Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: SvFayC+UgS+VZDqw8WPxmBeTGGtxGgeiHJ6IRzQewnw=
Subject key identifier: 30:B2:87:5E:A4:C1:CB:3B:00:66:5B:FC:2B:98:CB:D3:B5:DD:F1:4C
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 0199368144ADC6016DA12602308747149075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 10E1
Signing time: Thu 11 Sep 2025 02:01:05 +0000
Manifest this update: Thu 11 Sep 2025 02:01:05 +0000
Manifest next update: Fri 12 Sep 2025 02:01:05 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: tP7+3ldrNjN1BLvDjUOLtvEnLC1GQCsgwZLaHVGP0HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:81:44:ad:c6:01:6d:a1:26:02:30:87:47:14:90:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Sep 11 02:01:05 2025 GMT
Not After : Sep 12 02:01:05 2025 GMT
Subject: CN=30b2875ea4c1cb3b00665bfc2b98cbd3b5ddf14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:56:66:ce:cb:89:18:b7:70:cd:2f:ca:1d:
f9:28:3c:3d:93:4a:17:2d:47:c4:23:64:48:51:31:
ef:fd:d9:53:7b:78:9b:9e:3d:4a:0a:50:a2:7e:ec:
98:27:22:74:e2:9f:65:ed:26:ce:c0:83:e7:e4:26:
81:4c:ad:ce:c2:af:13:b5:56:ae:1c:8b:c0:68:8e:
ca:e8:1a:1e:bc:ca:84:57:67:e4:88:b0:36:fb:6b:
67:0a:d8:a1:6f:09:2b:03:58:8c:f9:b7:42:5d:b6:
ad:8d:56:2b:00:76:77:3c:81:ba:14:ea:c3:e5:f1:
ad:69:b2:68:6e:4b:d8:bd:f3:5d:ce:7b:71:34:ac:
33:e9:35:de:4b:fb:4c:64:99:7d:bf:2b:e8:40:ad:
b5:fa:f8:05:89:ca:01:7a:06:d0:41:e3:00:7b:4a:
27:b2:91:b8:53:af:f4:4a:19:61:e8:f6:d5:0f:bf:
17:cf:9a:08:c7:d7:2f:f9:f8:96:04:96:bd:28:49:
5e:93:f1:45:8f:40:28:60:58:fe:26:4c:4c:7a:ac:
fc:c2:74:cb:86:93:78:f2:62:bf:0f:71:32:42:a9:
08:96:43:70:b1:44:34:1f:28:d9:eb:bf:e8:08:a6:
d5:96:40:30:3d:11:17:37:45:a2:f7:8b:82:d3:42:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:87:5E:A4:C1:CB:3B:00:66:5B:FC:2B:98:CB:D3:B5:DD:F1:4C
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ec:24:45:b9:81:54:10:40:62:01:9f:73:57:ca:9c:1d:a7:
a9:41:d3:6f:92:36:7f:35:c9:e2:25:ef:7e:da:90:0a:a1:b6:
cb:a1:d2:30:d5:12:0d:e8:fe:24:fe:83:78:f2:76:8e:8f:0c:
99:72:7f:96:4f:bb:b1:c4:1f:f8:74:7f:ee:c1:6f:1f:4b:b2:
55:83:1c:52:3a:4c:40:28:3e:a6:92:ab:8f:55:60:ae:9e:a0:
4f:a1:fe:23:e8:88:d9:40:1a:71:0e:5a:37:27:1a:09:90:0e:
c0:2b:69:64:36:f8:94:96:28:c9:4c:c4:cd:6b:bc:d3:d5:63:
47:b6:d4:14:5d:9f:cb:2d:76:a6:71:79:ee:1d:e1:77:29:3b:
70:1f:c2:92:96:58:11:58:0e:71:ca:63:56:da:3a:20:13:1e:
89:7c:e4:07:c4:93:f9:61:c7:f3:2e:8d:87:87:63:c5:6f:ab:
87:05:bb:e6:e7:81:cb:a0:d3:d1:12:dc:05:5b:38:1b:6e:e2:
9d:ef:a8:5a:e3:74:b4:d1:b8:f5:7b:4b:b6:fe:c7:38:46:d4:
74:96:a8:e2:c9:35:3b:d1:76:fc:c5:15:73:c6:49:1f:4e:a3:
4b:b9:f4:e3:4a:fb:9a:d1:fe:37:de:76:fb:bb:c8:9f:e0:6c:
ae:9f:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:54:24 2025 by rpki-client