Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
File: YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft (raw, json)
Hash identifier: +mU6DmOcwAt9KZigHBOYHjNk+DVx3oPimE3k27gwAnM=
Subject key identifier: 83:98:61:E3:FC:63:45:49:56:80:A1:C3:34:06:C7:EC:19:56:18:04
Authority key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
Certificate issuer: /CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Certificate serial: 01992255DF6FB7C983260422780A547604C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
Manifest number: 0563
Signing time: Sun 07 Sep 2025 04:01:17 +0000
Manifest this update: Sun 07 Sep 2025 04:01:17 +0000
Manifest next update: Mon 08 Sep 2025 04:01:17 +0000
Files and hashes: 1: 59_xhKD0T6uSuFEYj3I2uhiqG1c.roa (hash: MYVrtUe54xpHaYsIcVLfMIx5ZncQsO+bXIz8ZL41Ros=)
2: 9qqMkqBIjABklRo0TcvZzdRORAI.roa (hash: 2MCPGhcnLXE4oMEI7o6/tc2uu9oOZ9cwxOU5/mzOPUI=)
3: YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl (hash: u0dYHimi27RdevS8EwkWGrpyjrBCn+TwSM5FtXAPv7o=)
4: wXfYanJeLekulCR6gXF4hFd0qi4.roa (hash: kVi1Jps4RtrSVg9+xQdU2e8mO6fPm3vlK9bwNs7JRMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:df:6f:b7:c9:83:26:04:22:78:0a:54:76:04:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Validity
Not Before: Sep 7 04:01:17 2025 GMT
Not After : Sep 8 04:01:17 2025 GMT
Subject: CN=839861e3fc6345495680a1c33406c7ec19561804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:90:37:2e:e1:51:d3:db:75:d3:8f:18:15:
9d:f4:8a:9b:2a:02:90:ca:ed:31:fc:80:9b:fc:4e:
00:0c:95:15:e8:79:3c:ed:a9:99:de:bd:e6:94:17:
0a:b2:b8:ab:3e:a9:95:19:90:a4:5e:bc:be:cf:30:
fd:a8:72:19:c8:9e:94:c2:6b:cb:81:ad:9a:b2:25:
92:c6:1a:aa:90:81:7c:98:31:8b:3d:9b:1f:18:30:
f9:34:aa:27:9f:ea:d1:24:4a:3e:5c:d6:7f:45:9a:
e6:3f:10:9c:be:a0:21:20:60:4e:b6:44:89:0d:c5:
2a:a2:de:ab:11:42:34:ff:36:50:07:17:88:d3:0e:
83:19:9d:97:e1:74:5f:5c:1c:59:9d:4e:68:b1:89:
65:15:43:9d:a8:35:f4:01:be:88:a5:b7:09:51:a9:
1e:90:0b:fc:4b:ce:42:e6:a0:2d:ef:25:b4:67:cb:
2b:d9:a8:1b:61:c3:05:6e:5d:36:da:f9:56:27:5c:
0e:57:b5:20:d9:ca:95:a5:97:da:73:ca:c5:99:11:
d5:37:3d:b7:26:8c:4e:57:68:a6:41:c2:68:93:e4:
ec:70:cf:48:0a:c6:4a:6b:0a:08:ea:8c:e8:71:7c:
0c:80:eb:1d:11:f3:ca:a7:b0:7c:c0:39:e1:53:53:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:98:61:E3:FC:63:45:49:56:80:A1:C3:34:06:C7:EC:19:56:18:04
X509v3 Authority Key Identifier:
keyid:60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b5:7e:16:22:31:0b:f3:8e:2e:66:de:91:f5:fa:58:e8:60:
a7:5a:01:3e:94:57:c9:32:33:02:15:c8:21:74:64:af:fc:5a:
2e:d3:41:5e:a2:4e:f0:50:22:07:96:46:67:b3:4f:70:97:6a:
91:99:a3:12:ac:21:5e:34:34:93:75:a3:a8:0d:1f:c1:4f:bd:
7e:09:36:c3:94:d4:94:9f:63:0f:9b:f4:91:23:7f:fc:2c:aa:
ad:72:76:d9:fc:b9:37:c4:66:43:ec:0a:8c:b3:ca:66:e0:eb:
31:45:87:36:a8:81:00:70:5a:6a:01:c3:c7:f2:82:52:63:e3:
2e:2b:75:c8:c9:42:bc:ec:93:8f:19:54:cb:92:7a:64:5b:30:
49:bf:37:6c:da:cf:1a:eb:69:fd:d3:e4:19:a5:57:99:51:22:
4b:75:4d:81:ae:fb:61:8c:e3:91:08:9d:80:60:7b:77:0a:87:
db:ad:bb:d4:0c:f2:c8:e7:ba:06:b2:56:bb:67:bd:f6:e7:f3:
e2:a2:0f:49:f8:e9:4c:11:9e:05:8f:f5:e9:8d:d0:17:eb:53:
ca:18:6f:3e:80:31:18:9a:ab:fd:dc:4b:1e:ed:b2:b1:4e:fd:
8e:08:b7:15:a2:a5:2d:21:e1:8a:47:b9:f0:bb:5b:a5:d6:cc:
13:59:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:09 2025 by rpki-client