Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
File: my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json)
Hash identifier: tsGPVGUZDktRyqaDg1fJeZeGU+CQ9TKNyQuw/bnXzhk=
Subject key identifier: F9:B0:18:03:CE:F4:DA:6B:99:A3:2C:D3:06:EC:1C:4D:14:2D:BE:89
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial: 01984B8A3BDC67B99D141797345E97DC15C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
Manifest number: 079D
Signing time: Sun 27 Jul 2025 11:00:06 +0000
Manifest this update: Sun 27 Jul 2025 11:00:06 +0000
Manifest next update: Mon 28 Jul 2025 11:00:06 +0000
Files and hashes: 1: iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa (hash: GD3GHNZKL4fdpgdi7l7xwFI/fIJOKFQjsdvcNA8UW4E=)
2: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: uzHCmhiNpFB45L3vS7KRs7250fvWvMXzsDCuldQFvFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:3b:dc:67:b9:9d:14:17:97:34:5e:97:dc:15:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Validity
Not Before: Jul 27 11:00:06 2025 GMT
Not After : Jul 28 11:00:06 2025 GMT
Subject: CN=f9b01803cef4da6b99a32cd306ec1c4d142dbe89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:a9:ae:88:95:0a:4e:72:63:28:fe:ae:d8:
a6:09:3a:2c:13:e8:0a:bb:0d:e1:92:6d:05:e5:99:
0d:40:68:85:37:6f:44:9b:5e:32:6f:2a:c4:85:28:
75:1e:4e:7f:82:ea:c5:a0:55:d9:02:bf:7c:04:57:
a2:5f:60:dd:35:27:ed:ea:48:36:47:a7:da:85:3d:
c9:dd:ea:1e:f2:06:1e:bd:bc:b6:21:9d:17:22:b6:
51:e0:a0:d1:99:56:ef:e5:fb:4c:20:72:63:de:c6:
1e:41:26:c7:c8:46:70:1d:01:eb:de:2c:cd:fc:e7:
26:5f:48:73:28:37:16:a1:6d:ff:80:b3:8d:25:74:
4c:ed:3b:ba:5f:b0:95:ac:20:6c:20:1b:3f:94:dd:
6e:d6:ae:62:18:a6:6f:1a:e2:f0:33:e4:09:33:18:
35:0f:b1:8f:84:43:cf:42:f4:21:fc:01:78:18:1f:
c5:6d:30:cd:62:f6:b4:9b:42:c1:ef:1f:3f:c0:46:
60:f1:e7:e1:63:82:37:a8:24:3a:ab:ca:5c:ba:95:
c8:cf:02:7a:56:3d:4e:38:0b:db:50:a8:fc:19:84:
ee:45:21:ee:92:d7:12:53:d9:ea:80:d0:90:7c:4b:
29:68:e4:ab:b9:e8:e2:ad:84:c6:9f:0e:45:93:71:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B0:18:03:CE:F4:DA:6B:99:A3:2C:D3:06:EC:1C:4D:14:2D:BE:89
X509v3 Authority Key Identifier:
keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cd:92:2d:29:08:42:2e:bc:ca:f9:06:91:c9:6a:7b:d4:ee:
dd:4a:d8:26:bf:2a:bc:13:d6:5a:bb:9e:af:1b:c1:3b:c7:b6:
e9:76:b2:10:98:35:52:08:37:9d:56:ac:08:a1:88:be:ca:0c:
37:7b:b6:2e:7d:5a:10:76:db:60:c1:85:bb:19:cc:03:52:35:
8c:52:d3:40:82:f3:9f:ae:aa:25:f8:d0:94:7f:64:af:11:ea:
ec:a5:79:48:2f:0f:cf:65:8b:f6:93:c6:df:92:ec:2d:2f:5e:
fe:ad:d0:51:bd:c9:2c:31:fc:94:7c:4f:a0:03:bb:13:ac:7e:
30:81:32:ab:42:bb:c4:36:01:c6:3d:88:5e:f9:5f:d4:3e:fd:
0d:cc:bd:a7:ed:6e:df:e2:1e:6f:50:72:2b:fc:4d:22:eb:02:
10:6e:59:c6:43:49:89:a4:17:4d:a2:41:c7:86:67:d4:20:0e:
97:88:26:8d:74:60:1a:23:95:3b:1a:28:c1:2e:74:66:d7:76:
67:24:86:e0:7f:58:fb:e5:ea:c5:be:c3:df:ce:75:40:c9:70:
f7:27:05:2f:97:bd:c0:39:cc:35:7b:b0:66:d3:cd:17:47:6a:
8e:22:8f:fe:08:a6:64:98:5e:e5:8d:f0:cd:5c:ca:73:2a:63:
44:9f:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:03:48 2025 by rpki-client