Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier: C7r9yTqtS8J6oroBbExEmoUoeVAE+UtfvPEad7mYxL4=
Subject key identifier: 1B:DF:0C:C3:1B:3D:63:8C:06:D9:15:32:22:04:9E:98:49:F9:9F:20
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 0198D472884848D13E0CACCBFF0D24949A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number: 134A
Signing time: Sat 23 Aug 2025 01:02:12 +0000
Manifest this update: Sat 23 Aug 2025 01:02:12 +0000
Manifest next update: Sun 24 Aug 2025 01:02:12 +0000
Files and hashes: 1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=)
2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: Eqg/eUCW0eYmdiVXpS/DwGpkmbktO3yj1XmcUwke0dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:88:48:48:d1:3e:0c:ac:cb:ff:0d:24:94:9a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Aug 23 01:02:12 2025 GMT
Not After : Aug 24 01:02:12 2025 GMT
Subject: CN=1bdf0cc31b3d638c06d9153222049e9849f99f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3f:5c:de:2d:84:81:e6:4d:00:5c:02:2c:c2:
af:a7:39:a5:90:be:f4:f4:3a:32:11:b2:50:03:55:
f8:41:f8:c2:40:60:21:87:1f:7b:89:2f:5e:03:da:
79:1c:90:50:8b:a6:e4:8a:f5:fc:f0:78:50:ac:ac:
12:21:54:c7:37:cd:26:79:72:ff:d6:a5:15:c0:ad:
f5:ec:c4:5d:a8:ee:52:45:a0:af:da:6c:81:d4:68:
4b:a9:54:bd:34:fd:08:27:0b:56:39:b2:68:95:bb:
ce:fb:70:57:32:d6:cb:c1:b7:7e:e3:44:75:31:2c:
15:f5:7c:00:b3:f8:c8:d0:6f:8f:1d:c6:cd:2d:f9:
85:0e:1b:47:57:65:01:51:92:33:dd:03:97:c5:ce:
ec:68:a3:8d:9e:08:12:6c:38:a5:f2:57:e2:04:b3:
47:dd:24:58:3a:64:77:f7:21:f6:88:cb:e7:57:2f:
66:86:42:f2:a9:03:9c:19:18:b6:eb:2c:66:12:c5:
86:37:7f:d7:1b:6f:71:59:5f:a0:f6:6a:ce:61:c3:
86:47:d7:d3:ea:fd:0e:41:e9:a4:f5:01:52:e8:72:
b7:51:53:35:f7:ac:bd:26:89:b0:b2:5f:2b:9e:c6:
45:c3:73:b1:bf:76:52:1b:38:ff:a5:6b:8a:3d:67:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DF:0C:C3:1B:3D:63:8C:06:D9:15:32:22:04:9E:98:49:F9:9F:20
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c6:7d:bf:88:40:de:85:ae:13:42:1f:1d:6c:2f:a0:9d:e6:
34:eb:8b:6b:3c:e0:73:ab:0e:74:a5:40:e1:dd:70:06:54:12:
94:21:ba:5c:e3:e8:7a:d9:02:92:71:65:19:b4:49:1a:df:2a:
e4:46:0e:41:14:65:d6:a9:43:5b:4b:e4:dd:c8:12:a5:cf:9b:
53:64:7e:33:c3:4a:5a:02:86:95:76:67:01:af:b9:ca:76:b1:
9f:67:c9:ca:94:09:ce:f0:8f:10:04:4e:05:ca:2c:68:75:26:
15:70:aa:a3:09:67:c6:cf:ce:8b:c2:c3:28:b6:82:9f:f6:ec:
9b:25:1f:ca:df:44:56:dc:f3:5e:47:aa:97:53:ac:5f:96:62:
c8:7b:dc:21:74:00:8b:2e:5c:ae:c8:97:5b:a5:82:27:e1:66:
a3:d6:bd:c8:b5:16:ee:6c:d1:30:6a:d6:40:d4:35:13:98:13:
91:db:5a:76:0c:a8:0e:f1:57:a2:19:c6:03:19:17:f7:0f:07:
96:df:bb:5c:f2:4a:f7:bb:4c:74:60:6c:6a:74:d0:5a:22:00:
bf:ec:09:da:4c:e0:1f:c7:89:95:bb:94:39:34:49:01:5b:da:
37:51:fc:0c:cf:f8:b7:ed:14:b5:2e:50:66:82:0a:e3:54:94:
66:51:2c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:34 2025 by rpki-client