Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: eQoNkg7HfjCms+8DOAO9yrUC/tSVoZhoZbfhjtDqyE8=
Subject key identifier: 75:1D:90:72:53:46:66:52:38:EB:08:7B:3C:93:6E:CF:EF:3E:D1:41
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 019849D39DD860DA33314CA379D924516E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:01:01 +0000
Manifest this update: Sun 27 Jul 2025 03:01:01 +0000
Manifest next update: Mon 28 Jul 2025 03:01:01 +0000
Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: sPzQnDgJdo81YWCZq+/7sSjyxj3Br19OCK29LfEiI8k=)
2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=)
3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:9d:d8:60:da:33:31:4c:a3:79:d9:24:51:6e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Jul 27 03:01:01 2025 GMT
Not After : Jul 28 03:01:01 2025 GMT
Subject: CN=751d90725346665238eb087b3c936ecfef3ed141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:4c:b6:4b:de:19:1e:2b:e2:97:ff:4e:c7:
6e:a4:dd:25:ed:13:67:4c:84:08:13:80:55:3e:42:
12:04:a0:17:04:87:d5:12:fc:cd:5b:ba:51:5d:a8:
c8:f4:e7:27:08:49:7e:97:04:b1:d7:71:c5:a5:05:
dc:f9:23:c2:29:84:f3:be:0a:53:05:91:06:e9:89:
a3:2c:74:03:82:ce:75:11:0b:4b:57:72:f4:05:cb:
71:7d:df:de:6f:d0:73:dc:c3:7a:94:95:fa:e4:0f:
4f:75:38:50:0c:0d:30:be:59:a5:51:d7:0f:05:e1:
1f:cd:d2:8b:8f:0c:20:b6:70:e2:70:2a:f2:e9:23:
a6:62:b6:a3:e0:d1:60:16:78:99:e7:62:b9:51:5d:
67:88:23:7c:35:a6:9c:fa:51:50:74:7c:75:a5:93:
53:89:82:b0:22:bd:cb:19:98:f6:49:4e:05:ff:4d:
15:18:e5:53:50:b3:5b:ea:26:7a:7d:c7:d9:71:89:
de:57:2d:76:3c:a2:01:aa:47:da:70:24:08:72:6e:
4a:af:33:fe:cc:84:39:a9:8b:16:e3:d8:f2:83:01:
97:c0:b7:fa:8e:c1:05:1d:0d:51:2a:1f:b9:bb:d1:
12:37:25:e4:9c:fb:a7:5e:b0:08:4b:c3:bc:67:4d:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1D:90:72:53:46:66:52:38:EB:08:7B:3C:93:6E:CF:EF:3E:D1:41
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0f:de:65:a3:2f:cc:59:e6:f2:da:6a:57:41:24:93:fd:6f:
4e:fb:6b:a2:5a:57:5f:5a:14:4d:29:a6:70:22:57:b6:89:11:
e9:e3:77:ad:47:c5:17:c0:cc:c4:9f:b3:d7:75:db:e3:1f:30:
24:bd:e0:f5:d1:2b:3d:35:08:eb:7d:b1:77:2f:52:c0:3a:b4:
53:66:89:2f:cf:e2:65:a8:83:14:3e:eb:4c:6b:f6:de:63:c3:
d9:78:60:66:ac:77:45:5e:f6:dd:5f:36:b0:11:f6:67:f6:e1:
e7:73:4c:2f:19:7e:bd:93:80:10:cc:9d:f9:fb:0f:03:10:d6:
56:1f:2d:13:da:59:4a:b3:51:8f:96:4d:3d:d8:60:4a:3c:04:
87:2a:52:e7:d1:aa:f0:4f:a7:2a:47:6d:20:a5:6f:da:6b:9f:
0a:20:b6:68:59:fd:9c:60:d3:1c:f5:fa:c7:de:58:fe:28:5d:
7a:51:e1:fd:35:bf:a8:55:45:2b:e7:46:aa:e1:13:95:49:3e:
f2:7d:51:7a:fe:f8:95:2f:79:3a:f3:f9:f4:d2:e4:ba:0c:80:
4d:cb:3c:f0:5d:77:8c:13:8c:e5:30:2d:aa:b3:dc:08:28:32:
65:4f:a3:1e:42:f9:cd:be:27:c0:b5:d6:a2:fa:19:ba:e5:df:
ab:ca:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:06:43 2025 by rpki-client