Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
File: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft (raw, json)
Hash identifier: z90Mx3PLOTbA5Sg76f+RY3dVXxuYBPYHpMKwoiz/K1s=
Subject key identifier: 09:B2:45:E3:90:0D:77:C2:45:B9:10:80:6E:C1:60:F3:1D:F8:EC:60
Authority key identifier: CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
Certificate issuer: /CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Certificate serial: 0198D54E637FDA85076F309A77D2252C051C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
Manifest number: 0471
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: fOUkBLPvgdmMw3qOCphjRq4t0eY.roa (hash: r4VQRSy7Gza9d4nweiTC6bFhiBWBCqInaEx5ZdTsmu8=)
2: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl (hash: cmZoCfZHo/hDp+CbZKXYMtjYejEBPIvgNYkAfnpNF4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:63:7f:da:85:07:6f:30:9a:77:d2:25:2c:05:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=09b245e3900d77c245b910806ec160f31df8ec60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:a8:ae:59:4b:f7:9c:dc:8f:f4:d1:27:0b:
33:12:c0:02:dd:c5:5f:bd:56:b8:56:26:9f:3f:ae:
99:8c:6c:09:74:8f:6d:84:f2:8c:bb:d9:e5:23:65:
46:8c:45:05:7b:91:75:c4:d6:3c:3a:58:9f:02:75:
e4:4c:cd:fb:f0:d7:4e:e5:20:94:09:7b:11:29:88:
2a:6f:dd:1e:0c:5e:e3:c1:f5:c7:1a:90:10:42:ce:
89:8f:13:c8:b4:0f:be:7b:23:98:e3:fa:3e:26:20:
21:70:3c:cd:c8:05:59:75:d0:56:51:2b:79:70:59:
47:84:e4:36:7d:36:96:4f:e2:8e:3e:16:49:3f:8a:
ac:9b:d0:76:64:18:2b:5b:bb:84:7c:19:ee:80:57:
71:6b:87:8a:24:68:57:25:0d:3c:a7:a5:77:f0:1b:
45:30:0e:31:63:7a:03:32:9d:75:ea:73:2f:75:47:
30:c4:3d:95:1f:36:ae:54:84:20:3d:df:03:4e:19:
cc:cd:54:96:9a:2e:a0:4b:04:95:f8:8c:d9:61:37:
c6:39:03:c4:3a:09:c1:cd:3a:f3:e5:a0:03:3e:9f:
35:e1:e3:af:ad:1d:88:b8:7c:77:78:ef:f6:03:96:
23:4a:9a:7c:25:90:9d:bf:5d:07:ab:ed:43:62:2b:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B2:45:E3:90:0D:77:C2:45:B9:10:80:6E:C1:60:F3:1D:F8:EC:60
X509v3 Authority Key Identifier:
keyid:CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:27:04:d5:b0:4d:f1:28:40:9d:e8:f6:5b:4c:98:f3:f7:e4:
b6:a8:9e:8c:5f:9b:fa:69:39:fa:f6:38:6e:4e:a8:2c:0b:e5:
54:11:1c:2e:75:65:2b:5b:3a:e9:3d:ad:2c:10:52:e9:26:1c:
e8:79:e0:08:74:c3:71:8c:c8:ea:2c:1a:6d:01:38:a8:11:e4:
cf:67:10:54:36:60:8d:2f:d1:f4:8a:fc:0b:1e:7e:78:cb:fe:
22:9e:b1:fe:bb:f3:a0:4e:58:9e:1c:a9:1b:a8:25:c9:09:84:
ff:d5:07:53:00:f3:4c:b9:1d:72:7a:70:97:c2:2d:b0:70:17:
27:5b:a3:5a:6b:31:33:05:01:b2:6f:0a:8e:ba:02:89:b7:74:
21:b1:73:a4:e4:63:d9:56:af:f1:e8:9f:57:e7:d8:67:ee:49:
24:de:a8:b2:9f:5d:00:46:00:65:f4:ae:fd:44:fc:8c:93:17:
06:4d:22:f7:56:5e:d7:a0:83:fe:5f:a4:2c:b5:da:07:b8:8a:
c8:ba:43:d1:99:1c:2f:60:e9:f4:e0:6d:bd:ae:a5:70:9c:af:
15:b7:b0:d1:bf:8d:4f:2b:f4:88:86:ed:47:96:9e:c8:dd:20:
64:bd:43:c9:77:ed:f7:51:07:3b:c7:01:91:ce:62:74:96:b1:
0e:29:53:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:56:11 2025 by rpki-client