Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: Q5u8IEi1v2sBW/3OYU98is9PUBXTqFPRXgbGo8Fc94U=
Subject key identifier: 8E:7B:3E:61:27:CF:B6:31:A8:2E:64:DE:9D:9B:C1:10:F3:2C:F8:03
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 0198345E04A8557BF2C7C8B13D4B10AE55B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0724
Signing time: Tue 22 Jul 2025 23:00:33 +0000
Manifest this update: Tue 22 Jul 2025 23:00:33 +0000
Manifest next update: Wed 23 Jul 2025 23:00:33 +0000
Files and hashes: 1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: F69gTiJpwNNddo9onym1lbZQk4hgI+zg6Isj0w06b9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:5e:04:a8:55:7b:f2:c7:c8:b1:3d:4b:10:ae:55:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Jul 22 23:00:33 2025 GMT
Not After : Jul 23 23:00:33 2025 GMT
Subject: CN=8e7b3e6127cfb631a82e64de9d9bc110f32cf803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:e5:97:13:6c:31:d7:65:20:17:42:f5:ed:
85:0a:fa:9a:0e:0e:6d:ae:a5:71:b2:f0:2d:77:ca:
c1:39:d0:10:8a:10:a1:d6:75:8f:bd:d4:76:eb:ad:
90:45:74:00:83:c4:f0:e0:4f:d4:4b:7d:86:aa:39:
dc:8d:69:0d:bc:97:c2:26:4b:72:89:d1:9d:aa:99:
47:1b:59:1e:a8:92:80:57:9d:bd:c5:41:54:45:ad:
e9:f8:6f:d4:72:e3:e8:16:67:fc:df:1e:d6:85:38:
04:ac:63:7d:94:21:54:85:3f:e0:52:3b:a3:14:c7:
f4:e2:3f:75:98:04:0d:b6:f9:ed:60:e1:b4:b5:f6:
67:0e:e5:38:c0:bc:21:c0:7b:4c:14:66:11:69:0d:
11:8a:6a:5a:fb:d2:d5:59:67:dc:5a:a0:d2:e1:2c:
92:f6:d6:84:62:16:75:84:4d:43:a1:9f:b9:97:c4:
34:9e:40:5a:80:d8:fd:53:4d:14:d5:2e:3a:11:8f:
78:05:a5:63:31:81:87:50:9b:65:44:e8:b0:b6:64:
8f:bc:48:37:b5:40:da:51:e0:be:32:26:bd:2b:90:
29:f6:71:6f:7b:19:65:0c:87:3a:7e:bc:94:fa:13:
4d:5c:3b:c1:4f:80:c2:74:f6:67:dc:7b:ac:74:45:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7B:3E:61:27:CF:B6:31:A8:2E:64:DE:9D:9B:C1:10:F3:2C:F8:03
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9a:00:d6:08:6c:a3:0a:0d:d6:2f:20:f9:08:2e:5c:bc:2a:
8d:b7:12:d6:1a:34:aa:e3:35:c0:fe:e5:a4:5b:da:d5:74:16:
6a:a4:0d:ff:78:84:e4:05:f7:d0:7f:4e:88:70:8e:d5:5c:32:
a4:6a:7b:e5:1f:fb:94:a5:ae:c9:25:ab:f5:61:6d:f8:d7:13:
c6:7f:35:53:cc:bc:21:44:2d:aa:ea:b6:4d:a1:29:2a:59:9c:
d7:4d:18:a6:3a:e5:fd:f9:13:eb:56:15:55:31:d9:de:9c:e0:
70:88:13:a4:a5:23:41:45:6d:d6:61:b1:df:63:24:23:71:fd:
e2:7d:12:90:fb:f2:f7:4b:b9:f6:c5:f2:f9:6a:65:28:df:13:
48:b7:41:08:2e:78:cb:8f:de:48:c7:af:18:1e:20:6b:7f:c5:
c6:ae:35:e4:42:32:90:a0:86:2c:26:11:71:4f:07:94:af:b6:
94:44:58:ad:f5:5c:1a:13:7c:3a:13:d5:9b:d8:53:fc:18:22:
59:a7:c3:51:e3:a3:8a:fe:25:d1:a9:43:0d:59:8b:38:e4:e3:
d1:bd:16:92:9b:68:3a:15:c8:1f:43:75:d8:82:e9:01:b3:1f:
2c:2c:9c:fd:60:18:f6:2d:b0:2c:f1:1d:0c:2c:1c:62:1f:3b:
05:c9:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:29:34 2025 by rpki-client