Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: JTnaiVTA31ZigFbLfTDKhlEKZpChoJclihxYZw3kln0=
Subject key identifier: A0:09:DC:96:72:35:17:08:FE:48:2C:63:A3:31:EC:9E:BD:6C:C1:59
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 0198496636BE90596981CD2F61C8595E26CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 05CA
Signing time: Sun 27 Jul 2025 01:01:32 +0000
Manifest this update: Sun 27 Jul 2025 01:01:32 +0000
Manifest next update: Mon 28 Jul 2025 01:01:32 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: Ep+fGoCk2D7+33+GMW8tZ+gmMu+5Qa0VfNV/o4kll7A=)
2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:36:be:90:59:69:81:cd:2f:61:c8:59:5e:26:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Jul 27 01:01:32 2025 GMT
Not After : Jul 28 01:01:32 2025 GMT
Subject: CN=a009dc9672351708fe482c63a331ec9ebd6cc159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:23:b7:a4:71:38:3f:55:f3:90:33:6a:bf:
6e:02:af:89:4b:52:fc:75:6d:a4:94:f3:3c:ee:bb:
0f:82:5e:91:2b:c9:06:29:f9:6b:38:22:56:9e:cf:
0b:3f:92:be:ac:89:32:88:53:11:3f:ee:b7:22:d6:
b2:3b:27:78:a3:3b:c3:2a:cd:51:6c:85:a1:39:a4:
96:b3:f2:2b:17:b3:b6:a9:a5:62:8d:0c:fa:04:3b:
07:91:18:58:46:96:08:7f:25:55:3c:88:76:2b:d8:
db:c8:dc:34:47:97:19:ef:3b:42:84:cb:dc:89:ce:
1e:20:20:a3:d6:48:f2:f1:71:ba:93:38:30:17:11:
18:18:33:f7:10:fd:ab:26:db:7f:5e:f1:2b:74:9e:
80:bd:5d:f6:82:fa:da:0a:df:4a:e4:10:34:58:a9:
d4:18:81:0a:29:df:82:83:00:03:6a:1d:e0:be:08:
11:a1:0e:b0:60:6f:37:a5:92:ee:e6:08:d5:25:67:
6e:8f:47:ee:0b:76:0f:06:b5:8a:ab:f4:c5:a1:bd:
1a:be:67:bb:ff:56:d3:60:57:18:c8:db:44:0b:1b:
ee:f7:9a:63:19:11:f5:17:08:54:9a:bb:d7:be:a3:
b8:b4:b9:d3:b4:ff:5c:f2:b9:da:d2:12:62:62:26:
b1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:09:DC:96:72:35:17:08:FE:48:2C:63:A3:31:EC:9E:BD:6C:C1:59
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:65:06:10:84:bc:54:a8:12:42:3e:e7:f4:69:97:59:0e:b6:
31:60:dc:4b:47:17:19:a8:95:2d:e6:44:a2:cc:df:25:d5:94:
95:63:4d:ce:72:7b:1e:09:91:55:77:e7:96:ff:78:f5:7e:ea:
65:ca:c0:25:c9:3a:56:bd:a5:7a:0d:c1:9f:ab:c6:e8:ca:aa:
46:49:e0:ad:9f:70:b8:c7:a1:bc:41:32:f5:0e:ab:ed:2e:d9:
82:76:3e:98:06:20:03:6b:b8:fa:6e:12:f6:d4:d8:66:83:1e:
71:96:67:4b:83:f2:29:33:68:51:f3:13:8f:d8:8c:51:7a:c6:
cc:29:5d:60:e4:6e:41:54:c2:39:bb:87:e9:64:7c:fb:5c:b1:
13:e1:2a:dc:57:40:7d:02:ac:12:25:45:c3:10:a2:87:a0:dc:
8f:de:31:58:bf:ec:44:4d:85:d4:87:8d:15:ef:04:d2:8e:c5:
c5:89:a0:3a:db:20:1c:43:2c:71:2f:7e:17:2e:58:f9:6c:b1:
f9:28:a7:a0:75:52:47:a9:fd:98:a9:ad:80:59:6f:d1:98:4c:
fc:1c:e7:3f:e2:f8:10:dc:bc:95:9d:eb:de:20:f1:d1:41:c1:
27:6e:c0:a8:33:01:e4:1d:a4:ec:26:b5:59:f4:3c:17:2e:6c:
66:c1:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:57:51 2025 by rpki-client