Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File: rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier: S1HR4E444tZQt8tIxtHutlpvmTaPQG/XykiMmzBSB+Q=
Subject key identifier: 9B:87:D7:9C:D3:DB:DB:1F:63:11:F0:A9:DE:C2:00:3C:FC:16:A3:1C
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 0198D705AFE4374313178FF9683FA718CD52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number: 06C1
Signing time: Sat 23 Aug 2025 13:02:10 +0000
Manifest this update: Sat 23 Aug 2025 13:02:10 +0000
Manifest next update: Sun 24 Aug 2025 13:02:10 +0000
Files and hashes: 1: OywOw90-BmuDTm7-vAr4oYdaiWc.roa (hash: 8bINvDgAJsHgmIljWuh30WywbwSEgdwt4RUZy9xG14w=)
2: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: TjKdRGgp4QCRNwbNazWwe0mXqQdLERNNVM1WyKGlViE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:af:e4:37:43:13:17:8f:f9:68:3f:a7:18:cd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Aug 23 13:02:10 2025 GMT
Not After : Aug 24 13:02:10 2025 GMT
Subject: CN=9b87d79cd3dbdb1f6311f0a9dec2003cfc16a31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:bb:19:ad:86:21:25:c7:d8:b7:9f:08:db:
ed:97:83:4d:9d:7e:4e:39:cc:47:19:7b:26:15:3e:
31:57:a8:c6:6d:c9:7f:ee:c2:e1:b1:b4:02:1a:af:
43:0d:09:22:c1:f3:81:78:4f:b2:e2:18:46:fd:fc:
e2:54:0b:c7:0b:02:23:67:9e:9e:47:45:1f:5a:ca:
ff:ab:55:3b:4d:d9:76:b7:fb:4b:fd:1a:86:70:8a:
27:72:84:7c:21:8e:67:5a:62:cb:2a:a5:05:1f:83:
14:22:09:ac:72:b7:a6:17:f3:46:25:db:88:fd:9f:
a5:b2:ac:3e:d9:1e:1d:af:37:96:31:ba:25:b0:62:
f7:fa:95:7c:28:a1:4f:57:00:8d:3a:35:74:90:bb:
32:1b:b4:3a:87:04:93:ae:97:2a:e5:3d:29:f6:6d:
7f:2f:7f:93:7e:12:3e:3b:02:f9:25:85:06:fb:4d:
5a:8a:c6:f6:f0:d9:6d:a7:a5:f3:76:ba:b7:8d:22:
5a:4f:7d:e5:dc:5b:79:d2:68:e5:dd:13:15:e0:c9:
58:cd:85:2c:26:b9:1a:7b:b9:a9:24:66:df:6f:e8:
f4:81:ca:45:cf:3b:77:06:44:5a:c6:94:44:c1:53:
cf:32:27:c7:23:5f:6b:04:55:6e:35:1e:1c:0b:ad:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:D7:9C:D3:DB:DB:1F:63:11:F0:A9:DE:C2:00:3C:FC:16:A3:1C
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ba:05:7a:fb:cf:ef:71:6a:cd:6b:8f:75:a4:4b:91:da:32:
fd:2c:8d:49:b2:d7:a7:63:79:62:e3:08:ba:dc:c0:fa:85:a3:
42:2f:76:79:a0:1e:0c:fc:20:29:93:0e:d8:60:4c:73:a2:c6:
fa:b6:74:e7:c4:70:9f:e4:76:7a:9b:11:b6:85:7f:98:d7:8d:
09:7f:71:43:80:5d:03:21:f5:10:71:64:93:7c:a1:8a:38:28:
07:25:17:8d:e1:7c:6a:b7:9d:b9:1d:64:e3:63:99:3d:f2:9a:
9f:fc:2d:d9:c2:2d:1c:db:b4:0b:ff:12:e2:ca:5d:c9:a8:f8:
05:1a:af:eb:c3:ad:20:43:09:de:9e:6b:3f:1b:8a:a0:55:98:
68:df:2b:3d:10:d6:65:87:dc:18:90:8b:7e:79:f1:a6:65:40:
04:fb:bf:49:8b:db:a1:7d:c7:7e:23:24:32:79:96:47:2f:95:
bc:6c:33:3d:e3:a9:2b:3b:6a:4b:c7:41:b4:63:d0:4f:5d:b1:
ed:fb:e3:ba:1e:c1:14:42:3a:2b:50:38:db:ff:64:15:ab:57:
20:c2:e3:e4:d6:2c:86:54:8a:aa:39:e3:d4:aa:bf:e8:f2:12:
7f:62:eb:94:10:bd:8a:99:f4:fa:08:ae:4c:13:36:be:95:ec:
79:1c:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:13:32 2025 by rpki-client