Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: BjyF0VFgcsWcMFAfWFcBbypAaSf08sb+bgQIVFnM1cA=
Subject key identifier: B5:D2:07:F4:F9:D1:D3:56:6F:4C:0C:44:F3:20:E2:CD:12:51:07:4F
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 01984C2F6EA9183AC49E97D962601B84D423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 0D91
Signing time: Sun 27 Jul 2025 14:00:33 +0000
Manifest this update: Sun 27 Jul 2025 14:00:33 +0000
Manifest next update: Mon 28 Jul 2025 14:00:33 +0000
Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: UiiAyMFG/S8XflpN3hN3cKv7w9rlpaQMbBwI20Toj8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:6e:a9:18:3a:c4:9e:97:d9:62:60:1b:84:d4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Jul 27 14:00:33 2025 GMT
Not After : Jul 28 14:00:33 2025 GMT
Subject: CN=b5d207f4f9d1d3566f4c0c44f320e2cd1251074f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:57:2c:10:6d:af:99:82:9f:1e:01:f1:1f:
01:bc:67:3b:82:1f:b6:90:50:0e:3b:39:b4:a3:02:
22:b2:a7:23:ac:ee:f6:64:48:93:d0:0f:5a:1d:71:
6b:89:49:58:bc:65:e4:53:e2:29:52:b5:f9:ef:dd:
ea:cf:ca:89:ff:a1:2a:ac:b5:0d:00:2a:80:f3:04:
2f:22:e3:d3:b7:f3:78:b9:7b:45:b3:8b:9a:f3:c3:
bc:22:4d:6d:67:e4:16:2c:03:38:16:4c:91:9a:ca:
f9:40:4d:28:f6:8e:9d:72:12:05:9e:90:48:1b:bb:
bd:59:b9:c4:70:5d:ce:c1:a7:00:3b:a6:7f:de:0c:
0e:3d:43:bd:40:3d:38:d9:3c:a4:63:8a:7c:71:71:
8e:88:39:da:b2:02:bc:d3:95:d1:f5:34:9c:0e:28:
27:b0:ac:89:ce:ac:32:01:f2:09:0d:36:70:33:b8:
bc:91:bf:65:f9:34:ed:8e:c0:81:35:fe:da:7c:ac:
34:d3:4b:65:6c:a9:cf:78:7f:04:2e:93:4a:8b:f9:
b4:29:c7:05:8c:f4:05:2c:04:ec:6a:ec:c3:89:3e:
a1:f0:2c:aa:eb:09:c6:94:81:3b:dd:5d:48:1b:4d:
c2:55:3b:1a:88:26:97:9d:57:35:d4:48:bc:8a:a0:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D2:07:F4:F9:D1:D3:56:6F:4C:0C:44:F3:20:E2:CD:12:51:07:4F
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:84:28:68:94:f9:ef:c1:c3:6a:5a:0a:b3:dd:42:85:75:29:
85:72:46:d0:32:6c:54:c7:5f:38:e9:a0:fd:e0:a6:8d:4e:64:
90:fa:8f:22:82:49:5d:65:a5:7c:8c:f1:63:86:a7:56:35:3e:
13:68:73:49:1e:18:2f:82:ca:f4:ba:e0:67:5f:55:1d:ba:89:
99:a3:70:ae:b3:83:13:4d:da:b1:c6:7f:aa:dd:9e:f7:7f:7d:
73:3a:2e:62:79:6f:56:db:44:54:1f:19:cb:fe:49:6f:c4:c1:
cd:9e:65:b1:05:5a:aa:04:b2:7f:90:8a:b3:63:c5:58:d3:e8:
a6:bf:86:68:66:9a:56:e5:83:47:7f:4f:c0:1d:d4:34:bc:65:
12:a1:ac:6d:b4:7b:aa:5b:48:04:57:99:5c:58:9f:e2:40:0f:
4a:9f:be:e5:57:07:77:88:68:d5:92:ec:f7:fa:22:57:f2:ca:
1d:3c:c9:87:8c:17:0a:36:41:33:25:cd:00:69:7e:c9:89:7a:
49:79:44:da:1c:90:06:1c:94:a2:42:37:68:ee:42:eb:83:c9:
b5:19:38:7a:c5:e4:44:b6:56:37:a9:42:f2:90:82:51:d3:73:
51:76:3c:1b:81:7d:12:d2:12:d5:33:ea:fd:c7:41:a6:fc:0a:
76:27:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:28:17 2025 by rpki-client