Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: kJxVsvDst2tg7XcjsIHBO4x2ajPeFRy1kO+afESzQro=
Subject key identifier: BC:37:08:A7:0C:83:32:AB:43:A7:E1:5E:23:88:D8:37:37:8F:10:34
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 0198D6988F688894071CE81CB37EDB862777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0B66
Signing time: Sat 23 Aug 2025 11:02:59 +0000
Manifest this update: Sat 23 Aug 2025 11:02:59 +0000
Manifest next update: Sun 24 Aug 2025 11:02:59 +0000
Files and hashes: 1: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: iug8LLl2Tq6yLgK1cmVgbAlsPEnsjypThQQTzdzuRqk=)
2: cQb4a56386hwKkX2XTV23EzTpVI.roa (hash: T6mT7SHm8VLGp8LXtDhfbm2F1razovLuYTeTLKEqGFE=)
3: gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa (hash: knELgWCfA/Sf8Z/AQKl4MF48MxHULiqnBptb464jAhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:8f:68:88:94:07:1c:e8:1c:b3:7e:db:86:27:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Aug 23 11:02:59 2025 GMT
Not After : Aug 24 11:02:59 2025 GMT
Subject: CN=bc3708a70c8332ab43a7e15e2388d837378f1034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:bf:6f:4b:17:bc:dd:a4:1f:63:76:fb:a7:
8e:a9:6c:77:9d:ef:d6:98:5e:3b:65:1f:46:af:b1:
51:4f:cb:4a:7d:b8:8e:c2:6c:20:ed:31:d8:a5:f6:
36:8f:d2:5e:fe:aa:0c:ec:6f:2b:c3:34:04:38:eb:
74:f8:42:3b:14:09:4d:93:c1:5c:21:67:ee:59:c3:
b3:c3:6b:10:65:98:7a:30:99:e0:45:9e:2c:18:43:
67:87:e2:c7:1c:1a:ac:06:61:b8:39:a4:ce:b2:fd:
0f:73:cb:c1:f8:8b:8d:45:cc:86:21:78:e4:c5:2c:
06:db:af:6d:88:64:d3:7a:d3:d3:28:cd:79:66:ba:
ba:2b:67:c5:79:65:69:a6:16:13:d3:87:30:a9:d2:
7d:67:f0:11:73:c8:67:06:73:6f:58:4d:04:2b:a5:
74:1e:6f:35:3b:f3:66:29:4e:56:d6:98:9d:35:d3:
c3:89:ba:80:d3:66:7d:73:17:5e:74:6f:a5:cc:dc:
43:bb:ed:ed:da:a6:cc:34:02:31:e5:de:a6:d5:8b:
21:d9:3d:3e:a3:40:b3:91:ee:a7:8a:74:3b:aa:20:
46:24:70:fa:5b:38:bc:29:1e:5e:a9:83:b8:73:42:
be:5c:06:68:77:88:5f:0a:f0:ae:99:17:1d:e6:d2:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:08:A7:0C:83:32:AB:43:A7:E1:5E:23:88:D8:37:37:8F:10:34
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:82:eb:84:cc:07:cc:19:af:85:99:75:2a:42:c7:71:8a:e7:
4b:49:dc:87:7d:9a:69:ab:a0:68:c5:1b:f2:78:5c:7f:20:d9:
f5:20:ba:72:d7:61:7e:ca:4f:e4:11:d2:52:b4:a8:c0:bc:eb:
ff:2d:a7:13:1d:20:96:ee:cd:23:59:d3:a1:45:62:35:7b:cb:
e6:59:1d:56:b6:01:4c:a4:04:1e:ca:81:4c:df:5f:9f:eb:f6:
99:2b:e1:2e:b9:7c:be:11:70:ba:b0:af:14:69:4c:b4:ec:22:
ad:cb:90:21:cf:81:ba:ae:00:37:71:8d:89:33:a9:f4:eb:05:
8c:e7:83:19:ca:20:a0:95:44:9e:05:f1:95:82:d7:3c:5e:5e:
3c:df:e6:4a:92:33:ec:66:e0:8a:b0:ff:98:05:1a:5c:91:69:
3e:d9:47:53:a3:bd:0f:22:78:15:21:fa:bb:78:2b:06:4d:48:
59:60:88:3f:7b:f1:af:d2:0f:4d:13:68:ae:d1:2e:e9:08:9e:
80:72:79:a5:3d:e5:86:60:fe:aa:e7:c5:ab:1b:b1:20:07:f9:
b0:d8:bd:f0:56:fb:70:ff:83:75:9c:ee:eb:b8:ba:14:84:bd:
36:91:5b:1d:b7:80:ab:f1:70:e5:bd:36:fe:1b:44:90:e7:9c:
f5:87:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:35 2025 by rpki-client