Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: AxVUsucXGZRwcZ8/LZC5yyfOgnTHnIaT99zgZJbXJGA=
Subject key identifier: 53:CB:37:73:0D:C7:E0:B1:19:B0:A6:15:6A:81:28:61:51:35:CF:E8
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 019933135AE3DFB75E81E822AA3160987502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 10:02:10 +0000
Manifest this update: Wed 10 Sep 2025 10:02:10 +0000
Manifest next update: Thu 11 Sep 2025 10:02:10 +0000
Files and hashes: 1: XH3IImnZQORJDcY8K4c1sqi8npk.roa (hash: o40iI1L0Dj1I3pYOBYI+Dt7Aw45pOymMFxf/GGvdYFY=)
2: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: AFduBk276xnCjtuOUKZRZ6q/fP7dJ7mKslyhl4qR5Lk=)
3: iXJOEjsOn5QC56oWOinXWEqS8Pw.roa (hash: jHJ0wtuFjDDxH8Gh1uDFMh4KEFYRZhcEVsJ0/xmH1ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:5a:e3:df:b7:5e:81:e8:22:aa:31:60:98:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Sep 10 10:02:10 2025 GMT
Not After : Sep 11 10:02:10 2025 GMT
Subject: CN=53cb37730dc7e0b119b0a6156a8128615135cfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:13:05:cb:ce:70:d8:54:a0:39:25:fd:3a:
bb:40:a2:44:74:a1:19:cb:e4:de:15:e1:0d:d0:e1:
79:2b:f5:99:4c:ae:0a:aa:6c:89:93:10:4c:59:fe:
de:d1:2a:aa:59:1c:8b:55:cc:43:37:e9:f1:aa:ee:
b7:a3:f8:b3:a3:3e:ad:d7:1c:50:67:e5:a9:d0:2d:
2c:82:f1:c5:6e:2f:48:ad:35:f4:dd:a4:15:87:73:
2f:aa:7a:9d:b0:55:cf:8a:35:0a:aa:65:be:68:20:
eb:20:9d:14:47:ff:52:5c:fe:d8:d8:23:e9:45:1d:
a7:e8:29:b6:51:df:2e:2a:0b:eb:75:00:b5:56:a5:
43:e6:6d:e1:5e:57:d3:c9:f1:27:0d:65:3d:17:00:
22:f8:c6:0a:a6:47:73:0b:44:01:68:d3:62:5f:9a:
02:08:15:d9:11:52:07:a3:04:3b:18:f8:ef:78:1a:
c3:fd:30:22:da:a4:e7:b4:d4:6b:f1:b0:7d:db:ee:
aa:18:09:e4:49:41:ec:2d:73:7c:fa:8a:7c:ad:e6:
b4:72:95:05:2f:93:3c:38:d9:f8:00:d5:b7:03:8e:
67:85:32:0e:28:2b:29:12:07:69:2a:29:a6:6e:a9:
a4:a6:f2:7c:a4:c6:56:7b:48:34:3b:cc:df:8a:a5:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CB:37:73:0D:C7:E0:B1:19:B0:A6:15:6A:81:28:61:51:35:CF:E8
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:01:14:2d:2d:9e:74:c0:8c:ab:e0:15:a1:bf:ac:17:50:ba:
1c:ed:03:d8:9a:dd:78:c1:a8:9d:1b:68:89:86:18:eb:87:72:
55:3b:6a:d2:88:ed:4e:fd:ee:05:0f:62:f1:61:30:c7:b5:d3:
0b:a5:42:ea:c9:7f:1f:a6:25:04:ec:bd:cc:7f:20:31:e3:0a:
45:6a:fe:79:c4:9d:02:e1:0a:27:34:ce:02:17:3d:e4:c8:d4:
ce:e2:44:fb:a9:ce:d7:3c:5f:bc:98:64:44:45:00:6e:8f:ee:
dc:3b:ee:0c:71:43:c2:4d:f8:68:96:d5:38:0f:dd:27:b1:da:
22:06:2b:f0:fa:b5:d2:bc:13:e6:c4:ae:c3:15:a5:7c:dc:63:
bb:57:0f:1d:3c:8b:4c:ee:e1:77:c2:df:3e:d7:4a:8a:cd:f4:
7f:11:cb:82:7b:6c:47:22:24:03:25:10:d3:49:57:97:ba:45:
42:27:0e:41:51:4e:47:33:16:2e:68:63:d2:87:b7:48:7d:81:
3e:2a:54:a7:8d:68:6b:5d:9e:73:6b:12:3b:06:7a:e1:fd:ea:
a8:b6:e3:36:99:cc:97:53:ce:ce:3e:30:93:3d:b9:60:d8:b7:
69:39:bf:f0:3e:a8:f3:9d:2d:e5:a0:ae:eb:bc:de:55:b6:5c:
98:76:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:59:39 2025 by rpki-client