Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: XhaaOhffR1XQH6N5xStQXBmSCpeUIzq1CSMmG9hjPrc=
Subject key identifier: 10:FA:B7:E6:98:31:F5:A2:1D:AE:B9:E0:CA:E9:92:AD:EF:92:CC:F5
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019849D30BFED0D82C29E7486705347808D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:24 +0000
Manifest this update: Sun 27 Jul 2025 03:00:24 +0000
Manifest next update: Mon 28 Jul 2025 03:00:24 +0000
Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
2: d6ev5Lq_SgXWZaDiFmTX8HhBeK8.roa (hash: 7NMCb/zeY3TNsahsQ59GZgDuhRzC5SGnnyyZpSOipqs=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: xrwZD5UrXIEpi3IotLkd0Fcj10XXfdj2RSanUrQunzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:0b:fe:d0:d8:2c:29:e7:48:67:05:34:78:08:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jul 27 03:00:24 2025 GMT
Not After : Jul 28 03:00:24 2025 GMT
Subject: CN=10fab7e69831f5a21daeb9e0cae992adef92ccf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:4f:cb:d6:16:27:f9:d2:42:b7:ee:f0:18:
f2:60:2f:95:a1:f6:ed:b8:41:96:48:f3:69:7e:c1:
aa:42:ee:ae:67:2d:f6:7f:52:28:6c:55:60:3d:27:
f6:93:a6:7d:dc:37:02:fe:91:de:fc:9c:24:5d:0a:
43:05:d7:56:88:51:f5:67:37:f5:0d:c8:d6:f9:e4:
71:7a:fe:e4:81:8c:11:38:aa:3e:d9:4e:39:c1:79:
36:90:d6:09:4f:74:56:fb:fb:f1:cb:ea:c6:8c:f0:
ef:57:5e:04:86:b0:b3:ae:cb:91:e8:e4:1c:05:f4:
da:5b:d5:91:3b:1b:b3:68:0a:e7:e9:ab:94:a9:3a:
32:0f:11:f1:ef:93:c7:80:91:6a:82:66:8a:2f:43:
3a:a1:cf:b9:cf:c0:c9:e8:5e:0b:42:86:de:08:30:
cc:d5:b6:4d:40:10:51:ca:b4:5f:b7:ec:a7:cc:26:
54:09:23:ce:18:8a:40:9f:dd:24:75:f4:9f:e4:16:
02:87:d8:21:20:09:f5:66:50:20:90:b1:41:f7:59:
63:2d:3f:ce:44:08:b6:e9:a6:bb:06:20:9b:79:18:
e3:69:32:f3:c7:e4:33:05:fe:91:ba:be:7f:64:2e:
92:dd:25:98:d6:7d:c7:43:c0:6d:a9:8b:18:0a:ae:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FA:B7:E6:98:31:F5:A2:1D:AE:B9:E0:CA:E9:92:AD:EF:92:CC:F5
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5b:73:d9:77:e5:85:fa:d7:bb:fc:81:c3:de:6f:68:d8:8a:
0e:ac:45:2d:0b:96:7a:f8:09:a3:9b:7a:3a:3c:cd:53:49:e7:
84:2e:a5:fd:b9:96:eb:df:b9:14:8c:58:d5:b7:78:85:60:87:
24:92:2a:68:cc:78:df:d9:06:fe:33:68:d0:30:ca:30:71:2e:
1f:00:bf:38:0f:84:df:1c:d6:77:df:04:e3:f8:a1:e2:6a:4b:
89:04:7c:fc:ed:5c:bc:5f:21:25:34:4d:ba:c0:f5:e3:c9:ad:
4e:83:c3:0a:cb:43:d1:d2:61:40:07:76:be:29:1e:c8:48:9b:
57:da:26:5b:9e:74:a5:cb:b5:21:3f:f3:df:e2:3e:e3:a8:b8:
f5:73:04:78:df:37:4a:e8:42:8d:a0:2d:0a:2d:bb:3f:e9:a0:
e7:05:3e:d5:22:22:7c:fd:0b:cd:5b:37:05:ce:84:ea:58:33:
7e:c6:12:47:90:7f:6a:b9:73:df:ee:e1:29:ea:12:f2:04:6e:
f8:81:54:59:7d:c5:d6:d7:e6:a8:4e:ac:8e:51:9b:ef:ff:92:
d6:53:62:1d:2f:17:51:31:bc:37:de:1c:77:b0:ed:4f:45:c8:
9a:80:f1:56:26:59:6c:2a:ea:8b:bc:9f:b6:af:68:60:dd:99:
90:8b:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:00:36 2025 by rpki-client