeJrw/zDx51yYegHbHw6qURBLX+PldPY=
Subject key identifier: A3:E9:7F:DC:5B:0D:C3:23:FC:36:3B:5D:69:C6:C3:EB:E4:B4:0A:10
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 01983E3D34689F84316D50CA4425512BD4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 15FC
Signing time: Thu 24 Jul 2025 21:00:55 +0000
Manifest this update: Thu 24 Jul 2025 21:00:55 +0000
Manifest next update: Fri 25 Jul 2025 21:00:55 +0000
Files and hashes: 1: EwMUoWYW4dc0tRkkx15ciptmQak.roa (hash: IxyoruIJ2PWmvP6nW1K1qsmgYgo96Vwp6Gm5YCkQlWE=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: 18CQUZMbhRKNuBoNLBD7qi3hENrmyJ65lrFT2proqLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3d:34:68:9f:84:31:6d:50:ca:44:25:51:2b:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Jul 24 21:00:55 2025 GMT
Not After : Jul 25 21:00:55 2025 GMT
Subject: CN=a3e97fdc5b0dc323fc363b5d69c6c3ebe4b40a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:31:7e:d2:9c:e2:9d:1e:d7:30:44:6c:78:
71:19:fc:d8:51:6c:11:16:bd:6c:d0:ff:5a:74:85:
0d:5b:00:3f:05:91:a1:60:20:e9:1f:b1:94:3a:1f:
50:e7:5c:df:a4:db:40:12:b3:4f:69:4f:ae:ce:9e:
aa:a8:20:83:10:8a:37:d1:6d:cf:77:ce:b2:49:e0:
1e:7a:54:3e:cb:31:73:d2:3c:36:6d:fd:8d:55:52:
91:2a:1f:be:95:71:b1:67:12:bb:9b:d0:f1:cc:94:
fb:b4:bf:f6:79:45:c1:a7:64:33:ce:51:27:26:b5:
8b:6f:33:04:83:71:d2:66:fa:6e:7f:cd:e9:c4:c0:
cb:65:bb:9b:3c:1e:dc:05:1e:73:ca:46:2d:8b:c6:
30:85:b6:ca:8b:54:ed:34:36:09:0e:50:80:3f:3c:
94:b2:68:00:d3:36:23:75:41:7a:18:4a:5e:9c:76:
59:de:bd:9d:72:00:68:d6:00:e9:71:b0:1a:24:ba:
b8:af:e5:cc:f9:26:75:91:0c:c7:2a:7b:e5:5d:1d:
f6:e1:4c:28:5d:03:e9:7c:14:f6:9a:a7:f1:5a:c0:
d0:20:d4:04:e1:0c:bf:f6:7e:fd:bc:24:2a:67:aa:
a5:31:bc:e5:16:28:5f:32:da:5f:60:d4:33:fd:b7:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:7F:DC:5B:0D:C3:23:FC:36:3B:5D:69:C6:C3:EB:E4:B4:0A:10
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9a:cc:8f:23:67:75:4c:d8:d2:95:b5:05:9b:ce:fc:92:94:
0d:1e:04:9f:fd:95:8b:03:ef:4b:79:32:c6:0f:16:3c:59:ce:
18:ab:ed:9a:8d:9e:c4:ae:e3:d5:89:f4:6f:0e:18:df:ec:d9:
19:b2:aa:ce:95:8e:2e:af:32:07:bc:0f:a6:68:60:0e:08:4c:
82:63:ff:15:bf:08:ba:cf:88:9f:9a:49:47:4f:a5:5e:28:ee:
2e:c8:49:b1:27:b7:60:ba:9c:45:e0:a7:97:3c:03:fe:99:5c:
63:3f:ca:db:f9:dd:53:4f:6e:14:0a:91:a7:16:f5:4f:8e:f1:
85:b4:87:4a:dc:d1:f9:e7:79:12:4a:cb:d1:94:b0:ed:41:af:
29:ef:3c:a3:66:c6:8b:55:29:4c:d4:d6:c6:02:6f:c1:73:cd:
ee:f3:b9:64:de:1f:1f:f4:c2:06:8c:09:b9:44:b3:31:d0:6c:
9b:59:27:9b:bc:7c:8e:a6:fe:d6:0d:8d:fb:98:2e:2e:b6:04:
83:a9:47:e2:2b:57:dd:8a:8d:c5:71:93:43:76:4c:4d:c1:2a:
3f:cb:11:57:02:80:14:2f:9d:72:40:bb:63:cd:89:a5:85:3e:
4f:6d:bf:ed:97:a7:33:52:0a:27:7c:28:14:bf:e5:a6:ca:4b:
a8:66:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:15:55 2025 by rpki-client