Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: w8Ys850wfAwNMAdFfOJFsr3VJt+j8Q6vnHqFADnZPvY=
Subject key identifier: E0:4C:55:1E:C3:08:21:91:8B:4A:36:64:2E:EF:8D:6F:2D:99:9D:8D
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 0198D5BBDA6443647BF5DD10535BF1652A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 041D
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: rR2bfjUdRJjkkaIjQb0GG9JmSHZxDwg/Y3CRa/xrGEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:da:64:43:64:7b:f5:dd:10:53:5b:f1:65:2a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=e04c551ec30821918b4a36642eef8d6f2d999d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:75:13:78:bf:d0:16:01:95:b7:12:1c:cb:
25:f1:07:14:8c:9f:f0:59:71:80:aa:93:a0:fe:64:
9c:8b:d1:9f:18:44:e5:fc:c7:d3:c7:68:80:65:da:
0d:3f:31:c9:1c:30:75:ae:72:ad:69:45:02:0a:51:
78:60:42:b6:61:7e:e4:63:96:3a:7e:c5:a3:a6:53:
90:b4:52:1c:e9:ec:74:cf:40:7c:b9:17:3c:e4:b8:
e9:1c:f0:d5:10:f8:96:9a:2e:1c:1c:17:74:b4:95:
00:ea:d9:15:26:25:fa:40:8a:00:09:b5:c6:29:4f:
19:8f:5e:67:0e:4c:0b:1c:cb:e1:b0:8f:e3:bd:1d:
a6:61:de:91:a7:7b:aa:59:41:7b:cd:da:df:5e:8f:
35:84:a4:6b:4a:25:55:1d:1a:34:8a:14:85:4c:58:
6f:dd:8b:2d:ee:42:e7:09:3d:a0:53:ed:c9:57:5e:
2e:1f:78:1d:7d:88:ae:de:e5:c5:86:ce:12:72:55:
7b:d0:60:85:db:44:30:3b:80:31:32:85:28:42:af:
19:3e:2b:70:ac:16:c7:71:86:d3:e0:97:eb:ae:cc:
00:b8:4e:c2:4d:79:dd:1b:e1:48:a1:7b:c7:25:ce:
6e:4e:9b:13:2b:86:d4:e1:fb:2e:22:25:e6:88:a1:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4C:55:1E:C3:08:21:91:8B:4A:36:64:2E:EF:8D:6F:2D:99:9D:8D
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cf:00:0f:7a:0d:60:30:65:d9:2b:e7:44:83:2c:78:4c:9e:
33:74:2e:1f:54:e4:67:60:1c:6b:f3:f6:9f:ee:f6:c3:86:eb:
45:cb:ae:47:c0:67:74:30:0e:ac:64:f5:34:6e:1c:aa:93:5e:
0a:3b:d2:56:43:30:6c:ee:a9:d2:49:0a:41:24:ef:70:fc:23:
32:d0:fe:e5:32:96:ea:f5:fa:db:3c:da:01:55:7e:15:cd:e4:
fc:6f:4c:ce:78:6e:0e:60:54:44:19:2b:e3:e0:ba:77:f4:8f:
f8:03:fd:af:58:85:07:f9:7e:91:8c:d6:e3:38:27:bd:a4:b0:
c0:05:bf:02:90:3d:99:3a:36:a6:9a:65:cd:fe:56:8b:ae:fb:
33:9b:60:1b:3a:f9:e8:56:16:a0:b1:59:20:a6:92:eb:8b:0c:
55:8d:e2:1b:ea:29:90:19:72:71:81:3c:5a:7e:27:36:e0:27:
33:c0:8e:ec:2c:4f:71:1c:cf:de:69:e7:43:40:7a:83:05:ef:
36:87:74:b2:a3:8b:bd:f5:80:72:a1:da:88:e4:e4:4a:83:fd:
0b:c0:83:f5:46:8e:e8:ce:d6:04:c5:e2:f0:a3:4f:4e:77:8f:
37:b0:3d:f5:c9:4d:da:77:b5:30:ad:58:c2:01:13:00:08:d4:
bd:9e:a9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:44 2025 by rpki-client