Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
File: Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json)
Hash identifier: VwwVrNEac0cGjPQxN80KK2wZpLOaNNbKzvf17YhMwgI=
Subject key identifier: A0:01:B1:58:5C:1D:12:E4:8A:DB:A9:46:14:89:85:B4:CD:56:58:0A
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Certificate issuer: /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial: 019851209A550533F4CD361B2A8E75F740F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
Manifest number: 1020
Signing time: Mon 28 Jul 2025 13:02:27 +0000
Manifest this update: Mon 28 Jul 2025 13:02:27 +0000
Manifest next update: Tue 29 Jul 2025 13:02:27 +0000
Files and hashes: 1: YFIa0scc_xVUT5FKi7LKvASoEWc.roa (hash: V1CwEQLm9iXZGzptcaHc4LFmcOryBT2Kfmx1HSv4RTc=)
2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: bbfO2ty/yca2Yhz+x8oGWktxp8mYPjMQVt3hfwxGl+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:20:9a:55:05:33:f4:cd:36:1b:2a:8e:75:f7:40:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Validity
Not Before: Jul 28 13:02:27 2025 GMT
Not After : Jul 29 13:02:27 2025 GMT
Subject: CN=a001b1585c1d12e48adba946148985b4cd56580a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:bd:f5:cb:61:84:80:91:bc:ee:5e:1d:71:
70:b8:7c:2f:9b:4d:db:aa:bd:63:02:c9:b3:72:37:
86:91:13:0f:77:f6:b6:d0:55:72:ae:95:2e:fb:91:
3b:27:d9:37:8e:b6:85:9d:29:d7:63:3d:58:3c:7c:
c1:c2:aa:a5:46:d4:9d:3e:5f:a3:b5:45:dd:4b:fd:
41:cc:6a:78:75:b2:2c:eb:b1:08:5d:1b:02:06:e8:
90:c4:ea:2c:92:a7:dc:fa:08:40:33:b4:8a:ad:f0:
db:b3:21:29:72:e1:7e:74:da:f8:aa:1e:23:51:95:
9d:a8:af:c2:b0:bb:24:dc:38:f8:e9:fe:02:16:94:
78:18:51:58:fd:ce:2b:30:40:8a:cd:dd:98:01:57:
f7:57:99:07:7c:78:86:62:60:fe:f9:f7:3e:8c:52:
fb:c4:c2:a8:9d:de:08:cf:3b:a8:a5:c9:a4:2b:4b:
08:f7:73:e2:38:b3:67:b1:33:52:ba:52:93:e5:3f:
b6:c1:9d:28:f1:cb:36:d6:9e:45:5c:85:be:9e:bc:
83:8d:3c:25:03:60:1e:4b:0c:40:90:a0:ba:37:f3:
92:3c:d0:4f:4b:94:4a:16:9a:bf:c5:5b:f5:1f:d5:
f9:0a:a9:23:e6:3e:ee:a9:f7:2f:95:07:9e:42:55:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:B1:58:5C:1D:12:E4:8A:DB:A9:46:14:89:85:B4:CD:56:58:0A
X509v3 Authority Key Identifier:
keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:d3:e1:a5:5f:01:bc:40:44:b6:19:88:01:52:73:64:c2:13:
4a:94:6a:84:92:f1:2a:03:73:b4:68:ac:39:57:8b:46:56:1b:
fb:5e:67:da:46:dd:d0:9b:cc:df:a7:48:e8:38:75:ab:9d:26:
40:29:dc:de:37:ec:f8:be:e6:a5:99:f7:33:78:25:ac:5b:1a:
00:ec:fe:b4:19:b6:58:0e:44:f6:25:34:0a:a4:53:fa:57:29:
f1:8a:15:0e:3c:d4:49:92:48:5f:58:2e:54:9a:56:ac:e1:44:
d9:19:9f:80:8d:36:40:4a:78:3d:79:58:ac:c6:e4:87:4d:be:
28:3b:f7:8d:41:81:ec:be:66:e1:a8:95:ee:33:58:ef:17:5b:
8e:de:66:08:8a:08:f4:ab:16:7e:57:00:89:9f:87:a1:71:b4:
6a:bb:3b:31:bb:05:38:09:54:a2:34:48:57:fd:40:82:db:c9:
7e:44:a9:b0:af:1b:0b:80:7e:62:dc:30:6a:da:e4:30:a5:c6:
57:c2:e2:eb:f8:24:e4:80:cf:8b:96:1b:5c:4e:64:63:7c:bb:
70:d0:4e:41:1f:16:fb:5a:07:c4:9a:52:34:4d:50:b7:56:40:
8a:03:62:eb:06:71:b9:ce:b5:19:2d:6f:57:e0:d5:12:77:01:
5a:4c:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:15:32 2025 by rpki-client