Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
File: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft (raw, json)
Hash identifier: p5K2I5ao8TGlJ6qe+Hph0s3Lu7gIPy0TAc/iJ+mF+3o=
Subject key identifier: D9:2B:78:10:B1:2E:D4:75:E7:C2:FA:C9:53:20:54:ED:05:60:36:F1
Authority key identifier: CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
Certificate issuer: /CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Certificate serial: 0199228CD2EA9C523A11B34FE5FBD0F0A4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
Manifest number: 0499
Signing time: Sun 07 Sep 2025 05:01:18 +0000
Manifest this update: Sun 07 Sep 2025 05:01:18 +0000
Manifest next update: Mon 08 Sep 2025 05:01:18 +0000
Files and hashes: 1: fOUkBLPvgdmMw3qOCphjRq4t0eY.roa (hash: r4VQRSy7Gza9d4nweiTC6bFhiBWBCqInaEx5ZdTsmu8=)
2: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl (hash: S7LSsn2AHp+OxTaWmn+cjnkA+N+oOFOlSQFgOMvrQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d2:ea:9c:52:3a:11:b3:4f:e5:fb:d0:f0:a4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Validity
Not Before: Sep 7 05:01:18 2025 GMT
Not After : Sep 8 05:01:18 2025 GMT
Subject: CN=d92b7810b12ed475e7c2fac9532054ed056036f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:72:bc:9d:21:89:6e:8c:89:43:09:c7:7f:
52:03:7f:3c:fc:f0:8e:36:2e:d8:ba:13:2e:f2:4e:
38:b4:4c:35:04:be:e5:de:f4:cb:3e:6d:d7:10:fc:
20:58:95:19:12:c4:55:53:9f:8f:d7:a6:f0:5b:c3:
19:f7:29:47:53:92:0f:97:0a:c5:a6:33:e0:78:66:
81:18:8c:2b:b3:28:89:7f:7f:bd:d1:54:9d:e3:90:
a1:09:1c:79:c9:98:24:70:3e:82:d9:9c:98:48:a2:
3d:ce:db:00:61:31:19:82:a0:b3:2c:9b:5f:18:56:
e6:9c:35:fe:59:9c:16:14:1e:62:84:14:46:2b:03:
4c:1c:ea:23:78:9b:53:ff:c7:af:5f:20:7d:88:ab:
7f:94:e6:ff:2a:dd:0f:cc:c7:ee:71:f7:ac:5e:ae:
a6:51:69:6c:f5:5a:86:33:71:d2:53:38:a3:3f:49:
4e:3d:ef:0b:f5:e5:62:65:dd:4e:6c:a8:ba:e2:03:
a8:e2:0e:91:5e:e2:bb:75:ee:81:d8:dd:9d:94:7d:
68:22:33:f1:d4:9e:c1:f0:b0:3b:5e:da:23:f3:9f:
76:36:5f:8a:8d:aa:4c:f8:3d:f9:f5:1d:08:e9:80:
06:1b:e0:41:81:2a:53:5c:6a:65:0e:83:66:c4:ce:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:78:10:B1:2E:D4:75:E7:C2:FA:C9:53:20:54:ED:05:60:36:F1
X509v3 Authority Key Identifier:
keyid:CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:13:28:65:fc:2b:34:08:70:84:9a:b2:7b:f0:84:c4:11:db:
20:59:81:f2:5c:68:ce:85:bd:3e:0f:4c:fc:c7:75:78:bf:05:
fa:c1:23:aa:e6:65:48:cb:ab:47:4c:d3:ca:63:a5:e7:d6:e2:
3e:02:e4:ea:26:28:e9:ab:d9:cd:e9:82:3c:9d:8e:f6:f6:06:
0b:22:7c:39:c3:23:c0:4a:a8:9a:7c:05:9c:b0:78:0e:0f:da:
fc:f8:eb:64:af:ec:23:65:f5:8c:be:30:b0:d3:3b:e0:78:04:
11:5d:0b:ae:63:36:49:1b:e6:58:bb:a2:e0:fa:dc:ea:19:52:
ba:78:32:7c:f5:62:d5:9a:09:e7:86:0a:f5:cc:2e:5f:a0:f3:
8a:e2:53:20:2d:8d:f2:17:80:99:f2:82:c8:27:3a:fd:93:98:
9f:a1:63:cd:7b:40:3c:62:b6:a1:1d:df:35:ea:6a:78:d2:80:
97:30:6b:e0:4c:9d:5e:9f:6f:7d:86:3b:d0:8b:b7:0c:34:8c:
43:86:77:ff:d1:bf:f2:8f:ab:2b:72:aa:30:ae:7a:3f:fb:24:
36:dc:4e:d8:c8:e1:20:15:f5:46:6d:6a:e6:e5:9b:dd:89:d5:
c7:af:e0:b1:bd:4a:2e:c2:dc:15:1e:ee:da:e7:64:24:7d:b5:
72:1c:f7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:17 2025 by rpki-client