Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: f4XfoIvhF6LsZfCQ/M0AqOksqY6mIlz6+rflESLZILQ=
Subject key identifier: 98:1D:A0:B7:DF:DE:6F:33:6A:84:9E:DD:7F:E0:CD:8E:F6:66:7A:A5
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 0198D697F1471A698D9ADB9DC9167F38229D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 06AF
Signing time: Sat 23 Aug 2025 11:02:18 +0000
Manifest this update: Sat 23 Aug 2025 11:02:18 +0000
Manifest next update: Sun 24 Aug 2025 11:02:18 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: doOc/ajyMfQO8LEn1WmGrd4IyhL/H73RokdSKNjhT2s=)
2: VggHyCGAaBqT1YS8rDtl_KIKf0g.roa (hash: ViUcKTn2EWx6jkDRARIAQEFwd2YhU52ckTDp4ZosIG0=)
3: p_i4xl5EipcKtC3SPVXhIuYprDw.roa (hash: JFa6mX6HD50RoNNNUoDQdjnuPBe7vWX9ha3WyuSEprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f1:47:1a:69:8d:9a:db:9d:c9:16:7f:38:22:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Aug 23 11:02:18 2025 GMT
Not After : Aug 24 11:02:18 2025 GMT
Subject: CN=981da0b7dfde6f336a849edd7fe0cd8ef6667aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:f4:06:25:c8:a1:28:d6:85:21:88:58:e3:
f4:6e:d2:2b:e8:28:ea:d0:da:75:c6:06:a5:32:47:
d8:98:1f:c5:4b:4b:60:dd:cc:04:3a:64:13:1e:4d:
f1:7e:fb:27:33:44:1a:14:8c:83:f9:44:ad:b7:ab:
2b:2f:f2:77:13:f3:04:38:18:15:e8:85:5a:0e:5a:
f1:a8:17:6d:2b:13:39:28:94:cb:69:36:81:c6:3a:
54:07:09:ca:64:6d:56:86:12:aa:d8:ee:99:b2:2d:
23:51:db:a2:29:3e:1f:45:49:f1:01:69:93:08:c9:
8f:74:77:fc:28:41:00:7e:72:73:8e:30:a7:ab:80:
49:09:0f:17:aa:4c:c4:92:ae:00:6b:cd:f6:01:18:
73:e6:f9:90:a9:e7:a2:88:79:04:dc:c7:74:5f:8c:
4e:70:09:e2:65:45:dc:1f:d3:71:26:ea:70:04:76:
50:b4:78:ca:e9:da:d3:27:28:ab:ff:61:54:af:2f:
74:ec:1c:97:86:83:66:9f:77:80:bb:2b:a5:8a:64:
56:a8:7c:16:ff:d6:3d:bc:22:38:eb:cd:bf:ed:78:
cd:ef:95:09:34:ab:35:fd:92:a5:78:c1:cb:41:82:
f7:ba:0b:7a:56:6b:0f:7b:6b:72:09:f5:52:62:41:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1D:A0:B7:DF:DE:6F:33:6A:84:9E:DD:7F:E0:CD:8E:F6:66:7A:A5
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:08:c4:49:48:59:71:0c:93:cb:74:fc:93:29:5a:58:ac:8e:
6c:b3:91:cd:05:4c:0d:ad:07:93:8d:52:e6:2a:45:9f:41:44:
fb:d0:67:2d:a3:d0:20:0c:9b:9b:b9:98:73:eb:e6:07:18:42:
bd:12:33:54:7d:96:8f:95:4b:05:c7:cd:e3:9b:df:7e:60:1f:
e9:c6:b1:5b:a2:ef:0c:d2:d9:9f:b6:9f:2b:0b:8f:f0:38:dd:
f8:b1:d5:82:6f:c0:75:29:2c:96:68:76:4b:5f:ad:ac:19:81:
d1:68:3a:ec:81:41:c7:87:6c:8c:e4:13:d5:a7:78:16:64:06:
57:83:65:5d:44:af:85:94:b0:17:d8:7c:83:a4:c5:9f:20:30:
34:d8:a8:16:18:16:3e:5d:d4:f4:1d:5f:ea:55:a3:5f:6d:6e:
09:cb:43:8c:1f:fd:dc:c5:da:93:16:e6:db:bd:d2:27:29:7c:
52:2e:c7:74:e7:83:01:56:e9:fa:ec:86:40:2c:6f:20:6a:e9:
66:f0:df:8a:30:15:51:a9:1e:07:4c:82:e5:a8:cf:c9:f7:80:
c4:b4:d6:9a:5d:35:69:8b:41:37:7e:c6:af:ba:f4:0c:8a:19:
d4:eb:6d:ca:97:c4:6c:59:dc:63:01:c2:a4:e2:f1:55:d3:43:
a3:d4:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:12 2025 by rpki-client