Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
File: 9Y3yxGnJeIlfhFgCTFBugByPsho.mft (raw, json)
Hash identifier: aOK9q0RTly8zq4KCkWNycjeS+f96iacNm8loXduCFkc=
Subject key identifier: 85:87:17:C4:E5:FF:25:F5:85:79:5B:ED:03:3E:BB:9F:BF:6A:19:1B
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 0198466405B9791E888D89F86F39800FA579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
Manifest number: 1387
Signing time: Sat 26 Jul 2025 11:00:16 +0000
Manifest this update: Sat 26 Jul 2025 11:00:16 +0000
Manifest next update: Sun 27 Jul 2025 11:00:16 +0000
Files and hashes: 1: 9Y3yxGnJeIlfhFgCTFBugByPsho.crl (hash: jUPv5qZg2t0/cScIEnIqSztqeF+JUTU5c6qThtpkW4g=)
2: uTgF90O7aHLO_G7cSzTbj_nzdao.roa (hash: lwZMpyCYU1xDcN6IVFSHMP6G+054GMvXirawB6lbtsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:05:b9:79:1e:88:8d:89:f8:6f:39:80:0f:a5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: Jul 26 11:00:16 2025 GMT
Not After : Jul 27 11:00:16 2025 GMT
Subject: CN=858717c4e5ff25f585795bed033ebb9fbf6a191b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:bb:4c:16:3c:9a:0f:63:ee:bc:fd:67:9f:
24:a9:e7:55:56:8d:47:90:f5:ec:08:37:0f:76:c5:
4f:be:1a:d4:c7:d4:f8:19:f0:49:5a:77:31:34:6f:
7a:f8:a9:12:7b:4f:d8:0c:f1:7c:df:e6:ee:cd:e7:
8e:30:94:a0:83:16:f6:9f:e3:69:fe:e7:2a:eb:20:
5a:06:3b:88:98:5a:22:62:e1:02:1d:b8:de:13:e1:
39:56:8a:35:00:a6:31:12:3b:ce:73:22:d7:8d:0f:
98:4d:93:96:12:8b:28:0e:b2:17:19:db:94:fc:04:
80:df:b4:4e:1c:d0:d4:39:d4:08:17:28:8b:63:68:
f7:35:23:eb:75:15:87:65:5d:a3:34:f2:79:ee:10:
4e:42:cd:02:ea:bc:23:9b:7f:28:4e:00:dd:bb:54:
9d:ce:06:1a:d2:c0:de:2b:b0:d9:67:e9:92:b7:d1:
38:7a:a0:02:bc:f4:02:59:41:73:b6:14:a2:3f:62:
5f:12:bf:db:d1:c0:65:f8:4f:e1:c2:0a:00:60:e8:
b8:91:26:64:72:99:fe:12:e5:2c:31:2d:29:7f:f5:
e0:fb:ce:c6:2e:69:71:1b:bb:af:d6:03:a3:54:f7:
41:9e:15:75:39:67:0b:ed:2a:91:51:c5:17:65:5c:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:87:17:C4:E5:FF:25:F5:85:79:5B:ED:03:3E:BB:9F:BF:6A:19:1B
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e6:f4:8d:ac:4f:cf:25:23:ff:5a:57:7c:8a:96:7b:6f:9d:
b2:21:72:9b:51:01:e4:b2:ad:4d:0e:1b:52:4a:d7:a7:0b:e8:
d4:a1:c4:69:36:0e:c5:93:7d:2e:90:0b:16:e7:53:47:b4:8c:
4d:46:45:ba:70:3d:2f:59:52:00:e0:c9:ab:5a:79:cd:54:96:
58:ba:03:86:36:7c:07:3d:d0:b0:2f:b8:ec:76:b2:96:6c:c9:
39:d5:7b:40:3a:ba:6c:f5:1c:63:69:dd:af:06:af:8b:b3:be:
ab:03:e8:e6:20:0b:c4:c2:29:72:54:9b:67:e6:25:3d:2b:b8:
54:a9:50:5a:d3:6c:6c:46:29:b0:26:08:fb:4c:c4:37:93:df:
42:f7:05:d2:f6:47:79:37:be:29:71:b9:43:85:79:37:5f:ed:
d6:8f:08:04:0e:07:07:54:e6:fa:30:0f:90:a2:62:c1:b0:dc:
0e:c5:83:66:05:aa:57:79:a0:b7:1c:93:62:20:32:9d:3d:c6:
ac:52:c1:c5:ac:79:41:72:6a:26:17:1d:c2:48:5d:bb:86:5b:
72:09:8b:b9:15:12:cc:17:40:5b:70:17:0a:d0:53:fb:fc:bf:
f8:1d:31:4d:66:12:27:31:14:d9:40:57:48:2e:e5:c6:5c:9f:
ac:d9:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:44:55 2025 by rpki-client