Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
File: 9Y3yxGnJeIlfhFgCTFBugByPsho.mft (raw, json)
Hash identifier: MI0/pQBI/u5AGlILM8HhXT/bQ6tfT/pI3U6GL2P6UK4=
Subject key identifier: 2D:A9:67:B5:76:8B:6F:A2:B3:DE:11:CB:E1:AA:C2:EE:EE:47:0C:B3
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 0198D54E4F7665460AB29534329F41AF8A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
Manifest number: 13D1
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: 9Y3yxGnJeIlfhFgCTFBugByPsho.crl (hash: 97cpqXQw3ZVAtmvM36wBI6yialUcYcjjSCORDyJ/0YI=)
2: uTgF90O7aHLO_G7cSzTbj_nzdao.roa (hash: lwZMpyCYU1xDcN6IVFSHMP6G+054GMvXirawB6lbtsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4f:76:65:46:0a:b2:95:34:32:9f:41:af:8a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=2da967b5768b6fa2b3de11cbe1aac2eeee470cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:2f:8b:6c:90:47:69:f2:d1:d0:bc:a1:9a:
76:e1:4d:85:47:a5:30:c4:24:94:ee:7a:64:d8:e3:
70:e8:2b:20:c4:e0:78:99:f9:39:92:d3:74:b2:c8:
f6:cc:21:8c:00:f0:69:e0:22:20:03:39:20:3b:d8:
1f:ac:f7:d8:53:26:b1:ed:db:4a:51:12:31:14:f5:
ce:5b:67:be:07:53:60:c9:b2:12:03:8e:f2:af:51:
89:ed:79:f7:3e:25:00:af:26:72:ca:95:c6:fd:08:
da:cf:17:e5:a0:13:87:ed:76:e7:23:85:b4:ce:96:
81:47:50:11:df:03:62:1f:40:95:03:38:dc:8c:19:
67:bb:6c:6f:3c:ae:c4:2e:f1:56:cd:73:46:83:79:
3d:9b:48:5b:6f:7e:39:ff:d7:6b:9c:be:17:d7:47:
a0:b4:11:dc:39:df:e3:f5:2d:70:84:36:71:63:53:
15:7e:f4:85:db:2c:c6:5e:2a:2e:49:1b:2d:7d:15:
b9:9c:cf:99:01:da:0c:7e:ae:f3:55:d9:fe:0a:90:
15:1b:d5:b2:8c:e8:3a:b1:2e:f6:f3:99:d9:81:f1:
63:32:ef:ef:be:45:05:3b:12:bf:71:85:31:c2:a6:
74:ed:92:75:6e:df:0b:4f:00:94:d3:32:a2:3e:04:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A9:67:B5:76:8B:6F:A2:B3:DE:11:CB:E1:AA:C2:EE:EE:47:0C:B3
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:03:70:c5:02:ee:ae:6c:8c:87:66:0d:c7:bf:8c:46:33:3b:
21:f4:5d:16:7d:ce:ef:ee:1c:49:2e:8b:87:4c:d4:5f:8e:0e:
a3:5c:92:bc:51:0e:63:f5:2f:b9:f7:e9:35:dd:d8:0e:ed:d6:
4f:5f:f9:d6:a1:10:7a:66:08:13:45:51:22:41:f4:c7:a3:f0:
21:ed:7d:43:d0:e5:b8:b9:e4:de:a0:2e:f0:fd:2f:cf:a4:bc:
22:d1:6f:06:24:aa:3c:33:35:b6:6d:4c:c3:3c:0e:ad:83:68:
b1:bc:33:40:0d:c9:32:ac:5f:47:6c:c5:7f:b6:90:d0:eb:4c:
0f:27:18:cc:38:f0:fd:be:63:9e:5a:e1:71:60:61:67:bf:84:
5c:e3:10:73:fe:c1:64:a2:aa:1a:13:69:e3:79:f2:3e:f8:ef:
74:64:0e:a4:cd:df:d4:71:bc:64:5f:53:ee:9b:42:c2:33:89:
fe:3a:0a:4b:99:4c:fc:42:24:b1:17:44:8e:86:47:e3:f1:ac:
af:0f:4c:45:69:f2:1a:50:f6:5c:5e:aa:f0:f0:9f:56:f5:b6:
23:1e:f3:a1:2e:0d:d6:ce:14:4a:fd:a7:94:e8:e0:57:f2:2e:
21:6d:70:ce:50:e7:58:4a:14:80:c2:72:b0:a8:14:c2:dc:b1:
21:79:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:35 2025 by rpki-client