Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: W01Z5WqSjli9ANoE9bJVG3xBFtqIirr4ET8NRpDtF+M=
Subject key identifier: 80:DB:DE:CB:73:F8:8D:D1:58:9C:54:27:76:4F:7F:63:87:85:39:E2
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 01993124E85799A85E3539A9344070C637A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 1681
Signing time: Wed 10 Sep 2025 01:02:06 +0000
Manifest this update: Wed 10 Sep 2025 01:02:06 +0000
Manifest next update: Thu 11 Sep 2025 01:02:06 +0000
Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: 73VNA4iB/tHMc2J1+CPVlkVYfhABwjNpKtmYMUNExBo=)
3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:e8:57:99:a8:5e:35:39:a9:34:40:70:c6:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Sep 10 01:02:06 2025 GMT
Not After : Sep 11 01:02:06 2025 GMT
Subject: CN=80dbdecb73f88dd1589c5427764f7f63878539e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:7b:a5:64:ad:32:86:87:0f:b1:98:d0:dc:
22:7d:54:9f:39:90:ea:d7:08:cf:20:06:68:92:ed:
1b:4c:c4:6e:ca:63:58:1d:b7:cf:2b:a7:87:7d:18:
05:26:80:d2:bb:b7:1d:17:fb:ef:10:70:f1:17:12:
f7:60:f9:6a:52:18:39:a9:ef:9f:78:53:72:a7:28:
e5:72:f1:78:59:7e:11:d7:68:ef:2b:6c:f5:85:9e:
31:a1:44:8b:c7:70:54:af:fe:82:6c:b2:f5:12:c7:
a0:67:48:85:42:41:19:d3:b6:80:bc:ff:53:5f:11:
fe:05:f5:7d:92:8b:10:9b:92:75:15:de:29:e6:4a:
ef:44:7d:bf:86:87:28:6b:80:f8:35:ca:33:ff:78:
76:d9:c8:37:79:17:49:f3:8f:af:3d:0c:f3:12:40:
34:e9:45:a0:48:ec:98:ff:a0:6e:fd:2a:db:b3:a4:
c8:16:18:12:fd:cf:d1:81:ff:a1:32:cd:d6:4c:c8:
08:76:ba:4f:77:b2:44:f6:42:6c:f5:c1:ba:11:d4:
72:89:69:1a:dc:6f:cc:7c:04:29:9c:88:ee:93:90:
5f:cd:75:4f:c5:f7:c7:63:ab:fa:79:b6:af:0a:f4:
f1:67:2f:5a:fb:fc:01:d9:44:fe:a1:3e:64:55:f0:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DB:DE:CB:73:F8:8D:D1:58:9C:54:27:76:4F:7F:63:87:85:39:E2
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9b:a9:eb:52:73:e4:d2:db:14:b5:1b:c7:5c:8b:13:0e:6c:
53:fc:e9:eb:a4:3c:4e:b4:08:02:24:76:f0:8a:dc:a6:31:99:
5d:23:06:be:5e:2a:74:09:ba:88:fc:1f:41:fb:b1:8b:f1:29:
a2:74:01:f4:c7:f1:2f:12:f1:3f:7d:8e:79:bc:63:89:47:01:
48:4a:e1:71:32:b0:3f:43:81:6d:a7:73:9a:a1:62:d5:05:1e:
9a:3c:38:c3:14:31:f8:0b:de:7b:62:7c:43:bd:0c:bb:b2:35:
57:9c:32:3a:75:cc:1f:b9:6f:d4:c7:f4:bc:1b:6b:b8:0c:ac:
df:9f:fa:59:4c:55:cc:41:29:df:cf:b6:74:bf:0e:b3:5c:d9:
74:bc:12:85:18:82:82:dc:6a:e0:6c:b3:ab:94:bd:52:89:28:
f1:59:c8:1c:ef:ac:a4:4c:74:73:e7:fa:37:69:a1:1b:56:83:
bb:f3:43:45:35:34:90:ef:2b:dd:fe:5f:f3:e2:d5:bd:b9:74:
79:f7:3a:4e:48:27:45:92:07:78:4a:04:9c:e7:3f:b9:00:29:
c6:d9:52:ef:1f:22:5a:0f:aa:d5:b1:56:5a:af:5e:7c:ea:f4:
1d:2d:64:3d:8a:0e:98:01:17:ff:37:cd:59:bd:b2:12:8b:b5:
7a:a0:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:24:00 2025 by rpki-client