Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier: fyT5dz6NLa4igV8IQXAmOBmYDE59i4WnpbP3N6vmBlo=
Subject key identifier: 43:B0:1A:65:56:70:37:BA:61:F9:4F:3C:D1:B6:D6:A0:4A:44:15:B4
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 01984A40EC5D30E6DE9D81DACC66809EB44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 05:00:25 +0000
Manifest this update: Sun 27 Jul 2025 05:00:25 +0000
Manifest next update: Mon 28 Jul 2025 05:00:25 +0000
Files and hashes: 1: qGENJESy0r4yMpyOLaSnKiFyC6g.roa (hash: YNQ1luudWTgMRhpSK56qAEttNJ4g5ZmNbKxoPnTKLxA=)
2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: JPk/90IEwFe4JQdT6vR5Mu7HAagTge/9oMVzF1yVhZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ec:5d:30:e6:de:9d:81:da:cc:66:80:9e:b4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Jul 27 05:00:25 2025 GMT
Not After : Jul 28 05:00:25 2025 GMT
Subject: CN=43b01a65567037ba61f94f3cd1b6d6a04a4415b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:60:c5:c9:35:47:8f:65:09:89:ce:01:1a:
6a:8a:e5:54:f3:05:8b:f4:d7:d8:e1:1d:a5:63:fa:
e6:e3:96:cf:22:7e:56:c4:0c:00:c4:33:cf:63:55:
53:34:85:a8:32:00:7f:92:14:1a:e5:5f:8c:91:51:
f9:0c:49:c4:13:2c:23:5f:e4:56:1d:5b:de:ff:c1:
77:36:6b:9f:d8:ef:26:9d:31:1c:88:01:98:ba:67:
5a:b3:47:8e:5b:a8:95:e7:6a:e0:5b:55:2a:f1:d4:
d2:bd:c5:d4:34:bd:99:50:43:fe:3f:c6:f1:46:a0:
d1:5f:87:b2:ba:71:e1:61:0a:5c:fa:09:48:c4:c5:
8b:c7:5a:19:f0:d9:96:d7:fa:7b:47:97:ae:42:1b:
99:ef:ef:2f:56:1b:9a:dc:c5:51:56:dc:8e:43:60:
7d:ab:1b:33:be:a1:7c:16:df:7b:23:dd:76:c4:92:
2d:8a:a4:1a:40:6d:c4:b2:68:7f:77:87:1b:33:30:
e2:c7:ff:3b:ad:92:6e:65:aa:a0:10:e0:34:ae:9d:
b6:80:ca:9d:cb:77:40:66:59:11:1e:da:bf:28:1d:
a7:1f:be:fd:46:eb:8b:10:e8:a4:bf:40:27:d0:18:
42:ac:f0:ed:d8:bf:f2:bf:19:f5:97:64:54:07:67:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:1A:65:56:70:37:BA:61:F9:4F:3C:D1:B6:D6:A0:4A:44:15:B4
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:21:c5:8a:b8:92:d3:94:76:b6:62:57:46:64:23:41:4f:
3c:9e:d5:f3:26:ab:4c:f4:93:86:b2:a2:d4:b1:df:61:0c:28:
98:d7:8e:51:19:79:b2:d2:ea:91:a9:46:ee:25:ee:1a:fc:14:
c4:27:97:74:a2:6a:53:18:8c:27:7a:1b:94:46:a4:df:1d:c5:
d2:29:ab:42:00:58:ef:c3:18:e0:f4:48:e6:f4:e9:74:97:9f:
f9:ad:19:60:52:ef:d0:ba:49:ac:e5:57:cc:7b:18:e0:ea:63:
be:3f:d8:0c:e6:0f:08:49:07:4f:a1:8e:d5:48:75:93:6e:16:
67:29:d7:74:c6:12:d5:e6:b1:15:9b:a2:57:31:54:ff:2e:75:
3d:35:fb:78:41:c3:2f:2a:b1:0f:d2:9c:39:8f:7a:6a:94:a8:
55:8d:04:d2:26:b0:ea:02:d3:9d:f2:d4:30:f7:9b:b4:bf:36:
6c:43:64:af:7f:11:44:5d:12:d2:78:0b:76:a8:42:c7:f8:d0:
b5:fe:b5:43:04:1c:13:4c:4a:fb:25:4b:26:f7:73:5a:5c:1c:
42:47:60:1c:34:58:c6:20:61:6e:cc:db:63:2a:dd:35:54:f8:
24:41:44:a3:6f:de:55:41:b2:16:8b:11:ed:5b:9a:7b:13:f8:
b8:2f:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:24 2025 by rpki-client