Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
File: ybHXw7TuhyMzamWFOapzRvI9Z3I.mft (raw, json)
Hash identifier: Jfqs1kcTNsAFnJU5Mkr/RyV4a79tKXpbb9CihrcficQ=
Subject key identifier: 53:CA:22:9D:1F:31:A9:DE:00:2A:84:BC:87:7B:95:C4:C1:AF:84:8F
Authority key identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
Certificate issuer: /CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Certificate serial: 01985456DA533F21FE22780132FB6D2311A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
Manifest number: 15A9
Signing time: Tue 29 Jul 2025 04:00:34 +0000
Manifest this update: Tue 29 Jul 2025 04:00:34 +0000
Manifest next update: Wed 30 Jul 2025 04:00:34 +0000
Files and hashes: 1: kqgcpXCz5MkJzwLeAFTCTl_VsMQ.roa (hash: 4evrbQoOmcedQaEfByeB9rC2XxdVu3dPWDCJqrfbW4c=)
2: ybHXw7TuhyMzamWFOapzRvI9Z3I.crl (hash: TXVKRUGQjIP/RAGwPCfxVVgaAT8jSArbMx0voi+NXFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:da:53:3f:21:fe:22:78:01:32:fb:6d:23:11:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Validity
Not Before: Jul 29 04:00:34 2025 GMT
Not After : Jul 30 04:00:34 2025 GMT
Subject: CN=53ca229d1f31a9de002a84bc877b95c4c1af848f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:82:17:0d:9c:eb:4b:75:ed:7d:9d:a1:4a:
c5:98:70:16:a5:5f:80:4b:e0:9e:e9:92:db:6a:4a:
0c:d8:05:fc:f7:1e:ec:03:01:04:2e:17:3b:04:b5:
e9:54:a7:57:7d:b6:83:e4:99:35:31:fe:88:60:d9:
f8:b7:0b:8b:17:92:c4:24:3b:f5:0f:ef:d7:a5:b3:
95:1e:e5:34:35:2f:a4:c5:d7:91:ef:29:6b:f2:c8:
8a:55:64:c8:83:50:ab:d1:06:13:0a:2e:36:e1:f3:
0d:0a:72:78:b7:35:1e:39:e3:56:32:5a:0d:64:43:
0c:10:f6:a8:16:ee:fb:b9:4e:41:6e:d7:bd:ab:2b:
8f:b0:d9:9c:96:25:11:cc:d2:86:71:ce:60:bb:16:
70:1c:f5:9b:3d:7a:84:a2:9d:f6:e3:e1:e3:10:52:
91:1b:1d:c8:c5:e2:81:db:81:bb:89:74:e2:8c:b2:
07:e0:9b:9b:19:af:eb:e4:40:da:1f:7b:ab:70:72:
d7:1b:80:f0:13:32:49:f1:d5:39:7f:0b:cc:99:b9:
7f:ad:9f:f6:e0:c8:b5:b6:fc:33:e1:6e:2b:bc:a2:
96:ae:56:1f:25:3b:75:09:85:d8:96:36:b3:ef:e7:
3e:2f:21:b5:2a:44:29:6c:20:64:f6:11:7e:4b:6c:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CA:22:9D:1F:31:A9:DE:00:2A:84:BC:87:7B:95:C4:C1:AF:84:8F
X509v3 Authority Key Identifier:
keyid:C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d1:32:32:ea:33:73:43:ce:16:98:0f:08:7b:3c:38:58:1c:
0b:0f:54:b7:4e:57:22:f0:33:5d:d2:60:e7:a3:09:76:9f:7b:
ee:80:28:4c:6a:a5:8b:54:40:48:8a:3c:35:bd:ea:63:38:45:
36:3b:45:33:5a:1a:79:15:8e:f0:5f:af:0f:01:94:a6:8a:ff:
1b:05:e3:97:55:4d:e3:85:ef:11:a5:3d:a2:35:a9:84:be:28:
1f:3a:89:48:ac:9c:dc:ad:e1:36:b0:08:4f:45:fb:73:b8:7a:
55:72:19:a5:e0:3b:ed:fc:fb:4a:33:44:bb:e7:fe:5b:10:0b:
29:55:9e:63:93:08:50:36:40:99:69:27:10:cc:a6:7c:30:94:
d3:a2:52:bc:8d:f5:cc:46:79:25:df:b5:59:85:68:3a:f4:99:
5f:f6:b5:a6:5f:20:c7:92:28:44:d5:b1:01:48:03:1f:42:ab:
cb:a6:ca:4d:86:b8:05:61:69:64:d5:72:88:36:2f:a1:56:cf:
c0:c2:e8:ae:e2:c2:1b:c9:67:19:67:94:d6:92:79:25:e1:1e:
3f:83:ff:30:04:39:d7:d1:3a:80:79:3d:4e:d5:83:1c:88:70:
ad:82:25:28:3a:5b:57:5a:52:10:03:9f:25:3c:c0:cf:ae:b8:
a0:51:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:02 2025 by rpki-client