Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: ClEnOLsj1u7EXroiOVHGkf8C75fRUYt8zx2tYTmN3ZA=
Subject key identifier: 50:A9:F4:C8:88:D4:57:7B:7C:A7:C2:E1:F7:7C:FF:DE:E6:7C:6C:39
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019848C0E9D7AE2B45803E31F66E796772C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 22:00:59 +0000
Manifest this update: Sat 26 Jul 2025 22:00:59 +0000
Manifest next update: Sun 27 Jul 2025 22:00:59 +0000
Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: k5yum9EUxGD+Uqb5jIlgtfnvEIy86iq9sVK4xq3NEVY=)
3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:e9:d7:ae:2b:45:80:3e:31:f6:6e:79:67:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jul 26 22:00:59 2025 GMT
Not After : Jul 27 22:00:59 2025 GMT
Subject: CN=50a9f4c888d4577b7ca7c2e1f77cffdee67c6c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:83:8c:81:2b:39:ba:f8:61:60:62:52:27:
1f:12:9d:8a:63:8d:64:38:ae:e0:72:c0:04:e5:57:
d1:c6:5c:d3:df:02:98:76:77:1f:e7:bb:ac:64:75:
69:b1:0b:c9:92:82:f0:09:5f:0c:b3:43:7a:e3:c8:
9d:59:13:6a:4b:98:6a:31:de:77:a7:a0:bd:5d:b9:
37:3b:6a:2b:c3:89:f2:74:cc:75:36:83:5e:cb:a8:
94:ff:b0:4d:5a:e8:fb:43:83:db:71:c0:51:d2:ee:
d4:41:0a:0c:1d:32:30:23:20:a0:f8:67:48:3a:79:
01:32:ad:6d:89:9e:2f:00:79:4e:54:d4:86:87:23:
bd:28:18:54:84:4a:11:d5:3e:98:6b:9d:18:28:11:
ae:87:b5:ef:20:9e:0b:76:9c:a0:c6:ab:3c:ef:40:
aa:d3:8d:5d:b4:99:13:b6:96:d6:ca:a7:9a:37:5e:
fa:39:87:87:89:53:c4:8f:ce:c6:43:37:c2:41:9e:
59:47:81:30:ed:53:cd:92:5f:84:17:14:83:36:59:
6b:ce:d3:4b:24:45:5c:fb:a1:d9:f0:a0:e4:31:92:
ca:55:00:d8:12:b7:85:71:22:b0:a0:10:7f:d6:5e:
be:f6:1a:ca:98:62:11:6a:7a:6a:06:7c:7a:dc:0e:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A9:F4:C8:88:D4:57:7B:7C:A7:C2:E1:F7:7C:FF:DE:E6:7C:6C:39
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:81:41:fa:e9:f3:0b:80:6d:7d:47:2f:84:30:72:b5:ed:23:
cc:98:4c:24:34:ea:83:18:cd:02:6a:02:e0:ee:b2:2d:c2:0e:
5c:34:56:fd:77:61:ab:2c:4e:80:08:e9:54:d4:8a:8d:b7:ca:
3a:d8:5f:71:73:34:0e:f3:4f:a8:99:79:8b:5e:bd:e6:99:e2:
46:5e:66:ce:80:a7:d9:f7:d0:e5:e2:c3:81:94:4f:c3:1b:34:
28:75:8e:e5:4a:ad:d7:e8:6b:47:73:3d:de:a4:d1:75:6f:48:
fa:44:14:a0:22:37:11:7c:5d:38:8d:d7:d2:67:56:c8:7b:c5:
0b:fa:59:98:ad:73:58:94:40:34:37:03:22:e5:2c:92:38:84:
f0:13:ac:84:86:20:bf:43:42:76:a0:30:2d:b8:db:e3:af:f7:
73:39:93:31:b0:dd:92:6b:a1:bd:66:66:ab:71:3c:3b:04:1c:
aa:2e:80:16:b8:09:8a:cb:32:10:c1:fc:d7:46:aa:ab:0b:df:
a7:9c:50:ee:14:77:e8:40:46:28:81:0f:84:c6:77:36:4e:e3:
4a:83:ff:b3:3c:c3:77:ad:82:48:13:63:04:2c:cb:5d:c7:7e:
01:18:02:87:46:c5:51:f3:0f:26:d5:ff:92:9f:d9:13:79:67:
87:f6:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:39:14 2025 by rpki-client