Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json)
Hash identifier: uqq2rdzWAfWZL9xsJGvx3wgj5bLchb8ML4kZ7H20Imc=
Subject key identifier: ED:F0:94:F6:24:84:31:8F:DB:72:9B:D5:46:65:D8:94:4F:D8:EF:E9
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial: 0198D5BBCF394A6993F8B8BEEFB316BDDC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
Manifest number: 0B25
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa (hash: scGqiYOmrM2j/apqj1QvggRupECIf8XpZkFfLXcvrsc=)
2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: 1V0BmNdgrDddKhYvevsVUe/UOpx5P0dvPcX63hwYu7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cf:39:4a:69:93:f8:b8:be:ef:b3:16:bd:dc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=edf094f62484318fdb729bd54665d8944fd8efe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:69:b9:8a:95:67:06:12:cc:29:d2:f1:7b:
cf:0c:09:f1:01:05:cc:98:5d:53:07:47:3a:75:e9:
60:c0:34:81:ff:bd:29:b1:c6:51:8f:8c:de:47:9c:
f5:48:6f:4b:6d:02:26:fc:fa:38:53:66:10:6f:05:
6d:a9:d3:bc:4b:63:d8:de:e7:c7:51:eb:15:a0:58:
dd:79:aa:01:4b:d1:60:0a:9a:ee:24:a7:92:4e:90:
2f:34:43:e3:5c:57:78:8e:9f:9a:a0:ad:38:a6:3a:
33:aa:1e:92:22:ff:d5:e0:38:c8:1c:d4:c3:75:16:
7d:e3:41:72:35:e5:e9:a5:9a:61:a1:a6:c1:c6:95:
00:67:ff:2b:29:7d:8c:29:34:a5:ad:89:bd:53:2a:
c9:03:f5:50:69:a6:d5:0c:ae:58:00:4d:9c:31:0d:
97:42:04:4a:82:1e:07:cd:a2:9d:3b:71:3d:e5:e0:
c9:83:2f:71:bf:12:d5:59:1e:a4:27:6e:c5:f2:1b:
17:75:9b:9d:74:3e:62:30:d0:dc:52:57:97:c9:0a:
ca:37:8b:b8:a6:c0:fd:e6:60:94:96:b7:bc:d2:5c:
f4:50:af:19:d4:8b:22:dd:68:29:16:62:0c:38:5c:
e7:1c:46:fd:98:de:2e:70:2c:ff:1a:18:87:35:81:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F0:94:F6:24:84:31:8F:DB:72:9B:D5:46:65:D8:94:4F:D8:EF:E9
X509v3 Authority Key Identifier:
keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:19:1a:0f:91:d0:ee:ed:29:fe:90:9e:e6:9a:aa:97:64:91:
dd:93:2a:dc:8d:63:91:ad:99:aa:34:8f:5d:d2:4b:bf:07:73:
32:95:1b:22:7f:7f:18:4e:32:02:59:1a:28:eb:57:ca:b8:56:
1c:c0:9d:94:05:c2:8a:00:b7:8e:ee:76:86:50:f3:9b:ed:04:
cd:f8:8b:ad:ba:a3:b5:3c:d0:b6:e8:b1:30:69:72:ad:b1:55:
50:a8:2a:2f:8b:1b:c3:fe:38:f6:6b:2a:80:20:09:c6:de:db:
23:f5:a6:0c:c8:16:37:b8:90:2e:a2:fa:bd:7d:ad:28:93:b9:
32:85:bd:24:91:a0:b2:40:e2:6c:58:87:8f:9f:51:62:0f:1e:
f5:85:4b:0f:e9:38:9c:1f:7e:e5:7f:aa:2c:40:af:3f:18:ac:
0b:27:92:b9:82:5c:ce:91:22:c7:72:49:ab:aa:5a:53:cd:3a:
24:9f:95:17:9b:95:80:3f:07:48:1f:bc:fc:70:88:57:cf:af:
ea:88:98:db:38:c0:8e:52:40:db:2d:3c:1a:c1:0d:4b:57:09:
fc:2c:5a:0d:b0:db:43:d7:3c:a7:15:6f:eb:9a:67:ea:c2:7e:
f1:c7:5e:c3:6d:51:7e:6d:52:37:1c:40:83:2c:f6:28:54:6d:
1c:cb:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:03 2025 by rpki-client