Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: nU6aPDR3T0v6hkeB2IGKUNf5Yg3kDYQNot7DUIveJ54=
Subject key identifier: 62:4B:C1:3C:09:03:9D:BE:3C:19:11:1E:AA:6E:F6:39:5B:6B:4C:5E
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019849D2E468C50CD5D812EC6BFBD715AFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 132B
Signing time: Sun 27 Jul 2025 03:00:14 +0000
Manifest this update: Sun 27 Jul 2025 03:00:14 +0000
Manifest next update: Mon 28 Jul 2025 03:00:14 +0000
Files and hashes: 1: PPDcjsjoszwTm8EI4XbGMJZozgI.roa (hash: 7Lx0Qx1q5+o5Xi1eI3iJhMLtFTgxseeHLhiTQPfBYeo=)
2: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: Mv5YDPUJH9stScaFtN7K+D82hl5yKv2hTyBDW9VfUdI=)
3: tedYlf87S78MkPQe8A70plM_Ngw.roa (hash: R2UtbWccTfdmsOnpPUNeRj+D5AnPyUqgeXRoHV5PeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e4:68:c5:0c:d5:d8:12:ec:6b:fb:d7:15:af:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jul 27 03:00:14 2025 GMT
Not After : Jul 28 03:00:14 2025 GMT
Subject: CN=624bc13c09039dbe3c19111eaa6ef6395b6b4c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:62:bc:8d:a3:22:2d:46:bb:8d:c6:b8:e4:
5b:95:88:0f:9d:38:9f:27:40:8a:1f:5e:93:1f:00:
02:c1:f2:7c:63:aa:84:57:f4:43:cc:c2:17:3a:4d:
43:6f:49:db:eb:a8:65:2e:28:09:20:5f:18:c4:8e:
01:76:7a:aa:4b:61:b2:fd:e6:81:86:49:13:02:c4:
3a:9a:27:02:b8:49:11:4a:e3:ab:f3:1c:16:9a:78:
4e:24:b2:d0:67:b7:39:16:6d:bb:3a:3b:f9:83:4d:
eb:3a:2e:b0:24:d0:8f:62:07:d8:c1:bc:26:59:b2:
11:2d:fc:9f:e0:63:99:00:7a:5a:ae:eb:f7:4a:2a:
b8:cd:95:ce:9d:81:e5:71:a5:e0:a6:ba:79:e2:a7:
5d:cb:ad:48:e8:65:63:2d:09:6a:66:2a:90:ff:04:
51:98:3a:13:81:f7:3d:c6:ac:8f:aa:9c:a3:d7:b7:
e0:a8:2d:09:e1:4f:57:ad:5e:9c:0f:09:a5:c7:e0:
9d:f1:8b:bd:57:48:03:be:6c:23:d5:e0:63:a3:92:
bd:f5:2a:fa:b4:0f:22:2f:8a:56:2c:cd:f4:7a:7b:
b4:40:65:05:8b:f3:fc:42:b4:3f:a6:54:42:94:f1:
b8:6d:8b:09:22:66:b3:73:07:e8:2d:b6:bf:ea:37:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4B:C1:3C:09:03:9D:BE:3C:19:11:1E:AA:6E:F6:39:5B:6B:4C:5E
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7d:84:3a:d2:92:20:76:40:ff:48:7f:f1:7a:e0:51:56:0c:
89:9e:e4:83:d7:e8:ba:f4:d6:e9:0f:40:bb:d9:ab:fa:e0:2f:
13:5d:b1:35:d7:0e:6d:57:68:21:0f:e1:eb:2e:19:1a:f4:dd:
ee:ba:fe:f6:4e:e8:67:f2:be:18:f3:06:2f:ac:1d:ba:ff:76:
57:73:7e:bb:0c:cf:06:41:f4:67:8e:8d:be:6d:5f:8a:8d:9b:
0d:12:9d:f9:68:35:7e:52:41:43:76:93:b5:34:ed:77:46:4e:
36:d2:06:63:a2:2a:e2:51:f0:f3:9e:72:c8:61:af:04:45:6c:
aa:da:84:3a:70:a6:b8:ca:6b:9b:51:4e:4f:c3:84:49:c7:08:
a8:e2:2b:9c:5e:78:17:fe:2d:b5:0b:25:4b:f5:fc:a9:0d:73:
05:f2:d9:92:f4:ac:6c:bc:2b:13:f9:46:cc:b5:4f:cb:21:7c:
b3:cf:1f:b7:a7:08:aa:57:81:2e:a1:45:d6:38:54:ee:ab:6f:
37:62:a7:f4:1b:d6:27:31:51:3f:e7:f0:a8:9b:64:ea:3f:d0:
35:97:a4:9c:d4:5b:93:57:e2:62:86:66:13:a0:d5:6d:5c:b8:
5d:22:e0:8a:71:91:22:73:2b:8e:dc:e8:3c:5f:37:0a:ac:8b:
49:31:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:24 2025 by rpki-client