Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: PnM1moETkZyiuwhDUMatIaEo4an3fsHtCVTpWSm8nFY=
Subject key identifier: B2:4D:32:92:35:AE:38:F9:27:0B:71:96:09:E7:CF:50:09:85:8B:4C
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 0198C75AEC5B9E49F257635FCB341C93F9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 086F
Signing time: Wed 20 Aug 2025 12:01:21 +0000
Manifest this update: Wed 20 Aug 2025 12:01:21 +0000
Manifest next update: Thu 21 Aug 2025 12:01:21 +0000
Files and hashes: 1: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
2: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: KBbbz1k0okNwmwiJTwurfE2tirS4skLSmB2tMtVjpEc=)
3: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5a:ec:5b:9e:49:f2:57:63:5f:cb:34:1c:93:f9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Aug 20 12:01:21 2025 GMT
Not After : Aug 21 12:01:21 2025 GMT
Subject: CN=b24d329235ae38f9270b719609e7cf5009858b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:ea:28:5f:d9:2e:6d:dd:f7:52:13:d6:84:
0f:96:35:34:c1:43:19:0a:40:db:bd:3d:6c:2a:27:
11:ef:ae:60:0d:7d:d8:6c:65:d2:4e:5d:84:85:9c:
cc:86:4b:6c:43:fb:1f:60:7b:db:00:fa:d9:15:e7:
6c:ab:12:01:ad:1a:d2:cb:3a:fa:fb:14:4e:e9:8d:
83:d1:c8:8a:7c:bd:e5:74:e0:9b:d1:3c:55:97:ff:
b9:95:d8:d6:54:7d:52:82:cf:93:33:02:3f:be:2a:
68:3d:4f:85:11:4e:09:cd:a4:03:93:5b:ab:a4:16:
c0:44:ab:c4:39:91:15:ed:85:29:83:49:72:24:84:
36:12:ce:5f:2e:ef:b2:b7:01:97:86:dd:f2:6b:a2:
39:3f:76:d2:6d:8f:f9:15:8b:86:0d:b1:7f:be:7a:
65:cc:74:d0:51:39:b8:22:0f:5e:3d:59:2c:b0:73:
81:e5:7a:c0:6b:4c:90:b6:fb:d6:d6:b3:ba:07:11:
ad:1e:75:e8:a7:5f:7d:83:4a:59:82:9b:bc:2e:ec:
ee:7b:ea:3a:fa:f6:a2:ee:81:db:7c:9b:93:42:41:
db:d1:90:5a:ae:12:a0:14:c3:4d:09:21:b3:dd:56:
c6:80:bf:d1:a6:2d:4c:36:8f:72:30:94:46:73:45:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4D:32:92:35:AE:38:F9:27:0B:71:96:09:E7:CF:50:09:85:8B:4C
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:15:d2:95:36:a6:db:68:21:cd:12:cb:10:24:a9:72:30:48:
46:44:18:e7:60:38:48:91:58:3e:ae:c4:79:22:18:02:e0:a8:
dd:9e:a5:a9:aa:fb:e9:c0:2f:d3:d7:a4:cf:b0:1d:7f:45:ea:
c3:0a:95:71:61:60:ee:20:af:6d:07:08:7e:51:0b:9f:4e:e3:
75:0b:a1:1a:2b:3d:f2:72:56:f6:8b:7b:58:60:fa:19:a8:d2:
b1:d2:26:db:85:d3:ef:32:29:dd:12:a7:7b:43:57:7b:a9:79:
36:6f:a5:2a:ea:1d:26:f9:7f:b9:37:20:2e:2a:57:54:40:ce:
eb:4c:92:af:0c:03:a3:d0:84:72:9f:3a:19:0b:1d:b0:83:fa:
57:5d:ed:da:e9:6d:91:c9:d2:23:b4:38:c7:a1:85:fb:83:a2:
12:52:03:16:eb:51:1b:7a:95:16:67:0e:30:9e:75:88:73:7d:
81:c9:a5:ac:ef:38:42:31:c1:a6:6c:63:50:06:d9:cd:7b:1a:
35:9d:5c:a8:1b:e7:b2:b4:02:03:6e:e0:b6:66:74:cb:09:f4:
08:b8:57:41:8d:23:93:f2:b4:d3:e9:2d:ed:b4:91:33:24:43:
78:17:6a:8e:bf:bb:bb:e8:bb:04:0a:18:e7:ba:33:37:5c:a1:
20:20:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:33:13 2025 by rpki-client