Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
File: y9dX6ROqzkNObdbW1Qp-33LOiIw.mft (raw, json)
Hash identifier: dk68XubriyRSikWL4PI52g2AZBTPCpaYHV5m6D1OV+M=
Subject key identifier: FC:6C:16:42:D0:F3:2F:B8:F4:E9:28:54:6C:2A:9D:F6:0E:80:75:BB
Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Certificate serial: 0198D54E96CBA07FAC3C4CA8CDEAB8E3D174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
Manifest number: 1016
Signing time: Sat 23 Aug 2025 05:02:33 +0000
Manifest this update: Sat 23 Aug 2025 05:02:33 +0000
Manifest next update: Sun 24 Aug 2025 05:02:33 +0000
Files and hashes: 1: xXYCNUnm-3UsiS0Y2j4IJt8GJmU.roa (hash: kfa/1BPOG2GKMxXo/zgSWZ2DSaf3+pCaWIgYdprI0TU=)
2: y9dX6ROqzkNObdbW1Qp-33LOiIw.crl (hash: hmoZhO0T39MRCTdqF/JZk7wfudYrf+j9yYjkyrJ9V8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:96:cb:a0:7f:ac:3c:4c:a8:cd:ea:b8:e3:d1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Validity
Not Before: Aug 23 05:02:33 2025 GMT
Not After : Aug 24 05:02:33 2025 GMT
Subject: CN=fc6c1642d0f32fb8f4e928546c2a9df60e8075bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:4f:ed:6e:21:5f:f5:7c:be:ee:6d:1e:ff:
be:6f:66:30:64:7d:7e:a3:ec:dd:88:01:67:d1:af:
9f:d0:73:2f:86:f3:e5:30:e6:0a:1d:91:f0:d5:82:
f3:e4:b7:d4:23:47:83:55:1f:f0:82:17:9a:35:47:
da:7b:c3:c5:56:c7:d1:69:9d:23:4b:52:e5:eb:32:
7a:bd:b8:11:b8:2d:12:6f:81:60:7c:bb:3c:ed:87:
e5:27:b1:8a:d7:eb:57:20:43:2c:b9:ed:ca:23:1e:
b9:8d:e7:a8:fe:d3:cc:f1:31:a3:1e:4d:d3:3b:4a:
82:48:b1:0f:4f:a9:4f:3a:88:45:4c:b9:2d:ca:c4:
f3:02:3f:c8:0a:21:c1:d4:48:f7:74:ec:1d:15:fe:
39:25:f3:9d:cd:28:cd:28:ad:4a:7f:4f:fc:f2:c2:
5a:15:f5:b3:77:ac:5e:6a:55:61:a7:0a:d2:39:e5:
01:3b:2c:f4:34:de:de:63:00:37:b2:69:33:99:85:
88:5d:ad:c9:e7:fa:21:60:25:db:1f:32:ba:09:87:
1d:10:60:c6:3b:73:5f:33:9f:53:b0:61:ad:7f:da:
ac:90:f8:24:6b:8f:9f:38:c7:46:1f:b1:2e:82:22:
92:06:92:e4:93:32:1e:c1:a9:6c:4f:44:20:95:c8:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6C:16:42:D0:F3:2F:B8:F4:E9:28:54:6C:2A:9D:F6:0E:80:75:BB
X509v3 Authority Key Identifier:
keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:dd:10:42:c1:46:2d:ae:24:d3:d4:88:f9:22:01:5e:3d:61:
16:c0:e0:78:5c:74:67:a3:a2:7d:07:cb:62:12:67:36:21:44:
e8:72:22:fa:93:8b:3d:79:07:0d:4c:68:cc:64:12:e3:3a:44:
6a:54:8c:44:5a:e4:67:ff:77:78:ca:b1:32:66:a2:5e:d7:6e:
c5:f3:a0:fc:59:86:45:a7:8a:c8:83:af:17:86:92:dd:cb:82:
8a:67:64:34:be:78:09:a7:49:eb:70:03:15:b5:26:0c:60:ac:
b1:c3:39:a5:3c:7b:32:65:a5:66:f7:ec:7d:20:e8:ad:4d:6e:
c3:b3:b5:dc:0d:30:69:b9:ac:8e:c8:9e:a0:e1:26:73:d3:77:
7a:00:1d:4c:7b:32:f0:b4:c0:4c:92:44:68:bb:84:8f:12:91:
02:2d:ab:7d:73:7e:84:f5:39:cb:c7:4e:d9:34:ae:2e:6d:b1:
25:6e:c3:cd:9d:9e:30:4b:24:e8:f8:ab:51:0a:7a:ee:64:8e:
3f:f8:78:28:66:08:78:62:c8:27:c8:c2:a7:dd:5a:af:35:18:
b5:26:b3:9a:a3:52:95:29:b7:85:8f:4e:bb:70:27:c9:fb:1a:
eb:6a:89:f1:3e:b4:2f:9b:85:7b:53:5a:0e:9a:ba:b7:06:66:
b4:b8:98:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:18 2025 by rpki-client