Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: rsTrhwblaSl3lQrKtwnO/ZD+ch6jJxXYOQElGk1m7VA=
Subject key identifier: C1:C8:5B:BA:CA:A3:97:14:7F:60:36:86:7E:6A:71:3C:B2:94:28:CE
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 01984852C07483CE9BC6D2BDAA0C0B4A50A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 0667
Signing time: Sat 26 Jul 2025 20:00:39 +0000
Manifest this update: Sat 26 Jul 2025 20:00:39 +0000
Manifest next update: Sun 27 Jul 2025 20:00:39 +0000
Files and hashes: 1: A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa (hash: P87warA/sxgPpSILGT3rzWqyvJsB40eA4IbxWKqMVaU=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: bSRNByTPLQ1+bOFMDO8lTh2MIU2e5WxgBCVdmEMNn7E=)
3: fPNzH31qX0DZ8V4rij7Xo2sRGO8.roa (hash: fPCz6t8saFe/YCV6Ne6vHfZKosVB2msyYYqQELy/A2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:c0:74:83:ce:9b:c6:d2:bd:aa:0c:0b:4a:50:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Jul 26 20:00:39 2025 GMT
Not After : Jul 27 20:00:39 2025 GMT
Subject: CN=c1c85bbacaa397147f6036867e6a713cb29428ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:67:2d:26:56:f6:ad:86:79:73:a1:0d:13:
fe:45:40:51:99:d4:c7:28:ed:41:67:15:ab:cc:20:
1b:bf:06:eb:2a:91:e4:ff:88:a8:0b:95:e9:d4:c0:
f7:80:8f:f4:c6:be:d2:83:6c:d9:38:ba:db:89:a8:
ff:ff:22:81:53:66:e7:19:1f:03:58:d8:75:27:61:
3b:9d:e0:42:e4:d5:72:3e:0f:9a:c8:aa:8b:14:b9:
ba:bd:c6:52:7e:b6:6b:b1:ac:5e:02:76:2e:fe:8b:
09:17:5e:cd:05:1c:9e:95:05:2b:d8:06:aa:ff:2f:
c4:46:f6:b4:3e:78:e9:51:08:ea:6a:bf:cb:b3:4d:
7f:e2:77:05:78:2f:3b:70:6b:bf:61:89:04:b3:1b:
7b:85:6a:7c:0a:bc:15:7d:c8:86:b8:f9:84:8a:e4:
b8:51:5d:46:0d:51:7c:07:2f:de:b9:1a:74:42:ad:
6f:4d:32:12:e8:45:59:f3:3a:8c:be:65:c2:37:d3:
16:29:65:2a:77:8d:cc:16:a5:c9:1e:bc:7e:f0:46:
fd:89:76:e3:23:4b:ac:09:df:09:2f:f5:e3:81:d9:
45:41:14:24:e9:f2:3e:e7:32:f8:a4:ce:6f:db:88:
aa:26:05:91:a2:1b:c6:c4:ea:90:4e:a5:3c:51:32:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C8:5B:BA:CA:A3:97:14:7F:60:36:86:7E:6A:71:3C:B2:94:28:CE
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:89:8b:0a:5b:50:8f:3b:9c:12:39:2e:ae:5b:b5:dc:a0:8f:
be:ca:b2:15:2f:16:34:56:64:da:72:41:31:d7:ad:fa:09:1c:
f2:69:cd:7d:47:f2:e8:1b:16:0f:bf:a4:94:de:95:63:7a:2a:
b6:70:fd:4b:01:74:83:8d:b3:53:54:1d:9f:58:fb:c2:c0:58:
80:83:c8:73:98:85:e0:8b:98:a5:9c:af:b3:b4:54:28:1d:ea:
95:d8:47:d8:34:4d:83:63:82:1b:42:e1:5c:95:14:bf:b6:09:
c5:f7:2b:1b:43:6f:83:9f:25:41:ea:18:54:c3:e1:b7:89:3d:
43:5d:3e:a0:4c:e2:de:52:1d:c9:34:09:9c:03:d1:23:e6:7f:
40:35:f8:60:e6:e2:ff:b4:60:92:5f:37:ee:8e:04:5c:16:a6:
43:0e:28:b6:c9:71:4e:d8:9e:4d:96:29:55:23:be:b3:19:38:
cf:da:3d:16:45:28:f4:4c:be:6d:db:6b:b2:6e:9f:2d:0d:0c:
00:fd:d6:8d:d4:12:09:37:0a:f5:b3:21:5a:7f:a3:82:2d:73:
fe:6e:c7:82:11:e6:65:39:4e:47:82:5f:7d:d3:fe:ab:ca:19:
13:d6:8e:aa:be:62:50:bc:85:0e:26:08:80:9f:ac:24:91:81:
86:82:90:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:37:40 2025 by rpki-client