Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: NGjrhhjxE892nEh8oXjSKfpUUJcdNDccZ0qhAltg694=
Subject key identifier: 45:FC:85:56:86:06:24:09:0E:32:F9:A0:0E:B2:6E:09:89:92:7F:D5
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 01983DCEDC9A14DAE2F267C89866413FB628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 01AE
Signing time: Thu 24 Jul 2025 19:00:23 +0000
Manifest this update: Thu 24 Jul 2025 19:00:23 +0000
Manifest next update: Fri 25 Jul 2025 19:00:23 +0000
Files and hashes: 1: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (hash: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: pWBbP8w0lt4+deHGLG41SHSCmqDEUhxC9TKMMbSWl0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:ce:dc:9a:14:da:e2:f2:67:c8:98:66:41:3f:b6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Jul 24 19:00:23 2025 GMT
Not After : Jul 25 19:00:23 2025 GMT
Subject: CN=45fc8556860624090e32f9a00eb26e0989927fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:59:3b:12:3c:2e:95:65:e6:9b:b3:7c:40:
f1:d9:34:e6:b2:59:b9:85:17:30:33:d3:1c:80:9e:
9e:29:9e:27:00:0d:52:02:84:07:09:c4:79:66:2b:
47:c6:37:4a:31:a2:5a:88:a5:cf:45:49:97:4e:e6:
13:23:be:80:78:5d:a1:da:6a:51:cf:2d:4f:60:e5:
46:9e:2a:3e:7a:b0:b5:b8:83:09:41:dd:49:95:e2:
c2:e7:d1:50:cd:7b:e6:9d:5c:bd:0d:9e:1e:01:cd:
1c:49:c1:cd:4d:0b:6e:36:22:b2:70:db:ed:32:c5:
2d:df:2c:93:99:ae:ff:f1:e4:ea:33:94:05:eb:ea:
11:2e:2b:23:01:89:e4:bf:17:15:3c:6c:8e:78:23:
f2:d0:82:93:4e:74:e7:bd:45:85:1f:7e:d6:c3:c8:
2b:09:15:af:a7:18:ee:72:6a:75:d1:d2:30:04:43:
41:8d:23:63:26:ea:a8:b3:f4:04:e4:8f:ca:b3:21:
29:13:47:60:4d:77:6e:4a:c1:cd:ec:52:05:54:36:
8d:68:13:a1:e6:aa:d4:6c:18:4e:00:95:53:cd:e2:
98:41:12:16:c7:01:81:08:97:b3:e3:47:dc:44:79:
82:76:01:6a:e9:2e:96:25:b6:86:4b:2e:1f:fe:b2:
15:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FC:85:56:86:06:24:09:0E:32:F9:A0:0E:B2:6E:09:89:92:7F:D5
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:14:1b:c3:8c:05:f3:61:be:a0:74:6c:96:98:53:12:a2:66:
b2:b8:a6:48:04:b2:b8:db:36:a0:50:81:e2:45:58:36:f5:89:
80:1d:c2:09:f5:7f:c6:72:91:17:28:6e:bd:5e:ab:ee:e7:fc:
d8:88:e0:67:b1:5a:b0:00:7b:f4:64:e9:78:d5:12:5f:7e:b4:
e2:24:4c:04:48:9a:d0:3d:d4:29:ca:6e:a5:92:11:1d:67:b7:
d2:02:de:3a:d1:bc:46:44:7e:3f:f2:a9:9c:e4:b4:09:38:49:
41:05:ca:d1:3c:5e:b1:79:e7:7d:5c:18:af:20:02:6f:9d:63:
41:e9:db:a7:4a:22:b7:29:29:45:ba:c8:81:d0:8a:af:cb:38:
16:0b:0f:ef:08:4c:4a:6a:8b:e3:88:9b:8b:56:02:41:1b:e0:
b7:f3:23:0d:99:65:3e:3e:3e:44:2b:83:95:59:52:da:b4:27:
53:f1:4b:3a:fa:2e:ac:d4:0a:fc:54:74:c5:c7:fc:73:9c:da:
5f:b2:f1:73:bb:ef:fb:2e:d8:aa:4f:39:5b:d8:c2:b9:4f:05:
5e:67:ba:13:a3:da:44:8e:43:e0:9d:01:d5:c1:6c:e3:e5:d0:
e5:b4:42:47:5d:10:8c:76:e2:94:09:da:fe:d9:a6:56:20:a3:
50:9f:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:24:37 2025 by rpki-client