Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: U/QLpDpSVPxfcILlnEWdxtCfDZk4SUZacLD4P6tWVIc=
Subject key identifier: FA:C9:2E:BA:CD:00:51:D7:75:AE:67:D1:44:F2:85:67:25:C3:3A:02
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 0198451A50F1C4D788A2CE121AC39081950A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 075C
Signing time: Sat 26 Jul 2025 05:00:09 +0000
Manifest this update: Sat 26 Jul 2025 05:00:09 +0000
Manifest next update: Sun 27 Jul 2025 05:00:09 +0000
Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: j7DmGsfzIdN1/plRgXiIv1zdeaKK094i9LAvFWlF/p8=)
3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:50:f1:c4:d7:88:a2:ce:12:1a:c3:90:81:95:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Jul 26 05:00:09 2025 GMT
Not After : Jul 27 05:00:09 2025 GMT
Subject: CN=fac92ebacd0051d775ae67d144f2856725c33a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:42:ab:08:ab:dc:e9:99:4c:2c:1b:a5:16:
c8:bc:b1:83:b3:54:1c:d3:57:45:b2:d5:df:6a:bc:
9c:02:96:e0:08:40:01:ae:ec:4c:7c:43:c9:27:e1:
52:e2:45:7c:91:e5:72:58:15:a6:67:be:e1:e5:38:
b7:42:59:7b:b5:77:52:03:70:5c:96:ce:75:06:82:
e8:fb:a3:1d:22:37:97:e4:b3:78:72:b3:22:a8:9c:
a1:b7:d4:6f:5a:43:3e:ee:aa:eb:3d:c1:9f:a7:ad:
a0:16:3b:f3:13:01:8b:d1:7a:4c:68:3e:93:f0:58:
84:56:40:a2:f3:3f:20:32:c5:bd:dc:c8:87:96:0b:
5a:56:5c:23:fc:e4:32:fe:b7:b7:80:54:af:e7:1f:
45:81:43:9a:fa:37:67:97:b9:7a:38:d7:1c:21:dd:
f6:1d:e3:33:21:35:52:34:ee:87:08:6e:23:fc:03:
4c:bc:5e:eb:7a:79:7f:82:90:b5:73:61:71:40:23:
54:2b:83:d5:db:bd:ce:74:eb:ec:3d:0f:a5:61:87:
67:41:2c:8e:a4:8d:80:c7:f9:44:6e:46:ff:ea:87:
86:9f:9a:47:0c:aa:f1:1e:a3:3f:04:c5:b6:27:64:
df:2c:74:38:53:36:bd:e7:e8:87:da:95:7c:58:92:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C9:2E:BA:CD:00:51:D7:75:AE:67:D1:44:F2:85:67:25:C3:3A:02
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4f:91:4a:4e:2b:50:d8:ea:d3:e1:d3:ca:86:a0:d2:38:55:
23:84:65:2f:66:e0:b3:33:27:54:2d:81:d7:1d:cc:b2:d9:7c:
46:99:1f:10:7f:e4:31:22:6a:f4:ae:51:2d:15:aa:41:b9:17:
eb:fc:27:11:70:04:66:25:7e:bb:e5:2d:89:26:9d:a9:1c:39:
b2:1a:6d:6d:ed:d5:13:67:9c:d0:d3:be:0a:ee:92:9d:9e:c6:
75:82:f7:9f:fd:65:f0:79:49:e7:de:fa:68:3b:00:5d:33:d9:
a1:30:34:7f:d3:ec:62:78:31:d8:9b:7f:80:ec:78:f4:30:4a:
2c:bb:57:d2:12:bc:42:bd:a0:ef:ed:92:d1:46:1d:4a:92:0d:
c0:cd:99:12:c3:4e:0c:5f:45:f0:37:fd:6f:c6:70:95:54:75:
d3:f3:d9:a1:77:76:4d:39:02:bb:25:bc:8b:a6:8e:70:60:03:
ac:17:79:b9:26:44:90:54:14:90:0b:41:c7:93:03:cf:9e:4e:
9d:21:52:27:cf:9e:56:19:81:36:fe:70:76:b5:a2:41:3d:5a:
42:49:33:47:1d:d8:9c:54:ca:d1:b4:13:b3:c8:de:d5:17:b6:
f2:18:5d:a7:d7:cc:c5:0e:ae:68:a9:88:c0:ba:aa:fe:de:ef:
b8:e4:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:37:53 2025 by rpki-client