Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: +IcFmvX3X4a0jSDkU/KgpJ/cKJFKF0NwZukMUZusLLg=
Subject key identifier: 2F:85:3B:AF:4C:73:AB:70:88:2D:B4:DA:76:25:F8:0E:69:22:2E:D4
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 01984B5506312142EC336B060784E15704A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0972
Signing time: Sun 27 Jul 2025 10:01:59 +0000
Manifest this update: Sun 27 Jul 2025 10:01:59 +0000
Manifest next update: Mon 28 Jul 2025 10:01:59 +0000
Files and hashes: 1: 9qNQB_i0eu4jjJmVJKka4rzSK5w.roa (hash: NblnquqC2LajKbqJk5Dgnmv5h35qFu2LGP00XRuQHvU=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: dtSTvDCDI56GP+X5WSEd4QkuWupgu7qqWPsCHsaN5CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:06:31:21:42:ec:33:6b:06:07:84:e1:57:04:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Jul 27 10:01:59 2025 GMT
Not After : Jul 28 10:01:59 2025 GMT
Subject: CN=2f853baf4c73ab70882db4da7625f80e69222ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:f6:f8:a7:dc:93:45:47:fd:a5:7d:6f:1d:
87:53:ff:bb:01:16:31:67:0e:a9:2f:42:27:58:ac:
ec:b2:31:62:8b:c7:55:d4:7c:f9:4e:65:83:dc:bd:
31:0f:e4:11:a4:1d:c6:f8:14:be:6e:03:f0:e3:00:
22:ed:cc:29:73:c2:d8:34:66:42:99:ff:3d:9d:76:
c4:f5:fd:eb:72:ef:c9:fc:83:8f:b6:7a:34:d8:7f:
3b:85:96:77:78:af:8b:b9:ae:21:68:83:12:bb:45:
6d:f2:45:fc:84:d2:93:34:e9:15:81:6e:dd:ff:f0:
c0:20:a8:26:7f:18:fd:40:60:a9:d6:dc:aa:d7:a1:
50:2c:87:8b:ef:9b:c2:9f:f3:6b:29:2a:a6:10:9a:
d4:e0:f3:da:9a:40:27:07:f7:ee:dc:9b:69:29:6b:
a3:75:b7:5f:e7:e5:2f:d1:4f:7c:2f:33:ba:9d:18:
fa:aa:28:14:1a:6b:99:6d:de:cb:a3:29:2e:5b:39:
77:42:68:8d:30:0a:e5:c9:5c:1f:f1:36:15:49:51:
ac:1a:c5:f4:d5:39:44:8d:5c:8a:b9:07:45:46:4e:
c5:c6:5e:8b:9e:1b:f4:e5:6f:b0:a3:96:c0:3b:e5:
4f:c1:aa:c6:d8:59:d6:fd:4a:01:b7:2e:46:ac:3b:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:85:3B:AF:4C:73:AB:70:88:2D:B4:DA:76:25:F8:0E:69:22:2E:D4
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a9:e2:46:02:92:ee:50:9c:2e:9b:14:6f:3c:24:54:73:ac:
7b:dc:42:66:a0:10:2c:50:a0:ea:11:60:9c:b1:25:f3:c8:b6:
b7:e9:e3:42:1e:77:ad:c4:97:29:30:81:28:0b:5e:58:c3:ee:
98:7a:0d:07:78:9b:d2:a3:25:79:e7:db:be:b5:60:a0:eb:19:
4a:ef:93:de:7f:b4:6a:d5:7c:c6:b7:ce:3e:fd:fc:0e:26:9d:
90:a4:df:78:83:e3:dd:48:b1:53:ef:39:07:7b:96:3c:94:ee:
ca:ac:da:16:6e:4a:3f:be:7c:ba:9e:a0:65:23:90:4d:fd:60:
5c:d7:cc:87:a9:65:0e:67:4c:77:69:1b:e3:e0:11:6f:26:ac:
8f:b0:fa:14:3c:57:03:6f:7e:ab:13:1f:94:0c:f5:82:fd:31:
77:d1:ba:15:2f:1f:05:5d:bf:22:d1:a4:f4:09:c3:c0:a1:54:
fc:2d:99:a9:80:e5:9a:09:44:67:ab:6e:b3:73:0d:be:9e:c4:
3a:50:47:0e:04:17:19:f1:98:75:0a:0e:57:f8:3c:0e:4f:71:
3b:30:90:4e:15:9a:a5:fd:d9:10:88:7b:26:31:e0:6a:79:fa:
2e:fd:75:45:34:22:6c:7d:4a:97:4a:fe:40:3b:cb:c7:4f:a4:
4f:3b:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:38:50 2025 by rpki-client