Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: lfW35FTf+kHsrvDUBVEd/3xT+eT0jAKfA71ikbKyLcs=
Subject key identifier: F0:5D:90:BD:9E:55:E9:93:33:1F:97:9A:68:29:B5:90:0D:12:DE:F7
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 0197C8A73ED6E3B52ACEFDDF20BFEE1D6FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 10EA
Signing time: Wed 02 Jul 2025 01:01:33 +0000
Manifest this update: Wed 02 Jul 2025 01:01:33 +0000
Manifest next update: Thu 03 Jul 2025 01:01:33 +0000
Files and hashes: 1: ghqg6ujuEOV4Vw3b6x6YkQU8aSs.roa (hash: IATpDK+kaz0czhsEzmLbtPDJ492YJfivjvGQ/3AgHO8=)
2: rMy8dPPnYigzc4tv_MpgYXZWjBU.roa (hash: nHe7eBjoA3VTymKpGX1+aRKhTfLD28hgYmPFTLI6+4M=)
3: x5FwTTVorsGfIV2MDa8IC9dozSI.roa (hash: cVCSNkZBBh3ZJGnim77LdgANipO1Ai7iWjVLFMe9HIY=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: tI/748WHL3yVbFwroPkN/7xexDJQJTjov0blE5J8Cfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:a7:3e:d6:e3:b5:2a:ce:fd:df:20:bf:ee:1d:6f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Jul 2 01:01:33 2025 GMT
Not After : Jul 3 01:01:33 2025 GMT
Subject: CN=f05d90bd9e55e993331f979a6829b5900d12def7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:7d:9a:f0:70:68:1d:9a:e4:d5:2b:0e:75:
9e:c1:8d:fe:ef:63:65:43:78:28:e1:f2:49:94:67:
8e:4d:ee:8a:d5:64:c3:01:72:63:72:26:62:29:85:
23:9d:f0:97:b4:27:64:50:99:4d:29:0e:9c:3d:77:
62:6d:02:65:cf:13:71:bc:c9:a6:5f:3f:41:fb:d8:
39:b7:d7:b4:28:ea:58:91:33:1f:d2:ac:11:d2:a4:
51:06:55:2b:19:f5:ed:b7:32:41:b5:12:89:e6:92:
b9:91:09:d9:92:b6:08:60:18:0d:da:e8:88:37:84:
21:00:10:21:47:d4:7a:0a:00:d1:e2:e0:31:d6:0b:
73:d0:96:66:19:ac:8e:96:09:44:c5:95:27:cf:60:
e4:e1:a2:05:57:2b:b5:65:c3:e6:fc:e8:27:1d:92:
00:0c:32:f7:aa:27:14:a1:d6:e4:99:4b:7d:3b:13:
24:67:9d:31:14:4a:1b:5b:6a:0f:17:e0:72:97:88:
b1:79:7d:0a:14:dd:2d:3c:25:68:14:bf:df:aa:45:
a3:ee:3f:f1:98:0e:d1:c1:40:89:4a:d9:f9:62:52:
c3:17:ac:76:21:5f:bf:59:6e:40:e0:89:f3:9d:e4:
79:96:48:7a:87:df:05:02:4a:3d:18:1b:8b:c4:10:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5D:90:BD:9E:55:E9:93:33:1F:97:9A:68:29:B5:90:0D:12:DE:F7
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:eb:d8:7f:fd:f2:ff:56:35:d8:c7:42:8a:b3:81:e1:10:7d:
7f:12:03:43:3a:f6:0a:01:3f:83:c3:f4:f0:6b:ae:a1:12:dd:
2e:2d:68:55:1a:70:62:c0:85:be:b6:76:82:ac:77:75:9a:a3:
ac:26:78:fc:2a:76:97:cd:db:ee:c1:fb:7f:0f:49:f8:ea:38:
f1:08:f8:9a:37:cb:36:07:28:f2:62:ba:c8:4e:05:29:03:2f:
c6:42:d7:08:34:68:98:ba:19:c0:19:29:90:b5:66:57:d5:3c:
b2:39:3a:d1:f5:6d:28:62:6c:ad:2b:d4:d9:8f:08:ba:c0:b1:
7e:9f:12:51:10:fd:59:83:3d:24:71:f3:b5:1d:d1:1d:41:96:
e2:4b:fa:6a:fb:b4:73:57:f7:ef:4b:63:8f:8f:0e:ae:4f:86:
80:a0:12:e9:b9:2d:dc:af:6f:37:5f:dd:59:c7:f1:50:e9:a1:
59:a8:ce:de:62:e0:0f:de:5d:14:89:f1:2a:58:ca:ca:c3:71:
25:e3:64:88:df:57:84:07:c1:b9:38:6e:38:31:78:d1:64:39:
88:e3:d3:71:80:b2:13:72:08:1a:06:23:52:95:31:40:df:49:
62:c3:39:f5:55:0a:1e:1b:bb:82:4c:13:2f:17:e8:06:9a:0f:
78:d5:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:28:18 2025 by rpki-client