Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: k1cDeRdr77Tf3saKgVIT0syyKSTCS/FTqfHWXys02Fs=
Subject key identifier: E0:75:E8:A3:15:24:DF:0C:52:DC:5F:29:85:4B:B0:59:18:60:FB:89
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 01992CA29CA56D066F823D150ECFB1BD41B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 04:01:18 +0000
Manifest this update: Tue 09 Sep 2025 04:01:18 +0000
Manifest next update: Wed 10 Sep 2025 04:01:18 +0000
Files and hashes: 1: OSCfUjF3Ef7ghNU67VVpfMtgWoo.roa (hash: moftdOXORBIAXnTpLj/Op+kUYg+QJ1SFAtNNQW7Lki0=)
2: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: nPaYUFczEORAaiRkZfmaKF2QtGHNFvH469M0yfquzz8=)
3: lTDGFOEHleeAgYpGLUXAmxQeWF4.roa (hash: MXBaSrVfYLxOUa1qMNqlBVqGPuFkLVafjJsmfk4Jfmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:a2:9c:a5:6d:06:6f:82:3d:15:0e:cf:b1:bd:41:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Sep 9 04:01:18 2025 GMT
Not After : Sep 10 04:01:18 2025 GMT
Subject: CN=e075e8a31524df0c52dc5f29854bb0591860fb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:0c:d3:b7:2b:37:f3:1d:2e:4c:9b:d4:2d:
ff:19:85:9d:52:d0:e4:3c:2d:77:41:89:9f:9d:bf:
1f:ff:85:c8:19:72:26:d6:35:1d:20:43:35:fc:d7:
8e:67:ec:a8:7f:68:00:eb:7a:9e:e2:38:0e:5f:da:
92:ca:f3:52:ca:04:10:56:5e:b2:e9:af:60:ab:75:
03:7d:28:52:f5:b4:aa:29:50:47:f8:1a:45:5d:f8:
73:5d:51:7d:78:b3:90:9a:3e:71:8f:27:ff:ed:b2:
f1:28:59:56:6d:8f:d1:a5:60:29:fa:4a:b7:f5:d8:
ec:c6:3d:01:88:f7:bb:c6:fd:07:c1:c3:c1:33:47:
a6:4b:b4:7d:af:1b:fd:ba:b2:2e:8d:f3:cc:cb:e2:
16:ac:70:a7:ef:a0:62:43:2c:37:0f:ab:bc:2d:57:
d1:82:08:bf:4c:cf:72:c9:7a:0a:c7:a1:92:20:a8:
1b:1b:fc:f6:61:eb:ef:43:82:d9:20:c9:db:fa:eb:
c6:d2:af:35:1b:7c:b5:9a:91:42:bc:40:d5:af:38:
2b:01:73:c5:8c:05:e5:98:85:62:4d:d2:90:90:de:
3d:b6:64:85:81:5d:69:6c:95:99:9f:66:e9:70:af:
e9:6f:f9:d4:6a:03:e5:12:ad:eb:81:9d:fd:eb:cc:
df:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:75:E8:A3:15:24:DF:0C:52:DC:5F:29:85:4B:B0:59:18:60:FB:89
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0e:37:01:88:79:af:ec:69:79:17:f3:56:41:27:96:5e:73:
a2:a4:d2:89:e4:94:5b:a9:f3:92:7d:97:6b:75:6e:17:a0:87:
56:73:8d:39:84:1e:e2:29:2e:bf:f6:48:29:22:9c:b8:db:89:
4a:03:28:62:9d:bf:3f:27:05:84:9b:2a:25:80:f0:aa:cb:c9:
5e:a9:ab:7c:c5:f1:d6:ad:c8:84:ed:2f:d6:2b:c3:02:2c:d5:
ab:35:e6:36:a2:25:72:92:b3:7f:6e:cd:a8:4c:c0:48:65:34:
aa:d6:40:be:77:dc:f4:ed:4d:a1:9d:a9:24:48:ee:45:f3:e9:
e7:20:95:43:fa:a5:b2:79:86:d6:85:f0:04:7b:19:17:fa:3b:
b5:e6:3d:f9:24:b7:42:1a:74:9b:99:6d:15:30:81:b6:c8:c9:
b3:22:a0:6d:60:94:a4:23:14:39:d7:c4:44:fd:fc:3b:c9:e6:
40:27:93:d5:bd:59:21:b8:78:02:35:c2:af:a3:e0:03:7e:5c:
72:42:3d:f7:93:b1:5f:c6:c9:fa:95:3d:14:d3:32:62:81:50:
df:c3:f0:d0:e9:54:02:8f:02:55:4c:0c:eb:61:57:b1:4f:38:
25:34:8a:ff:47:0c:8b:7d:9b:da:00:22:59:f1:41:36:55:2d:
01:48:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:20:08 2025 by rpki-client