Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
File: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft (raw, json)
Hash identifier: qx3aN9IoKIR+A/tVnzr/i72vjGREhIxniAjnBe1LwlA=
Subject key identifier: 58:99:3F:51:FB:C5:65:87:E9:23:81:A8:7F:DD:4C:A2:BD:1C:BB:51
Authority key identifier: CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
Certificate issuer: /CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Certificate serial: 019842F53A4B4595B9B7000BB590AB0EC799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
Manifest number: 02B1
Signing time: Fri 25 Jul 2025 19:00:24 +0000
Manifest this update: Fri 25 Jul 2025 19:00:24 +0000
Manifest next update: Sat 26 Jul 2025 19:00:24 +0000
Files and hashes: 1: q6cfXUDveWHdgQWTYKqVwvvOAe0.roa (hash: BJPMM6GNYN6IqCj9i2G5fXzbZjuTVnz0OtAPd8t+eZk=)
2: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl (hash: Irq5b6k24rmya2dhgtWJr7/4yNojnAD1KD6sBHNJn3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:f5:3a:4b:45:95:b9:b7:00:0b:b5:90:ab:0e:c7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb525e263a95b1652064bdff8964d4bf62b533d
Validity
Not Before: Jul 25 19:00:24 2025 GMT
Not After : Jul 26 19:00:24 2025 GMT
Subject: CN=58993f51fbc56587e92381a87fdd4ca2bd1cbb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:bf:bc:5e:8a:5f:14:42:19:db:5d:1d:b8:
40:ce:fa:96:35:71:2d:86:e9:87:38:15:1e:c5:f1:
e6:bb:ae:db:79:4f:43:49:12:f8:03:61:f5:38:70:
b4:aa:b5:c6:ae:fb:aa:76:f1:c8:70:93:8d:35:96:
48:36:4b:57:70:60:8a:b5:2e:86:af:9d:80:3e:3b:
a6:f2:6a:ca:42:59:51:58:f6:61:99:84:5c:fd:24:
65:a6:d1:01:2a:25:c6:9f:2d:1e:71:7b:37:d3:13:
1d:dc:15:dd:5b:d3:fb:ea:71:e0:22:6c:ea:51:56:
9b:05:80:3e:46:6b:c0:7e:b4:64:97:97:a6:de:ba:
1a:a5:f8:d3:72:b1:9d:de:c3:40:6d:0b:5c:ec:7c:
1a:e8:19:8a:cb:23:3e:c2:7c:2e:5d:23:9d:31:9d:
b0:6f:fe:39:d2:66:22:ff:0b:2f:b7:17:20:0c:51:
ae:0d:24:53:cb:09:eb:47:5e:06:b6:c7:69:4f:e5:
0e:a8:0d:58:73:ad:55:e6:41:66:11:22:ac:8f:f1:
2b:ac:5d:0e:a8:9e:4f:99:83:ce:2b:4f:7b:14:48:
0b:9c:1f:0f:93:5a:50:5b:d6:df:14:10:1a:73:d7:
53:f8:db:7c:fd:ae:c5:84:0e:dd:02:a8:2a:06:3e:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:99:3F:51:FB:C5:65:87:E9:23:81:A8:7F:DD:4C:A2:BD:1C:BB:51
X509v3 Authority Key Identifier:
keyid:CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:73:f1:f3:fc:fb:ef:92:8f:c7:12:4a:85:03:83:ed:ed:80:
3d:68:79:ac:8b:fd:a9:cf:59:71:5b:52:e4:51:93:7d:2a:d4:
99:34:2e:db:a2:0b:5e:ef:72:ad:da:4c:88:dd:71:e4:f5:62:
e3:63:ca:9e:77:39:ae:c1:98:f4:e9:17:87:9a:62:3d:b0:fe:
f5:15:ae:f7:d5:a1:43:2b:03:9f:00:a5:9c:aa:53:5d:3f:4c:
79:cd:89:b9:79:05:fc:8e:c4:08:4c:bd:1f:f8:45:bc:58:f4:
71:c7:16:43:68:57:d8:0f:47:8a:18:ed:58:1e:13:bc:87:db:
63:d9:95:c0:df:e8:db:33:b7:13:b1:c8:55:71:c5:12:ff:9f:
2a:76:89:e1:fb:cb:f6:bd:f0:8d:de:96:e7:62:8d:35:cd:9c:
ca:aa:5f:b4:fd:0d:24:f8:fd:5d:ed:c3:dd:d7:47:65:70:c2:
2c:4d:53:73:78:85:a9:41:a3:8f:d0:f3:e2:66:e8:24:e1:52:
85:df:d5:18:85:96:e8:0c:60:9a:d5:bf:fa:6c:6c:33:83:2d:
b6:3e:71:c5:a6:e1:4b:03:30:4c:64:22:c0:70:b0:c0:12:7e:
97:52:3e:7f:df:7f:23:42:3f:77:da:ac:bf:35:20:09:dd:91:
6f:f1:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:07:10 2025 by rpki-client