Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier: 3U8LqyJWaAdJbcpAncKHSwnv94S16Aj6sv0XXZdTQRU=
Subject key identifier: 21:C7:57:29:DD:6C:FC:5F:15:68:2C:C7:4D:FD:1D:C3:29:2F:62:CA
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 0198C67F69C589FCBD326561B1FE0F73F0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number: 0294
Signing time: Wed 20 Aug 2025 08:01:35 +0000
Manifest this update: Wed 20 Aug 2025 08:01:35 +0000
Manifest next update: Thu 21 Aug 2025 08:01:35 +0000
Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: EbCDlx5IrtFMzvq93abje1MAkwfKEdbP9hWb3b7KNu8=)
2: JN9C0lCNENYeap20Rh2rmbTTK2I.roa (hash: JYxwyuD1IOAjEG0JPIbV5Puyq/yeqKzJl8UqOIBu2v0=)
3: mfDwEiGRmiWMmFDQIE-xmSECzg8.roa (hash: iS/PokmAhVq2sVGbLhXCo+Ur9JIXXT1eTOi1veSDLr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:69:c5:89:fc:bd:32:65:61:b1:fe:0f:73:f0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Aug 20 08:01:35 2025 GMT
Not After : Aug 21 08:01:35 2025 GMT
Subject: CN=21c75729dd6cfc5f15682cc74dfd1dc3292f62ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:8d:1c:9f:23:4f:ae:e9:b7:75:dd:89:f3:
a7:f2:ae:e7:d8:bf:c1:26:76:82:0a:8b:e5:44:b2:
f5:3e:1f:ad:1a:f6:2e:b5:44:67:6e:6d:ed:7a:21:
ec:77:1d:57:a8:70:31:30:b2:ab:cf:ba:00:d5:8b:
4e:1f:20:5d:b3:da:71:31:75:59:1f:d5:01:32:8a:
b7:49:4d:ef:03:1b:10:34:7a:8a:55:59:3f:fa:8d:
5c:4a:d6:f1:26:9e:54:b4:72:e7:60:5c:05:c8:06:
f3:a9:60:ae:aa:ee:e6:f5:c0:1d:91:21:b1:46:68:
02:4b:7d:71:ac:0c:e0:e7:89:25:d2:dc:e5:47:bd:
4a:18:b0:30:a0:fb:62:ed:c7:14:1a:e3:39:ca:37:
f6:aa:84:7b:d8:61:fb:47:8d:75:c8:14:01:33:25:
84:05:e9:c0:df:08:11:56:ac:66:7a:e4:8f:42:a2:
53:1f:e8:7a:12:ae:42:52:af:cb:f8:b2:3f:e8:19:
c2:a3:a2:17:b8:15:af:8b:72:f8:f4:22:5c:31:ce:
ee:4f:27:bd:ec:b5:12:f9:c0:8a:00:4a:89:e0:ae:
dc:7c:ce:af:a6:fc:a1:dd:04:e7:61:52:77:67:ee:
ce:b0:73:c9:47:e4:26:e1:ae:38:c7:e3:be:08:61:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:57:29:DD:6C:FC:5F:15:68:2C:C7:4D:FD:1D:C3:29:2F:62:CA
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:16:01:6e:2c:17:c7:8b:df:ff:0e:94:95:a2:80:5d:49:33:
b0:c3:3c:80:35:0e:0f:86:36:37:c6:96:b4:cf:e1:2e:d6:24:
e7:24:fe:05:7f:d5:c5:62:0d:82:eb:e1:15:9d:f9:b7:5c:9a:
a7:75:ea:ce:a4:b9:77:38:8f:aa:74:93:e4:48:66:a7:21:67:
64:38:6e:9b:39:5c:1f:a7:9a:c8:4b:bc:60:61:ec:7b:26:88:
eb:c0:d8:c3:bb:9d:dd:cc:f1:a4:e0:23:10:01:e0:47:e2:27:
a5:37:14:ec:f1:78:22:3b:96:db:2f:3d:bb:4c:2e:19:07:f9:
13:1b:31:b0:40:7a:82:32:aa:bd:1d:87:89:f7:20:c9:c7:99:
7c:d9:e0:b3:2e:87:bb:fc:da:27:12:8b:0c:86:e3:70:32:d3:
56:a2:4a:e6:51:07:4f:39:f0:5d:ce:a8:6e:da:e5:ad:89:52:
a4:eb:5e:6e:7c:c4:19:a7:1d:75:d6:ad:b2:c7:64:9b:9b:30:
4a:3e:cd:2b:10:08:aa:73:70:a1:59:95:92:45:3f:00:e5:e0:
f6:b7:df:df:9a:2f:ce:e5:c4:44:a0:5c:14:36:8c:bf:55:79:
cc:78:2e:98:b9:74:7d:9c:fe:1b:31:96:51:d2:82:ad:99:b6:
19:5b:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 17:48:09 2025 by rpki-client