Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: DzyHuJ+2Q8176XUdpqM9yKuBvgTF8BAAJUssX2CpGX4=
Subject key identifier: 65:02:3A:07:24:3A:F5:D7:8B:5D:30:76:9F:5E:B3:7E:83:F8:49:99
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 0198D6980656F48BD58DA32156E6614A505F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 1633
Signing time: Sat 23 Aug 2025 11:02:23 +0000
Manifest this update: Sat 23 Aug 2025 11:02:23 +0000
Manifest next update: Sun 24 Aug 2025 11:02:23 +0000
Files and hashes: 1: mkk-KHtVpdSjRTu_tkkdV37L-30.roa (hash: ivbrYqlxOhyTn42BC3RV5SMdz9F9dKpqo8vRZ2G2vog=)
2: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: UPd1BEYq/vLLMiSrauiM3n2ItTTEE7sVSO22htHlx5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:06:56:f4:8b:d5:8d:a3:21:56:e6:61:4a:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Aug 23 11:02:23 2025 GMT
Not After : Aug 24 11:02:23 2025 GMT
Subject: CN=65023a07243af5d78b5d30769f5eb37e83f84999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:71:0d:a8:9f:18:b5:f7:00:df:4a:15:10:
a5:d4:48:00:77:a8:9c:fb:f3:05:87:04:1c:76:50:
5a:f8:86:72:5c:ef:8e:1f:92:69:98:a0:74:c8:9a:
e9:78:ce:d5:2e:5e:0d:e1:46:ab:dc:a6:54:78:fa:
66:22:e5:ae:5f:6d:cc:38:bf:66:8b:52:d6:81:62:
53:1a:38:8a:74:d3:73:ab:9d:0e:46:7c:7f:29:56:
e3:fa:12:f6:91:3a:f7:d5:ce:67:37:d4:63:cb:2f:
71:f2:86:ec:ef:1a:bc:a9:54:6d:c8:dd:85:ce:7e:
70:f2:92:a7:ee:a6:3c:82:e1:d3:0b:af:17:fd:41:
8b:07:0b:95:75:cc:df:aa:29:b8:f5:8c:a9:81:84:
d8:74:52:f9:aa:98:89:01:f3:13:76:b0:89:de:1d:
50:1f:28:8c:f5:93:cc:e8:ba:70:11:3b:3c:cf:8a:
29:4a:b7:f0:86:20:31:49:e3:a6:50:b7:55:a7:a4:
5f:c2:11:7d:af:0b:d4:80:25:6b:f3:03:d2:0f:2e:
12:15:94:3c:26:7e:e6:3b:b5:48:ea:fa:38:b2:35:
a2:32:96:dc:e5:e1:e8:4c:bb:1f:75:79:65:69:74:
03:8d:ff:22:64:a2:66:88:e8:92:b4:59:88:70:a4:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:02:3A:07:24:3A:F5:D7:8B:5D:30:76:9F:5E:B3:7E:83:F8:49:99
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c1:88:36:a5:02:c0:48:cf:cf:c5:53:5d:a6:25:6f:25:b7:
a0:cc:af:06:c5:23:38:a5:ba:5a:eb:d3:84:e2:6c:d8:1a:99:
dd:93:d8:48:ee:b2:be:2f:f6:00:73:d9:18:f7:ff:c5:a5:ff:
8b:26:bf:2d:66:35:10:c4:c4:d6:74:39:81:23:4e:de:ab:7e:
87:a7:e0:55:a6:28:f3:92:d3:c7:da:78:52:8a:0d:1d:22:e4:
4b:65:1f:6f:18:c4:c5:55:ec:00:19:81:cd:46:9a:be:70:6b:
1c:04:e6:d8:eb:61:97:5e:40:1e:82:79:23:40:25:24:5b:60:
33:ff:40:6d:81:95:d3:a2:52:10:72:ae:b0:84:89:04:2b:fb:
56:37:5a:bd:4d:c1:95:f9:26:e1:8f:58:c3:db:97:d8:a7:ff:
59:c6:e1:31:0b:4e:a5:14:12:03:e7:a3:ad:26:56:93:7c:3a:
90:ed:19:0c:35:d3:8a:cd:cb:ee:e9:23:6d:1f:7d:94:f7:c2:
4a:b5:c0:0d:92:e9:b6:50:7a:d3:dc:6f:5c:bc:31:1f:75:89:
16:52:ee:a2:64:03:a6:be:53:7c:80:70:ee:60:53:e0:80:41:
fa:38:35:ba:73:01:6e:ab:d1:96:54:8a:07:52:02:c2:64:70:
f9:51:cf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:32 2025 by rpki-client