Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: SO0tsfM22txnaj3PAxjgrk0CB0JcZQ7v8IuiQk0Mgbc=
Subject key identifier: 38:A8:59:87:67:29:10:B1:D5:65:0F:83:1F:2E:05:6B:91:79:12:E9
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 019922C327F71C4C912AD71418160E9D2963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0C72
Signing time: Sun 07 Sep 2025 06:00:38 +0000
Manifest this update: Sun 07 Sep 2025 06:00:38 +0000
Manifest next update: Mon 08 Sep 2025 06:00:38 +0000
Files and hashes: 1: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: rAaB5DUHpxTqmUsSSBJY0/9LupaO8hlWAar8zrqF4Fg=)
2: _B7qhSnCxfn7CerNmWLFyrIUzIo.roa (hash: SylKEkKlUGkISQweMYeNKNB3Kfx1l1zxuoZbI4A8/rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:27:f7:1c:4c:91:2a:d7:14:18:16:0e:9d:29:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Sep 7 06:00:38 2025 GMT
Not After : Sep 8 06:00:38 2025 GMT
Subject: CN=38a85987672910b1d5650f831f2e056b917912e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:d2:03:7a:06:49:ed:31:51:fc:be:5d:83:
2d:16:8b:c7:94:3f:64:de:92:a3:59:46:25:a8:77:
da:de:e8:c1:c5:91:d8:3a:d3:fe:b6:a6:9e:46:d3:
69:b6:a8:46:d9:d7:89:34:f2:db:9d:e4:a5:95:d5:
25:e4:81:c8:0d:68:83:35:90:31:f2:b5:a8:ff:c0:
3b:08:20:3e:2d:1f:8d:37:6e:92:e2:f8:cf:e1:2d:
f9:35:8e:93:42:9c:b1:7d:a8:3a:e9:e7:9d:b6:a2:
25:c6:1f:a2:94:34:35:89:aa:e0:d1:34:3c:10:55:
ff:b0:e2:49:f7:e3:09:16:6e:92:03:4e:67:0c:46:
b1:48:9a:bc:99:41:1b:7f:88:65:5d:ab:59:71:1a:
8e:b5:82:dd:94:1d:19:38:63:6d:e7:34:33:a9:5a:
1a:a7:7c:c6:7e:1c:b6:ad:0d:5a:b8:96:db:c7:d8:
bf:a2:3f:23:67:6e:f0:a2:1c:37:ad:4a:9f:73:c7:
c5:87:79:28:40:1d:a1:44:b9:53:b1:40:ef:bc:63:
5a:f1:99:59:77:19:8c:f5:53:58:52:ea:58:32:93:
70:63:58:43:f7:0a:9a:b5:15:f9:f0:44:ea:03:f8:
52:31:e8:4f:35:17:53:f7:6c:c2:0e:03:58:8c:76:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A8:59:87:67:29:10:B1:D5:65:0F:83:1F:2E:05:6B:91:79:12:E9
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:46:ab:77:21:91:a1:0f:06:91:3e:3c:45:30:56:39:45:cd:
0b:c4:66:f3:b9:93:90:1d:79:5a:12:cd:cc:d7:1d:7c:2b:7f:
0a:79:bd:f1:43:70:29:d3:48:03:be:20:84:d0:dd:4c:a9:b3:
ad:25:35:25:e8:3c:e3:a4:a4:8f:08:42:b0:56:8d:5f:f7:b3:
de:bd:2b:c6:24:af:d6:d5:18:e5:d2:7c:d2:94:d1:22:51:2a:
af:54:74:56:e2:1e:42:d4:65:eb:44:2e:ac:8d:55:d3:c4:f5:
dc:7c:fb:93:d6:4e:b3:2d:60:2b:28:bf:52:68:73:5a:6e:eb:
5b:93:37:84:1b:10:ed:a1:f3:e4:fd:3e:90:59:3f:c9:01:6f:
58:1f:3d:cc:06:3a:df:08:cb:5b:b8:56:a1:90:2a:39:61:2d:
f8:41:57:3b:72:7c:c0:40:ed:26:c9:c7:6d:cf:94:96:b3:f0:
3d:c9:90:23:fe:99:8c:b9:50:fc:f8:70:e6:ca:37:50:dc:d9:
ca:4a:4a:e7:7e:b8:8c:f2:3b:32:fd:a1:4d:2f:81:67:42:3a:
96:46:e5:1f:33:bb:71:bd:f7:71:87:c6:ca:33:02:fa:49:6f:
ed:93:e9:9f:cb:5f:79:8c:3f:8c:6c:2d:b3:8a:cc:1a:00:88:
64:c6:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:10:21 2025 by rpki-client