Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
File: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json)
Hash identifier: EQXJtNHzSp3n1yAiqkZgtrML1av/7cP3MWAC4k22G58=
Subject key identifier: 59:47:2D:68:6A:84:92:4E:2E:03:52:09:F4:FF:57:A5:6D:39:A5:3E
Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Certificate issuer: /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Certificate serial: 0198D54EAE971CAA89B8D15E70DF20C599B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
Manifest number: 05A5
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: meIfpWGWvt-OCR5hELolYg558lc.roa (hash: b6ypOtwfgJ3TZwPfNgJCJZ3JwL1dV4492jTSEMjG2cE=)
2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: b5JZWy+FUyu04w0iSasNmDGNcX1yUNlzgdgbARl2orc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ae:97:1c:aa:89:b8:d1:5e:70:df:20:c5:99:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=59472d686a84924e2e035209f4ff57a56d39a53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:dc:7b:90:99:43:14:fc:c7:4c:ad:c0:fd:
21:ca:0e:ba:7c:d6:16:71:3f:03:8f:63:2a:25:9d:
f1:a0:63:68:d0:11:d4:ff:1b:8e:98:94:52:82:b3:
47:ef:ce:76:b7:9c:ba:2b:5d:56:23:19:16:5a:9e:
56:8c:4e:b0:e5:ec:12:11:14:01:13:be:f1:a1:16:
4a:2f:60:cf:ca:48:96:45:65:bc:ea:41:af:97:fb:
32:fd:a6:a5:df:98:d3:3f:9e:13:a4:77:09:d0:2d:
b8:57:af:d6:41:de:49:12:18:81:06:9a:6d:81:ad:
ef:a9:1e:6d:05:29:65:4b:4c:92:a2:e9:7e:87:eb:
92:5e:02:06:3a:07:fb:c5:c1:90:77:d1:49:32:35:
d9:70:6a:89:ab:ae:98:0e:65:f2:26:60:a7:e8:d4:
ff:aa:ea:65:4f:1d:82:50:37:59:17:b1:98:21:1c:
ce:5c:d6:2a:bf:7a:e2:cd:d4:70:b8:42:bc:b3:a2:
93:3b:a2:2e:88:3f:48:04:b1:91:1d:7c:8c:59:30:
ac:c8:2d:29:94:64:2f:17:0c:ab:4f:2f:18:4e:0a:
48:e5:15:20:66:22:73:cc:31:e1:85:f3:9a:fc:f4:
27:7d:14:5f:c5:55:d8:75:ac:9c:1d:29:cc:2b:89:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:47:2D:68:6A:84:92:4E:2E:03:52:09:F4:FF:57:A5:6D:39:A5:3E
X509v3 Authority Key Identifier:
keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:15:e4:f5:1f:b8:11:de:6e:b9:2a:6c:28:2b:70:5c:79:bd:
7e:5c:cd:17:66:09:00:bf:4c:12:14:fc:4e:c6:39:6b:f3:52:
bb:ee:f9:e9:7d:69:85:50:97:1d:b4:9f:53:04:d0:89:79:08:
ff:47:c0:d4:40:72:3e:09:48:c0:90:71:72:34:e4:57:66:80:
40:9c:aa:9e:66:03:2d:09:7d:98:e7:d7:01:97:b1:c0:96:21:
3f:e7:83:4e:9a:e8:a5:23:54:b2:8d:09:bf:40:36:ff:6b:c7:
da:ef:a4:e5:5c:55:ca:5f:4a:32:85:a1:53:97:30:a5:f5:da:
a4:c3:0d:e1:39:ab:d2:01:01:75:7b:e9:e8:14:cd:7c:5a:3a:
35:85:c2:73:37:92:32:f0:7d:0b:72:fb:3b:dd:ab:d3:84:54:
d4:38:7d:d4:3d:59:65:ec:de:46:df:d2:5a:16:3f:66:f4:7e:
45:4c:3a:fa:7a:c5:92:73:bc:0c:8a:05:8b:a9:1d:6c:33:d2:
7b:e6:4f:77:36:f1:ae:bf:e4:a1:91:61:ca:33:4c:7c:98:3f:
8c:96:98:f1:1d:18:d1:d3:cc:7d:d4:c7:cf:97:97:5c:38:3f:
97:9a:c4:25:92:3c:4b:bb:17:4d:d6:73:07:81:ce:02:ca:0f:
7e:0d:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:18 2025 by rpki-client