Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: VR56Tsn4RT/Ggnu32zQKKe0TTshGzJQPjijGown0Jmk=
Subject key identifier: 49:6D:89:D0:B9:EA:A3:88:7F:2B:7B:86:70:A5:81:D0:F9:39:D3:BE
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 0198D773D01855E1615693CF4689125B833B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 15:02:27 +0000
Manifest this update: Sat 23 Aug 2025 15:02:27 +0000
Manifest next update: Sun 24 Aug 2025 15:02:27 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: NWg5do0fN6tQiV6sIhd9SBwV0vnKsb1nGgYTamKNmB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:d0:18:55:e1:61:56:93:cf:46:89:12:5b:83:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Aug 23 15:02:27 2025 GMT
Not After : Aug 24 15:02:27 2025 GMT
Subject: CN=496d89d0b9eaa3887f2b7b8670a581d0f939d3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:14:8f:c7:15:90:22:33:9c:9a:d1:e6:fe:46:
d5:4f:7e:ca:80:5a:c4:d4:5c:45:5e:6e:09:0d:fc:
3d:b3:a3:5b:6b:a2:58:86:c3:f6:80:5e:e5:25:f8:
f7:f4:ff:c0:c4:eb:6c:31:82:52:0f:a0:85:bd:8a:
44:3f:12:d9:08:66:28:50:12:67:ba:f8:1a:84:c3:
4c:e5:3c:0c:8f:d9:8c:5a:b1:9d:fe:eb:e3:b4:4f:
93:5f:f5:d1:73:ee:dd:25:0f:61:67:d3:0e:13:6f:
cb:7e:bf:47:76:e5:0c:ff:9b:c8:95:43:e9:88:95:
72:97:48:83:77:26:03:ae:47:8d:53:f8:ba:28:e7:
2c:6d:04:c5:c4:c9:93:26:af:a0:5b:b2:32:cb:c6:
1f:2c:3d:25:35:00:26:53:da:a3:33:ce:ef:ad:65:
3f:b7:47:8e:59:f1:25:9c:61:14:1d:bb:85:23:6c:
78:86:10:31:26:ce:98:5e:c3:28:64:98:28:b7:48:
f2:39:a7:90:22:43:8c:0f:0b:30:69:66:27:94:bd:
49:13:34:bc:07:36:ae:f0:5c:c1:7a:1c:34:86:19:
9d:7b:c6:bf:29:3a:7d:7a:fd:d8:4d:a6:26:14:e9:
66:5d:85:b9:66:40:7b:e3:56:6e:75:84:17:00:04:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6D:89:D0:B9:EA:A3:88:7F:2B:7B:86:70:A5:81:D0:F9:39:D3:BE
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:72:ef:76:c0:3a:ec:90:6c:f8:a6:d2:3d:c6:6a:5c:77:0b:
d0:e1:7b:e5:63:f0:72:34:00:fc:0f:af:d2:77:89:60:8a:9d:
5a:41:51:3c:b4:1d:12:ad:c2:e2:22:c0:fd:b6:52:c9:2a:0f:
6f:8e:ad:06:f5:01:51:7e:6a:4a:c3:74:fd:78:d9:f9:33:7a:
d8:9b:df:4b:3f:8b:33:26:64:fd:0c:c5:58:11:a9:5d:ec:b2:
c2:fb:d5:d2:36:47:1c:3d:b8:eb:f6:f6:c4:59:cd:e2:86:8d:
f5:84:cb:e4:e7:93:0d:6d:84:30:b4:b6:52:58:c8:17:6a:f7:
6c:a7:c0:9b:cd:d4:b6:c3:1b:78:b9:71:ad:1c:65:e5:99:96:
af:16:56:c9:ce:b0:18:9f:9e:ad:80:58:f4:13:b8:02:8f:78:
4f:23:69:7b:3f:21:a0:67:4f:e4:ca:0f:61:1b:a6:fc:68:bd:
0e:f8:a0:63:9c:e0:67:ab:06:2a:4b:f6:bf:e8:c1:bc:ee:f4:
68:09:ef:ce:a6:2b:83:5c:5b:a0:02:85:60:29:c8:76:b3:77:
91:ed:1f:41:81:5c:43:27:5e:ac:f4:e2:1e:1a:3b:1b:71:1e:
3c:f3:8f:c6:47:9e:82:9f:91:78:fc:25:c1:3d:4a:e1:f4:7d:
14:a1:cd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:49 2025 by rpki-client