Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
File: RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft (raw, json)
Hash identifier: 8JIMeMtgKxQg1+J6m0nhVAcEQi1Wjp6+sFoeIliSXfc=
Subject key identifier: F8:39:67:9A:71:B6:28:C9:BF:A2:F6:51:92:F9:B6:CA:0B:81:E9:66
Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130
Certificate serial: 019922FA6741225E73408004F73EAD3790BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:00:59 +0000
Manifest this update: Sun 07 Sep 2025 07:00:59 +0000
Manifest next update: Mon 08 Sep 2025 07:00:59 +0000
Files and hashes: 1: EXivR_Wvv2aOO3jHO658CAON0No.roa (hash: fh34cv2WRgihe99oCLRpx5puteDZpUePtPBBSbNg/Qg=)
2: RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl (hash: lwNr+1VucgXG7pY6KHlnYqSg9Ad4kGOWMYa0Mk7vx/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:67:41:22:5e:73:40:80:04:f7:3e:ad:37:90:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130
Validity
Not Before: Sep 7 07:00:59 2025 GMT
Not After : Sep 8 07:00:59 2025 GMT
Subject: CN=f839679a71b628c9bfa2f65192f9b6ca0b81e966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:7c:78:5f:d5:3c:ec:40:9f:17:44:e8:75:
65:a0:f3:23:54:89:27:a2:65:4c:e4:b1:c7:40:ae:
70:52:93:10:d4:2f:9b:66:a4:d4:51:d5:be:22:e2:
3f:fd:4a:eb:42:33:b8:90:dd:6b:63:39:12:da:e1:
9f:d8:c0:6c:8e:8a:a7:f5:be:27:28:bd:83:86:aa:
99:76:16:99:4e:fe:c9:94:67:d7:a5:d4:03:f3:05:
e9:0e:a7:28:2d:cd:e2:01:7c:0c:11:16:0a:90:56:
6b:d5:bb:5a:c3:a0:fb:79:74:b8:aa:e3:41:47:f9:
59:e7:68:ca:4c:ad:1f:eb:7d:a4:23:9e:fb:25:94:
41:00:23:b6:84:59:31:9b:d9:c7:3b:c6:ca:c8:a9:
6f:f1:6f:9c:90:64:ef:b2:6d:84:2e:c4:7e:22:2b:
51:0a:16:a3:21:a0:c5:8b:66:a7:ed:1e:0d:9e:96:
e1:83:4a:9e:5d:98:d1:80:55:03:f2:f5:b7:d3:2e:
59:16:45:65:af:e3:21:8e:83:73:f5:a7:54:65:94:
52:26:11:04:3e:0f:76:52:10:76:3d:f1:e8:3d:ba:
92:ca:a2:41:38:49:cc:b4:5f:4c:39:11:f3:df:4d:
85:b8:fa:ca:2e:09:98:58:89:70:a2:a7:c5:ba:8d:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:39:67:9A:71:B6:28:C9:BF:A2:F6:51:92:F9:B6:CA:0B:81:E9:66
X509v3 Authority Key Identifier:
keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2a:71:a8:c1:7e:46:d7:ac:26:bc:88:71:38:25:a5:bf:a5:
f1:ee:4e:7e:ff:63:c9:2f:7b:c8:1b:66:c2:d9:21:e3:d6:48:
76:8d:46:88:66:57:54:67:62:c5:de:a2:44:36:bf:a7:78:f1:
c5:17:e5:5e:36:ed:aa:d5:c7:95:fd:89:43:f8:eb:e0:06:7f:
95:05:d2:64:93:27:4d:e7:85:71:07:62:f6:02:ee:5f:79:d5:
b5:a3:16:15:e6:2f:fb:ec:be:53:88:7e:71:1a:fd:e6:59:74:
06:64:38:e3:f9:a4:fd:26:cf:1e:75:da:17:ad:76:4e:c2:05:
f6:c4:8c:c6:cb:0b:47:ec:cd:37:39:1e:bd:36:ae:0b:e2:73:
ca:a7:72:4c:99:f3:51:f2:3a:83:1b:cc:3b:f3:f2:77:80:8f:
e0:ee:cb:93:df:94:c6:ca:0b:03:bb:82:2b:4f:33:8b:46:e1:
a4:bd:f4:8f:b9:d5:fe:f1:32:af:49:1c:66:f5:79:70:db:c9:
52:ed:fc:39:ec:40:3e:2f:ac:da:3d:1b:b3:73:a6:cb:a2:4c:
a8:c3:41:b9:1b:e9:a6:68:5b:cd:32:30:fa:81:27:87:07:32:
9f:2d:54:c8:79:3a:fd:44:a2:73:bc:3c:d3:2b:75:7c:5a:6e:
a0:8c:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:39 2025 by rpki-client