Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: 77OhtX4j3v5WJ1luSDLIq9xOpuAJ4LRnaISrfD86HCs=
Subject key identifier: D5:14:E0:E8:AF:F5:90:36:6C:DE:60:58:84:D4:F0:CA:4C:0F:65:F8
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019917645A15BD7BA5CCF4CF8D3481187C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: B5
Signing time: Fri 05 Sep 2025 01:01:16 +0000
Manifest this update: Fri 05 Sep 2025 01:01:16 +0000
Manifest next update: Sat 06 Sep 2025 01:01:16 +0000
Files and hashes: 1: YkbGKc-LGqIQZMDerpDN8XDOTbw.roa (hash: RY+DUa9ZajYzyfuzC6xFjBj7ICr29ESsVlrxpHdgeWw=)
2: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: MGltFycQ6gaN1eV/pQjplTTQ1msLjJz8EGs670Ff7mQ=)
3: zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa (hash: OEzd69K7Il75QSQW6UQvA0dRBfsE2azJdJL9XybJ68I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:5a:15:bd:7b:a5:cc:f4:cf:8d:34:81:18:7c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Sep 5 01:01:16 2025 GMT
Not After : Sep 6 01:01:16 2025 GMT
Subject: CN=d514e0e8aff590366cde605884d4f0ca4c0f65f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:aa:c2:38:e1:02:55:5e:8c:5c:4c:bd:b2:
04:a8:2f:a1:61:91:71:5f:62:84:e6:cf:36:a4:96:
db:be:fd:8b:2a:bd:6b:4c:8e:fc:c1:bb:50:ec:60:
88:5d:41:5c:d8:6a:4a:9b:5b:69:3d:1e:ce:93:48:
71:bc:b0:ad:39:7e:6b:14:3b:cf:31:91:bc:3a:9f:
b0:24:19:15:b9:26:7f:36:4e:92:06:29:4e:de:14:
16:22:6d:51:db:bf:01:97:13:24:db:f9:9e:3b:83:
08:dc:d8:b2:e5:93:88:8b:da:a1:00:3d:b5:a8:7f:
ec:8b:25:22:e9:d5:55:b3:f5:a0:8e:b9:59:3d:26:
e7:d9:23:f6:ef:92:1f:a7:61:d0:45:52:8d:1c:7d:
b2:fd:41:42:ca:45:8c:16:87:b3:06:36:46:ce:9f:
b7:8d:13:94:54:13:3f:bd:d2:ee:60:10:3e:74:de:
b6:1b:ea:21:c2:b2:93:6f:da:c0:b3:a8:a8:d6:e7:
c0:fc:d9:96:1f:cf:14:d9:cb:76:6c:cf:71:40:86:
ef:b5:33:6b:d8:f9:af:8d:20:3e:1b:a7:fa:82:2b:
72:71:80:c0:46:b2:14:65:95:02:28:bf:ec:08:77:
63:21:ef:24:43:3c:bd:a1:32:ab:70:3e:7c:be:3d:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:14:E0:E8:AF:F5:90:36:6C:DE:60:58:84:D4:F0:CA:4C:0F:65:F8
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ad:f3:0c:62:c9:98:65:7c:f5:dc:22:b3:82:e9:0f:50:55:
a0:8b:49:29:64:2d:ff:1f:ab:5c:de:f8:d0:bf:3b:22:67:73:
68:33:bb:4d:ac:0d:4e:ba:93:fc:03:22:af:08:65:a6:d3:93:
7b:8d:fc:26:d9:12:2e:48:04:b9:be:de:77:4e:f1:63:cc:5a:
f6:e5:b4:31:f7:10:e5:0e:95:51:3d:d1:c5:9d:a7:7b:5b:60:
3a:f0:66:06:7a:3d:a9:b9:ec:c4:c0:6d:f1:ad:4b:ec:2a:88:
35:b1:91:72:7c:dd:eb:f3:43:bf:22:25:95:7f:93:89:fb:d5:
48:e2:a0:b3:dd:d0:ae:c9:67:f1:ca:47:67:ab:4f:08:be:32:
c5:ac:ad:1b:17:25:68:81:9d:89:d7:d2:65:01:fa:b8:c6:3b:
a0:f8:9d:c1:bb:45:ec:56:a9:12:0d:08:ce:7f:4b:5a:fb:00:
32:be:9d:52:b4:46:a6:8c:9e:b0:61:e8:36:77:26:c6:ae:13:
68:03:c3:43:0b:de:09:ba:ee:2e:46:78:79:bb:2d:0a:9a:67:
0e:d8:9c:9b:a9:a4:e0:21:06:39:c7:09:1e:2e:34:a2:a2:5e:
4c:90:8d:db:d5:8c:ae:3e:f8:37:90:19:19:14:7a:f0:26:3e:
75:1c:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:29:39 2025 by rpki-client