Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: DE5ItGzIQA42G+KCpYZMa+nQ/0LG2auLzKb7XNpWQLk=
Subject key identifier: E1:57:93:97:4C:CA:3B:36:AE:A7:A8:DD:62:75:E0:82:BA:05:15:B9
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 019921E7AD38FE48B764A5D8FB361184A27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 02:00:55 +0000
Manifest this update: Sun 07 Sep 2025 02:00:55 +0000
Manifest next update: Mon 08 Sep 2025 02:00:55 +0000
Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=)
2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: bJSWwhtzg7xmQNYe8mWdfyFvjZDhvhl9fqM24u4JYdo=)
3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ad:38:fe:48:b7:64:a5:d8:fb:36:11:84:a2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Sep 7 02:00:55 2025 GMT
Not After : Sep 8 02:00:55 2025 GMT
Subject: CN=e15793974cca3b36aea7a8dd6275e082ba0515b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:f5:84:e9:88:b3:b5:23:64:30:a6:55:ea:
de:1b:2b:8f:dc:df:4d:cb:e3:59:af:aa:85:9a:70:
51:a8:be:b2:31:e6:ed:a2:09:d4:8c:d6:ca:8a:0a:
52:c2:00:e7:23:bf:3b:5a:74:dd:af:5c:40:a9:e7:
e7:3f:6a:b2:e0:bd:57:d5:74:df:1b:7c:5a:c7:ed:
2c:d7:1b:4b:b1:cb:72:a9:52:9c:19:3e:06:b7:6d:
2d:3c:6b:7f:02:d6:2c:fa:75:08:91:88:f4:9d:e9:
4a:66:40:ea:58:f5:98:16:1c:ca:a4:92:64:ff:ad:
23:f8:bd:e1:6e:b7:67:00:95:14:b1:ba:a5:0a:34:
29:13:89:ca:23:c1:66:08:da:ed:4f:d0:e2:ab:9b:
99:63:0f:aa:9e:67:1d:0d:e3:4c:d1:f3:e9:dc:4a:
13:d2:b7:d8:c0:83:dd:e1:4e:21:8c:24:16:23:09:
71:29:24:e6:96:81:14:f8:33:cc:7f:f7:ac:fa:ef:
5c:a3:b5:32:e2:2c:f6:f3:fd:bc:96:00:b7:2e:b1:
d0:76:b3:e5:b3:b7:bc:0d:19:5d:9e:67:c3:88:ee:
64:44:78:74:80:b0:9e:b5:b4:94:09:08:39:06:13:
64:28:5e:6e:a7:c8:19:68:24:dc:ac:81:e9:2d:d1:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:57:93:97:4C:CA:3B:36:AE:A7:A8:DD:62:75:E0:82:BA:05:15:B9
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:93:e7:45:f5:b5:9c:43:67:61:26:09:12:89:c3:01:ff:46:
fe:c2:76:10:fe:ba:76:4f:7b:59:40:63:6c:a1:cf:6d:0b:ad:
95:5a:29:b2:27:94:03:a5:7b:19:cd:16:76:89:59:43:42:1c:
a8:81:6f:c6:68:59:1a:16:ad:82:76:f5:86:ad:2a:98:3d:cd:
ae:1c:85:12:36:a8:98:bc:a4:89:e9:b0:0c:27:5f:74:f4:75:
46:e3:a3:db:50:60:56:20:b6:c8:f4:40:24:20:f6:f0:30:c5:
73:7d:76:ce:94:93:5a:71:b7:c2:fa:4c:3b:c4:ba:00:6f:d0:
7d:d4:d8:f9:4f:5d:5a:8d:97:ea:3d:b0:a1:c2:29:66:0f:27:
eb:08:7d:b1:20:f1:65:92:0a:87:b4:e1:a6:69:53:3b:cf:e7:
a3:6f:62:e6:11:2a:55:27:1d:00:73:8b:ee:d0:19:37:b4:09:
ea:07:a9:f7:b3:49:1c:ed:4a:3a:2f:2e:ee:3f:42:6e:1c:d5:
ca:59:20:06:df:c1:b7:48:36:10:fd:1c:e4:02:c1:ae:d9:f4:
7a:32:2b:61:a9:0c:fc:cd:5e:6d:24:81:ad:b0:0f:8c:5f:ae:
a6:b0:1f:36:f0:9e:72:46:97:a5:06:0b:10:d7:b3:17:13:0e:
85:61:57:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:26 2025 by rpki-client