Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: WLeIbmlkKmjZKmFz33J2BqWFeRLUZ1gEBtwGsni4aHs=
Subject key identifier: 36:95:C6:5C:B4:0B:04:33:71:92:95:D3:29:78:44:E9:BF:EB:F0:29
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 01984AE5B3532BFF48B18B510F8D0375E114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 109F
Signing time: Sun 27 Jul 2025 08:00:24 +0000
Manifest this update: Sun 27 Jul 2025 08:00:24 +0000
Manifest next update: Mon 28 Jul 2025 08:00:24 +0000
Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: RYaJlLjA+zSmc2vBdLqawQaWmnqZPqF33bI8LsXnm8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b3:53:2b:ff:48:b1:8b:51:0f:8d:03:75:e1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Jul 27 08:00:24 2025 GMT
Not After : Jul 28 08:00:24 2025 GMT
Subject: CN=3695c65cb40b0433719295d3297844e9bfebf029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:a7:a6:37:08:b9:da:79:f7:58:39:75:b3:
99:89:b5:34:f7:7f:21:68:06:cb:29:7f:14:eb:60:
bb:0a:d6:fc:36:dd:56:c6:eb:97:b6:94:fe:9d:8a:
55:af:ad:63:44:cf:be:b1:b8:77:fd:42:95:4b:f0:
24:98:c3:a8:22:70:dd:10:b2:4f:5b:f8:8d:49:64:
11:6d:60:81:63:f0:a7:4d:e2:4e:65:9a:bf:95:77:
4f:4d:8d:5a:05:39:40:0f:f7:00:25:5b:1f:df:a4:
f8:ce:bf:2e:cb:59:a5:a9:1d:20:14:54:08:49:5a:
cd:c5:5d:c7:bc:ab:e7:11:b6:d3:65:17:ad:3e:80:
10:7f:6b:3e:03:6e:fa:f4:30:fa:66:75:3d:48:fe:
54:5d:f9:e0:a2:e4:3d:db:cc:b1:9f:ed:91:88:c7:
3a:b5:84:8b:f0:a6:3c:80:cb:c9:29:cc:ce:84:6c:
b9:29:f9:69:f5:11:22:b0:88:2c:4b:d8:aa:b0:6e:
bd:92:64:44:71:f9:0a:0e:13:c7:ce:ac:44:5d:43:
b5:34:64:6a:31:af:61:c1:c4:9e:6f:de:71:94:c8:
e2:26:38:87:c7:4d:8c:93:e9:d6:17:56:5e:db:f6:
56:38:89:73:07:56:d0:ab:0f:16:1a:e5:16:21:56:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:95:C6:5C:B4:0B:04:33:71:92:95:D3:29:78:44:E9:BF:EB:F0:29
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ff:c2:9e:8c:e7:7b:fd:c0:f9:1a:fc:2c:d8:3f:52:25:6a:
b9:91:07:df:75:05:42:a1:9d:6a:8e:15:8e:aa:82:09:18:e5:
47:5e:a0:e5:a0:16:0f:0e:d6:0d:5e:c5:50:da:7a:eb:c2:30:
e9:4a:d3:14:56:f3:5f:57:36:5b:c4:85:58:81:74:cc:b4:4f:
4f:1f:06:be:e7:37:76:9f:92:54:15:9f:2c:c4:46:7c:bf:3a:
6e:6e:3f:c5:4e:24:bc:5f:00:05:e4:1d:cb:d6:db:59:5f:ea:
fe:df:10:78:15:f9:fe:94:d4:99:29:b2:5f:f1:c7:9d:15:79:
87:07:40:66:f7:04:aa:fd:a5:4b:88:45:22:be:ac:8b:4c:33:
3a:bb:43:f3:ac:1d:d0:9c:ba:93:29:6d:76:1f:9b:b3:58:83:
2b:a6:79:f3:57:4f:82:39:3d:eb:67:ef:82:bc:ad:3d:3e:6a:
36:5e:1e:a9:7a:3a:bb:27:5d:8a:94:1a:7d:1e:2e:7a:e8:0e:
5f:27:80:9e:16:df:ae:0b:b0:40:09:66:8e:2b:c7:4e:a9:19:
3d:72:11:35:8e:8d:e7:c0:4b:0a:df:89:43:ef:f6:57:b8:e7:
13:0f:ea:7b:d1:54:8c:0b:cb:06:9a:48:3f:c1:55:4d:d6:e1:
7e:1f:d3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:52:56 2025 by rpki-client