Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
File: y9dX6ROqzkNObdbW1Qp-33LOiIw.mft (raw, json)
Hash identifier: z96lnFyoZYVfxRaLhPNbcLagcFVa0CFbPCTxiVZ6Wdg=
Subject key identifier: 0B:71:C4:90:1D:50:4E:95:E2:BE:48:FE:DA:2D:C3:02:52:A6:F6:E3
Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Certificate serial: 019882430530383109E9A98A6AF3C059AB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
Manifest number: 0FEB
Signing time: Thu 07 Aug 2025 02:01:27 +0000
Manifest this update: Thu 07 Aug 2025 02:01:27 +0000
Manifest next update: Fri 08 Aug 2025 02:01:27 +0000
Files and hashes: 1: xXYCNUnm-3UsiS0Y2j4IJt8GJmU.roa (hash: kfa/1BPOG2GKMxXo/zgSWZ2DSaf3+pCaWIgYdprI0TU=)
2: y9dX6ROqzkNObdbW1Qp-33LOiIw.crl (hash: WUDEQLppSjJz6vOjJjpyp0ieN0Se1oF1BrqvQukWSqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:05:30:38:31:09:e9:a9:8a:6a:f3:c0:59:ab:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Validity
Not Before: Aug 7 02:01:27 2025 GMT
Not After : Aug 8 02:01:27 2025 GMT
Subject: CN=0b71c4901d504e95e2be48feda2dc30252a6f6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:37:5e:05:99:f9:35:62:30:c3:ca:11:21:
7d:37:a5:05:82:8f:d0:e0:85:75:42:16:cf:61:4f:
44:db:66:5b:c9:e2:ed:e7:db:d6:00:8f:11:35:f4:
7c:21:e9:03:79:e1:38:87:f2:39:d9:f8:9c:b4:00:
f9:9e:7e:4b:48:29:f9:62:2a:28:36:ad:50:23:13:
d4:75:b5:45:41:aa:1f:27:60:6c:cb:d0:a3:c8:f8:
d6:70:fb:db:a6:05:9d:cf:ad:45:65:2a:a5:95:ef:
96:88:d7:4e:6b:0b:8a:bc:da:ef:70:1a:b5:6c:e1:
14:f8:3c:0e:6b:0b:a0:40:64:0a:c5:d2:99:d3:99:
41:19:93:21:bf:a5:9b:18:15:36:33:a8:19:4a:04:
a0:4a:76:0c:19:3e:80:e5:4e:56:e0:d6:1d:d1:d4:
55:f1:ba:df:e1:25:b3:48:3d:18:51:db:31:ab:dc:
fc:c6:06:ba:23:3f:fd:e0:97:c5:7c:7c:70:87:09:
cb:b8:1d:b8:e2:44:91:5f:d2:1c:f1:84:68:fc:c6:
76:51:fc:2e:f5:08:5d:5f:78:8c:6c:3a:28:78:32:
e2:24:7a:e6:a2:ca:00:3c:3b:7b:0d:06:a3:71:5f:
5f:33:00:81:21:94:ac:63:66:0d:bd:ff:9c:5e:6b:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:C4:90:1D:50:4E:95:E2:BE:48:FE:DA:2D:C3:02:52:A6:F6:E3
X509v3 Authority Key Identifier:
keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:32:6b:20:f9:1f:3b:4a:da:50:9c:56:9e:72:eb:d5:56:c2:
6c:93:3d:86:e8:5a:92:6e:fd:f8:6f:91:6f:ef:a5:47:77:0c:
99:88:ab:d5:c7:ee:43:97:9e:16:e5:dc:76:59:64:a0:00:6b:
db:ca:a3:e6:11:d4:5f:af:1f:6a:f8:1d:98:e9:5b:25:30:64:
f0:16:d6:86:f1:20:fc:8b:ca:29:1a:48:57:1e:51:48:6c:1e:
26:1b:03:74:49:e7:cb:df:06:ac:dc:a1:b3:e1:c8:e3:f5:5a:
a6:6f:0e:b1:b9:91:fd:ed:c5:1a:01:ac:80:68:c7:77:94:05:
c0:dd:4b:49:19:94:ad:51:33:5b:61:be:ec:11:d8:fa:45:b4:
31:2d:c1:09:d0:b4:4c:d4:1a:a8:32:15:66:75:6e:67:1e:0b:
b6:8f:1b:71:86:07:d9:a9:34:4f:78:3d:7f:92:ba:8b:29:f2:
89:e5:75:41:db:75:89:81:df:3e:c0:7b:08:3b:d8:1d:6f:08:
29:b8:47:db:05:65:38:4e:53:c8:71:4e:da:ae:b1:ba:e8:91:
40:4d:70:4a:9a:2c:c8:7b:0d:8a:9f:61:22:cc:84:44:f6:fe:
54:05:5e:07:f2:6e:49:b4:5a:2d:46:b0:5f:27:4f:fc:67:f6:
09:4e:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:54 2025 by rpki-client