Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: p6QzfBATp/4nh1j7/ZtU0TAjiTp110SkotYGJEbmmck=
Subject key identifier: 40:EE:58:D2:9D:DB:CB:8A:F3:9C:96:EC:FE:C4:80:96:9B:1C:23:DD
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 01989223F34A43AD0DFECB23E0F6A64B6D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 0675
Signing time: Sun 10 Aug 2025 04:01:26 +0000
Manifest this update: Sun 10 Aug 2025 04:01:26 +0000
Manifest next update: Mon 11 Aug 2025 04:01:26 +0000
Files and hashes: 1: GP-mcsPVfkxFR6BakAdLWMHzvnk.roa (hash: 46Gy5AnSQQR4RzlnLScg9/HmedHrQU8V47NDaOoaI7E=)
2: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: n/T9q2oC/asDN5mpfuuk4BnJSq/yOJRVPFLfIpwEQ2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:f3:4a:43:ad:0d:fe:cb:23:e0:f6:a6:4b:6d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Aug 10 04:01:26 2025 GMT
Not After : Aug 11 04:01:26 2025 GMT
Subject: CN=40ee58d29ddbcb8af39c96ecfec480969b1c23dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:f6:bb:0d:8d:d1:b7:ff:05:9c:17:82:5b:
94:cc:ea:3f:29:4b:14:36:df:66:aa:2b:76:ae:00:
22:f6:51:df:98:e9:87:63:8f:a7:9a:08:a8:76:d5:
ca:42:71:cb:e8:95:71:e5:1a:68:aa:57:64:35:bc:
6a:a4:6e:51:0a:d6:8b:14:d9:57:98:60:05:36:93:
3a:fc:5d:10:e3:88:7e:94:d6:22:ac:39:08:de:83:
06:1d:11:2a:5f:db:3e:77:b1:10:40:7c:fd:92:af:
28:45:42:7c:d9:36:98:5b:b4:9e:5c:fb:dc:58:13:
25:e6:f7:56:ec:8c:28:9d:3d:5b:cc:8d:0d:de:53:
1f:aa:8f:42:ed:e2:ff:5c:4c:c5:92:d9:ea:ef:76:
ff:02:20:ba:d1:76:66:3f:15:3d:db:30:98:70:18:
0c:62:84:99:12:8f:33:a2:e0:44:06:6d:2e:bf:fa:
75:ce:e4:59:09:4d:76:e4:cd:c9:59:6f:11:40:aa:
d5:c5:29:fb:d1:55:f1:fe:71:07:39:09:21:7b:0b:
06:a4:89:68:61:86:53:96:93:a7:82:c3:e3:47:e2:
50:60:9a:91:a9:fc:0b:f7:4f:2e:4b:48:c4:70:5c:
31:7a:ca:7d:23:a1:90:11:6e:86:4a:47:68:5d:f3:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:58:D2:9D:DB:CB:8A:F3:9C:96:EC:FE:C4:80:96:9B:1C:23:DD
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:81:f3:f9:d3:e3:39:80:ca:58:95:96:5f:0b:1b:89:91:05:
49:19:2a:b7:a7:96:61:f6:b8:7f:74:f2:47:c7:b9:65:ca:ca:
99:cf:60:b6:b7:24:be:7f:f0:dc:44:a5:d3:ca:7a:4f:41:10:
3e:23:88:3b:26:f1:f6:50:70:6f:e4:d3:15:b1:5c:3e:02:08:
97:00:53:0e:b4:8a:ec:2e:4b:1f:a2:a7:c0:f8:8c:35:08:f7:
06:df:e1:c1:d3:d1:75:fe:92:af:7f:5f:81:74:9d:52:19:65:
7e:c1:1c:75:11:2b:fd:8f:5c:7d:1d:ce:ea:11:df:4c:36:27:
f2:78:73:f7:e1:bd:12:51:9d:f7:07:a4:f5:ef:ac:9f:db:89:
76:a5:de:9c:60:13:7c:20:c6:fa:e2:cc:60:f8:27:32:af:ea:
e1:0b:8b:5c:fc:6b:20:22:ce:e0:c8:cf:36:6d:c5:ee:7d:c8:
e9:6f:07:a9:5b:cd:c8:42:69:3d:6b:09:47:1d:36:de:7e:bc:
2b:ee:c5:35:de:af:40:cc:d2:10:f9:72:6c:df:41:cc:de:1e:
60:ad:a0:5b:40:60:f8:5e:8a:ce:60:15:52:e5:b6:75:b5:a8:
4c:aa:ea:fd:70:f6:b3:0b:f2:33:2b:0e:fd:99:5b:1a:62:0f:
e2:ec:6f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:39 2025 by rpki-client