Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: AHs3bFCzDiSLcTf1Tdm9C2VVbaCaEoh2aCxfu+jSK3g=
Subject key identifier: 86:8E:36:CF:CC:FD:2F:71:8E:4F:5B:2E:84:8E:7F:15:1D:46:DA:68
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 0198D473F800CC1E6C66C9D93082BFFDA8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 01FC
Signing time: Sat 23 Aug 2025 01:03:46 +0000
Manifest this update: Sat 23 Aug 2025 01:03:46 +0000
Manifest next update: Sun 24 Aug 2025 01:03:46 +0000
Files and hashes: 1: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (hash: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: 95bvJDYS8UqPG3qXJ/sSYkn/AU/5ClKvXLSvbwGW5T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f8:00:cc:1e:6c:66:c9:d9:30:82:bf:fd:a8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Aug 23 01:03:46 2025 GMT
Not After : Aug 24 01:03:46 2025 GMT
Subject: CN=868e36cfccfd2f718e4f5b2e848e7f151d46da68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:df:ec:92:b1:9d:30:68:de:c8:d2:58:c8:
96:14:2e:6d:e9:fc:db:4f:c8:63:89:52:3f:9d:e8:
00:f6:f4:d1:83:4d:63:54:ed:c4:15:83:27:0f:40:
31:ec:80:69:2a:d8:e9:e8:63:de:05:4a:c6:d4:55:
c5:cc:44:35:e5:54:df:c6:31:c5:fe:16:99:c1:f1:
49:f8:75:e8:14:f4:cd:6e:ed:67:1f:84:c8:a4:33:
06:bd:4b:c1:19:8c:38:cc:85:f2:24:3a:4c:29:83:
88:72:07:b5:9e:33:ce:61:82:9c:6b:67:d3:22:74:
cf:17:35:89:04:55:cd:f2:f0:61:ae:27:bb:92:49:
28:52:58:34:7b:7a:dd:cc:33:29:92:32:4c:1c:0b:
35:2f:12:9a:89:31:2d:16:6b:3a:27:5c:ba:14:7b:
fe:2d:38:e6:47:54:e7:b5:8e:44:68:0c:5b:22:d7:
06:89:3f:06:f5:b0:38:84:97:1e:84:c9:ff:1f:15:
1b:c1:78:90:2e:96:4a:58:de:2f:1d:63:8d:57:34:
cc:22:9c:15:a7:26:bc:08:6a:c2:d7:47:c5:3b:0b:
bc:8a:38:31:b4:65:df:f1:74:37:36:0b:10:f5:6d:
4f:e5:25:01:ff:34:55:9e:05:eb:7c:b0:fe:2d:3e:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8E:36:CF:CC:FD:2F:71:8E:4F:5B:2E:84:8E:7F:15:1D:46:DA:68
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:34:3c:b9:cf:12:9b:6c:a9:94:14:a3:ad:6b:93:5d:ec:ee:
1e:45:54:24:15:e0:f3:9c:0a:30:d2:d8:ad:ae:df:8f:f4:d2:
8c:02:7d:e7:5e:b7:bc:e3:f0:cc:81:33:e1:97:9e:d5:fe:fc:
ab:18:c3:93:86:9d:72:97:af:60:84:d4:52:3e:aa:a1:2a:70:
55:0a:73:a0:1a:61:14:50:52:f7:82:d3:23:af:62:90:30:a4:
65:ad:4b:be:b6:27:45:f0:f7:fe:1f:bd:9c:9f:5d:bb:ba:e1:
7d:09:dc:bf:65:67:3f:9d:70:e6:ff:2d:e6:e9:64:6e:4b:2f:
59:dd:ac:d8:c2:b6:d6:9b:d7:0c:38:d4:4d:68:e0:d5:a5:0b:
df:5a:30:60:03:4d:55:e7:22:9a:97:ff:bc:ee:48:ca:c3:5f:
ed:fd:0d:53:b0:1b:45:23:f0:60:e4:df:b3:bf:53:42:10:35:
34:87:4c:64:05:96:f4:35:a1:ae:8e:98:5d:7d:27:c5:bf:39:
58:fd:51:23:6a:83:5e:fb:fd:f0:2d:10:5a:44:f9:a7:80:3d:
44:a8:e5:b5:e5:c1:e1:a0:8d:50:2b:15:e5:5c:97:81:32:23:
21:d9:0b:bf:e1:cd:4e:ca:65:e1:78:a0:3a:ca:15:58:d3:ec:
e7:72:43:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:19 2025 by rpki-client