Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: vgEJzUTo7wT++Qe5P4F0k8M4fNv/QV2CQ4Cd9150058=
Subject key identifier: 8A:29:B8:4C:8D:83:86:65:7E:4E:CD:AB:E8:CA:A4:20:EE:8E:F8:DF
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 0198D5F121C855624150C4D129D7DED16DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 10E7
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: kXAQ4ziX7YdRC5O01j0lQlOm4iQJTDaDd2NpLZagMe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:21:c8:55:62:41:50:c4:d1:29:d7:de:d1:6d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=8a29b84c8d8386657e4ecdabe8caa420ee8ef8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:8d:0f:bb:30:ce:65:83:9c:78:4a:5b:b5:
3b:68:1d:3b:60:0d:27:fb:4e:ed:43:8b:8d:e3:5d:
6c:24:9f:0a:27:9d:3f:36:b0:ec:98:41:b4:d6:55:
83:48:9b:b4:e2:88:db:52:de:67:8c:0c:44:bc:f2:
2a:96:e7:ff:d0:07:63:f7:40:01:da:c7:84:89:3a:
db:c0:e8:fd:95:9e:4e:77:56:c0:6f:c7:b7:b8:c2:
85:8c:4c:79:30:e4:70:a1:8c:dc:c2:86:71:e0:8b:
a9:a5:ef:47:aa:04:42:5e:9d:4c:c8:ab:64:4b:94:
3c:81:d2:fe:60:97:7d:63:7a:11:3f:ca:6a:44:3d:
80:88:5d:82:4f:a8:c3:3e:fc:66:97:44:40:69:fd:
b9:ab:69:0a:b7:77:37:36:b2:58:a9:1d:1b:7f:11:
24:6b:58:7c:e0:9c:9d:2e:44:da:e9:37:e0:02:cc:
93:18:b6:6e:66:05:8d:0a:a1:1d:52:58:4d:25:2d:
30:3e:b7:2e:74:cc:df:98:53:fc:86:b9:f6:9a:b8:
dc:3b:0f:a9:66:70:50:c7:43:ff:98:32:68:0c:6b:
95:bf:23:da:ff:66:ae:0f:93:58:39:30:99:d6:7d:
80:ab:8e:17:dc:bd:4f:77:0c:47:1f:e0:19:2e:d2:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:29:B8:4C:8D:83:86:65:7E:4E:CD:AB:E8:CA:A4:20:EE:8E:F8:DF
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a6:f5:c1:97:00:ab:b2:cd:31:b6:73:77:5b:dd:99:36:b5:
66:27:e0:e4:b8:f4:6a:a6:e5:cc:a2:2a:73:82:bf:41:b3:30:
ee:ea:84:e4:cb:19:1c:93:b9:03:3f:0f:35:c8:65:67:40:b6:
d6:70:43:c1:8d:19:52:fb:33:ab:59:ec:e5:e0:62:91:c8:6f:
5b:9e:c2:5e:fe:b2:a5:c4:c0:31:87:64:98:90:31:9c:1f:2a:
88:d3:5a:4f:23:8e:17:05:06:40:90:fa:89:74:92:06:13:e1:
07:e6:eb:13:88:d7:01:e1:79:7b:ee:1a:b7:73:9f:b3:56:df:
6b:25:04:7b:a7:04:b1:55:c3:30:40:04:2a:8d:e0:f1:af:5b:
2c:15:89:05:f5:55:b7:64:cf:2f:26:89:ce:23:5a:34:c9:67:
5b:f8:ac:77:e9:5b:31:bf:0e:f6:cd:24:cc:04:e3:36:3f:22:
f3:51:0f:09:b4:46:b1:de:38:8f:39:c8:54:34:ee:c1:de:d0:
1b:ae:92:5b:66:25:f4:a5:83:0a:ca:ed:af:b7:16:03:1c:d1:
cc:96:60:2e:b5:68:17:af:f2:4a:b6:48:4b:d7:4e:e2:18:f9:
56:16:44:8b:91:55:81:0c:fb:a8:07:7c:70:5a:c7:60:4e:3a:
83:09:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:22 2025 by rpki-client