Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: fLQSaGp0njMszs/IX3rOC5F9NVO6bIpCkElC27zket0=
Subject key identifier: A3:BC:D4:28:33:0A:1B:7D:E9:9E:6F:CF:58:9D:73:DA:7C:BE:A6:C8
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 0198523186BE490E17AC21F063CA9563552D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0CEC
Signing time: Mon 28 Jul 2025 18:00:34 +0000
Manifest this update: Mon 28 Jul 2025 18:00:34 +0000
Manifest next update: Tue 29 Jul 2025 18:00:34 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: ko2uLjMwxuYYDbGLjcUCYFkgWv/5t46g/3Y3zYUkMPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:86:be:49:0e:17:ac:21:f0:63:ca:95:63:55:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jul 28 18:00:34 2025 GMT
Not After : Jul 29 18:00:34 2025 GMT
Subject: CN=a3bcd428330a1b7de99e6fcf589d73da7cbea6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e6:a9:ff:58:0b:eb:fe:db:52:1c:11:e5:f3:
3a:7d:36:ef:8b:a6:89:49:56:66:5b:71:e0:b6:12:
b4:f4:98:4c:54:d7:15:14:ed:f7:01:e5:4e:09:6b:
1b:0f:96:1e:4f:05:ef:8a:86:3f:40:f3:9b:bc:b4:
9c:d7:fb:b8:7a:ad:b5:2b:f6:65:5f:55:55:21:b4:
bb:32:b7:91:31:23:de:a4:98:18:bb:a4:47:9e:a4:
b5:5d:c6:0a:85:a8:ca:9f:6a:1d:ae:72:24:d4:4e:
e7:56:4a:f7:08:cc:37:32:00:3b:c3:e6:de:0e:42:
61:1d:94:29:ec:de:03:dd:ec:f7:c2:52:9d:11:cb:
33:64:49:b5:c4:aa:74:4d:3f:50:de:d4:d3:b7:0f:
5c:d0:ac:78:55:42:7c:4f:2d:86:da:d3:c5:4d:fa:
57:28:d8:45:14:98:90:cf:d1:95:4f:ce:04:08:34:
03:3f:32:fb:48:16:5e:c3:a9:de:e7:64:60:9a:f9:
8b:68:67:9a:02:b1:c2:bd:6d:6d:41:be:9a:3c:23:
21:72:c7:10:43:00:d0:44:10:c0:5a:c3:58:e8:23:
08:6f:69:1e:b9:df:8e:dc:ae:a3:33:a0:99:e7:29:
35:5e:3a:d9:72:d3:9e:e2:59:9e:d2:d7:72:a2:e5:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BC:D4:28:33:0A:1B:7D:E9:9E:6F:CF:58:9D:73:DA:7C:BE:A6:C8
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1e:49:80:85:9b:df:50:2c:d1:2c:85:e7:a2:f7:d0:6a:1b:
10:60:6a:7d:a6:cb:8d:64:be:59:a3:c8:12:ed:f6:09:d9:8e:
14:50:39:b6:71:85:97:8e:29:28:21:71:0b:c8:97:fe:84:8a:
9a:33:c0:ec:18:82:85:4c:2b:3f:c6:91:97:77:d4:71:0c:19:
1f:92:57:e6:d0:5d:33:e0:f1:80:99:85:e7:12:4d:3c:05:1e:
54:96:29:ef:64:99:c0:84:57:38:d4:f5:19:93:7b:40:24:e7:
40:16:6c:02:8b:f8:02:2c:24:c7:89:7f:36:e0:af:c9:d5:0b:
f1:d1:60:f4:a3:60:0b:40:12:9c:a6:10:56:d6:82:37:24:f8:
f5:d4:af:34:c0:ce:b2:46:c5:63:7b:eb:ff:71:33:cb:0f:bf:
5e:75:61:2b:3c:de:6a:87:df:34:0d:b5:38:de:55:61:6e:b3:
8a:e5:e0:43:2a:29:f0:68:4d:cb:7b:1b:b5:42:de:5c:71:8a:
9a:58:fb:b3:0d:f9:83:1b:85:0d:b1:4c:05:e2:85:79:d1:3a:
3f:10:9a:6f:60:ba:56:6a:65:ae:72:ae:2e:41:c9:c0:87:ac:
76:0c:21:58:b1:47:97:5c:84:05:7e:51:f8:05:14:2f:9d:d6:
5b:01:ce:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSMYa+SQ4XrCHwY8qVY1UtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1
M2Y4MzgwHhcNMjUwNzI4MTgwMDM0WhcNMjUwNzI5MTgwMDM0WjAzMTEwLwYDVQQD
EyhhM2JjZDQyODMzMGExYjdkZTk5ZTZmY2Y1ODlkNzNkYTdjYmVhNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Oap/1gL6/7bUhwR5fM6fTbvi6aJ
SVZmW3HgthK09JhMVNcVFO33AeVOCWsbD5YeTwXvioY/QPObvLSc1/u4eq21K/Zl
X1VVIbS7MreRMSPepJgYu6RHnqS1XcYKhajKn2odrnIk1E7nVkr3CMw3MgA7w+be
DkJhHZQp7N4D3ez3wlKdEcszZEm1xKp0TT9Q3tTTtw9c0Kx4VUJ8Ty2G2tPFTfpX
KNhFFJiQz9GVT84ECDQDPzL7SBZew6ne52RgmvmLaGeaArHCvW1tQb6aPCMhcscQ
QwDQRBDAWsNY6CMIb2keud+O3K6jM6CZ5yk1XjrZctOe4lme0tdyouXBMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKO81CgzCht96Z5vz1idc9p8vqbIMB8GA1UdIwQY
MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt
MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5
LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADh5JgIWb
31As0SyF56L30GobEGBqfabLjWS+WaPIEu32CdmOFFA5tnGFl44pKCFxC8iX/oSK
mjPA7BiChUwrP8aRl3fUcQwZH5JX5tBdM+DxgJmF5xJNPAUeVJYp72SZwIRXONT1
GZN7QCTnQBZsAov4Aiwkx4l/NuCvydUL8dFg9KNgC0ASnKYQVtaCNyT49dSvNMDO
skbFY3vr/3Ezyw+/XnVhKzzeaoffNA21ON5VYW6ziuXgQyop8GhNy3sbtULeXHGK
mlj7sw35gxuFDbFMBeKFedE6PxCab2C6VmplrnKuLkHJwIesdgwhWLFHl1yEBX5R
+AUUL53WWwHOBg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 00:37:08 2025 by rpki-client