Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: t5ic5N4WpuyTD9e+892sFHRpexImduYt+6zB8PsXkcA=
Subject key identifier: 27:AA:B6:DA:56:4D:4F:9E:0F:BE:C6:43:67:9A:C2:F7:89:B0:C9:F1
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019936809E3F501296C4078DC27289C121F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 07D9
Signing time: Thu 11 Sep 2025 02:00:22 +0000
Manifest this update: Thu 11 Sep 2025 02:00:22 +0000
Manifest next update: Fri 12 Sep 2025 02:00:22 +0000
Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: ei+KFQ2x2ELqFa2etBhT9Nxhv4B2hSCVqakicreU/y8=)
3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:9e:3f:50:12:96:c4:07:8d:c2:72:89:c1:21:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Sep 11 02:00:22 2025 GMT
Not After : Sep 12 02:00:22 2025 GMT
Subject: CN=27aab6da564d4f9e0fbec643679ac2f789b0c9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:9f:03:44:86:c8:5b:51:da:88:3b:c1:9b:
c6:5c:6f:d7:d6:8b:43:c3:b3:90:08:26:46:3b:3e:
6c:59:3d:1d:64:07:3c:3e:03:d8:7d:3f:ff:96:6b:
f8:85:9f:06:72:7e:9c:0e:7e:23:d5:ea:bc:f7:e9:
40:ba:4a:cf:e3:31:e9:15:4b:c8:60:0d:4b:b4:e9:
59:4a:51:e4:01:17:c2:81:8f:08:e0:04:69:05:7c:
34:db:12:e5:33:03:58:c9:89:61:70:a2:6d:cd:7e:
17:53:f1:b6:f9:38:fa:32:df:32:1d:8b:8f:e7:da:
fd:65:98:9c:1e:42:00:1e:60:d0:95:c2:57:77:88:
ef:02:97:4e:2b:e2:3e:56:74:72:87:70:42:c5:a9:
10:77:1e:2f:7c:94:44:02:fb:d2:b6:f4:a8:97:e1:
6b:21:3c:01:16:77:d3:35:fa:99:78:f9:50:e1:47:
6a:b1:e2:c1:dd:7d:27:18:b4:6b:44:48:9b:e0:cb:
4b:0c:d4:45:99:6c:02:bb:42:57:5f:9f:2f:5e:29:
87:b0:4b:a9:1a:13:62:f2:6a:e5:98:1b:00:89:06:
27:75:6e:97:a8:59:a3:74:91:05:10:bb:53:08:cd:
c7:56:da:37:18:c7:1a:39:38:3d:ed:a7:d2:d3:9e:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:B6:DA:56:4D:4F:9E:0F:BE:C6:43:67:9A:C2:F7:89:B0:C9:F1
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:60:9b:8b:2b:8f:a9:50:36:e9:19:55:c6:46:3e:a6:1e:f5:
66:7c:98:00:4a:dc:c2:d0:c9:c3:c2:d3:01:9b:f7:74:d5:54:
3f:bb:22:c7:f4:0e:12:de:1c:bb:58:a9:9c:07:6d:65:93:3c:
d9:52:e3:66:42:e6:30:f2:9f:c2:64:b6:ac:6b:f8:88:05:26:
94:44:78:9f:0d:1f:79:04:7f:02:cf:ff:dc:71:0d:ce:7f:71:
9d:d1:a5:ec:8e:4c:b7:c0:1b:4f:40:05:2d:15:eb:d4:88:10:
37:eb:f9:32:6b:a6:a1:33:a1:19:77:72:19:cc:13:1a:58:5d:
88:9e:0c:0b:84:7a:9d:55:94:41:9b:19:10:5b:6c:45:c2:90:
97:53:50:ae:35:d1:03:3e:b7:4d:ab:c2:55:e9:5f:c0:bf:56:
0e:4b:4a:6b:ef:43:6f:19:09:a6:59:08:c3:fe:e7:83:50:bb:
ea:37:27:c6:6f:20:11:05:93:87:b1:e7:1c:56:6f:20:18:de:
c4:5f:67:b8:5e:f1:2c:61:55:ca:73:69:06:95:f7:9e:1f:64:
06:1a:6f:21:6a:1a:78:1d:09:69:67:b6:02:51:71:34:b4:06:
b6:3b:ea:57:4d:95:4a:d1:35:cd:d5:67:60:89:fd:b9:7e:57:
68:ba:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:17:56 2025 by rpki-client