Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
File: 79YM7FOzoM_Iy0VDotCopZ5glu4.mft (raw, json)
Hash identifier: dcbwG0+xDpid2KOynsq6pma6i7ORweeLQVRQ7oAutdE=
Subject key identifier: 92:90:CA:E3:DB:CA:A0:07:3B:18:51:BD:D0:3D:5C:4E:BA:34:F3:DF
Authority key identifier: EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
Certificate issuer: /CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Certificate serial: 0198D4A8147C4D8FEB4D1D849E6374D3153B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
Manifest number: 1520
Signing time: Sat 23 Aug 2025 02:00:41 +0000
Manifest this update: Sat 23 Aug 2025 02:00:41 +0000
Manifest next update: Sun 24 Aug 2025 02:00:41 +0000
Files and hashes: 1: 79YM7FOzoM_Iy0VDotCopZ5glu4.crl (hash: thiTyQi/mPwjZxCv479RPctO9UWVASnSKYD9p7g5NBc=)
2: hSNRyfJ3PH2KGCseUOEvDGpfyK8.roa (hash: XdLLCZX0/z3+SIY+d7BWzoDcMrU0AuJsTdPOrDQnlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:14:7c:4d:8f:eb:4d:1d:84:9e:63:74:d3:15:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Validity
Not Before: Aug 23 02:00:41 2025 GMT
Not After : Aug 24 02:00:41 2025 GMT
Subject: CN=9290cae3dbcaa0073b1851bdd03d5c4eba34f3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:7f:86:20:b5:bb:44:c6:eb:61:a1:3b:76:
1c:60:88:df:a8:9e:ce:49:f0:4f:3d:9b:f0:4f:9e:
1e:71:3b:93:9c:6c:a6:13:3b:d9:3d:70:90:64:55:
30:7b:3c:82:19:58:dd:29:ca:5d:45:40:55:26:c1:
94:ed:10:5e:bf:78:15:01:d7:87:1e:54:42:d0:f5:
e2:61:e7:fe:ce:b0:22:02:ec:0b:0d:99:c9:5b:51:
7d:f0:92:12:57:38:55:09:98:8e:c6:64:f9:59:89:
e5:49:08:fa:3e:ff:a9:28:d1:db:e1:42:52:e3:07:
c7:2b:0b:fe:f0:2c:02:6b:94:99:a1:a6:f9:59:e7:
51:b3:0e:4c:84:c0:4a:86:e5:81:c8:ab:45:67:49:
97:b3:03:57:2e:2c:25:bf:7b:bf:21:09:f7:5f:2c:
d7:4f:20:22:c7:8d:28:41:d3:46:e4:14:54:64:83:
b3:94:c5:4e:23:ec:45:4c:9e:26:ba:49:90:28:7e:
72:06:d3:07:d2:b8:ab:87:1a:d8:ad:23:d7:fc:96:
7f:45:0a:8b:f1:f7:80:ac:fe:37:91:56:43:7c:ad:
f6:4b:9e:d9:4a:31:ca:53:86:4f:e7:ac:34:89:28:
6a:e9:5b:ca:6e:31:e6:8d:8e:3c:a9:3e:1f:18:06:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:90:CA:E3:DB:CA:A0:07:3B:18:51:BD:D0:3D:5C:4E:BA:34:F3:DF
X509v3 Authority Key Identifier:
keyid:EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:43:e1:0e:91:ce:ec:c8:d6:a4:53:b4:43:e8:42:5a:38:2d:
8f:39:44:81:2d:04:d3:66:11:86:a5:d4:dc:b1:26:71:af:25:
78:4d:ec:21:21:b4:7a:32:07:f2:58:69:95:c6:8c:2f:9b:cd:
51:5b:4b:af:4c:8b:35:41:89:29:73:b2:41:c0:65:e2:7d:5e:
5d:74:aa:0c:92:bb:73:82:3c:63:48:06:a0:c4:18:85:4d:41:
03:99:63:dd:5e:fc:99:19:7e:21:12:78:8c:88:42:d3:ce:93:
10:0e:77:25:82:63:4f:dc:e1:d4:d6:d6:6d:57:90:72:93:85:
f3:e4:05:2c:87:dd:78:be:e9:a1:85:9a:e0:fa:f6:84:2d:da:
8d:db:e4:4f:8a:b1:fd:93:b2:b3:fd:a6:8f:03:26:74:89:f3:
a3:94:7c:fc:2d:24:f0:02:7a:d5:d4:40:f7:8f:a5:19:e7:95:
15:db:31:2d:d9:5a:71:cb:2b:38:74:bc:05:92:74:81:02:92:
c4:c7:74:60:6c:46:4a:77:d5:3a:b4:9a:36:0a:98:fa:6b:30:
f2:ac:43:f2:18:4a:cf:29:5e:d4:74:92:05:97:f0:57:56:d9:
14:d6:e8:07:a9:2e:02:6b:c4:68:85:0b:93:e3:ad:12:86:e3:
a9:5b:d2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:09 2025 by rpki-client