Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: tI/U+I3LsGyDgqAH8jv5UL0EUPrjRfUkKocUg0ZsJI0=
Subject key identifier: 90:88:6E:DE:EC:7B:8C:33:5B:3B:2B:4F:40:72:3B:66:0F:92:60:EB
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 01988B0FCC94AF4B3001A1A98BDBCBE02390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 01D6
Signing time: Fri 08 Aug 2025 19:02:05 +0000
Manifest this update: Fri 08 Aug 2025 19:02:05 +0000
Manifest next update: Sat 09 Aug 2025 19:02:05 +0000
Files and hashes: 1: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (hash: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: mpd+KO50q3qZTGsSiy5Dh60jrFRyvxebJSsPRpk9NNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:cc:94:af:4b:30:01:a1:a9:8b:db:cb:e0:23:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Aug 8 19:02:05 2025 GMT
Not After : Aug 9 19:02:05 2025 GMT
Subject: CN=90886edeec7b8c335b3b2b4f40723b660f9260eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:f8:03:6a:0f:b7:b2:9b:a0:8d:84:94:db:
33:ce:ea:fe:fd:82:9f:5e:09:1f:13:a8:01:34:88:
f7:e7:a4:f3:d1:aa:2f:19:c2:a9:b9:62:da:04:85:
33:2d:6f:fb:12:48:bb:c7:92:26:0c:d6:86:ef:14:
b3:92:29:75:8b:3f:b5:69:fe:6c:35:98:a4:a1:5f:
db:c0:8e:c3:63:e7:70:d7:7d:63:b8:8f:26:e7:e4:
87:b0:17:0b:16:3e:e8:1b:e3:37:e7:76:a1:9c:ae:
47:d1:a7:8c:48:59:29:99:35:78:ab:54:f5:d6:ba:
f4:7f:29:3b:20:cc:98:3b:e0:6e:c1:bb:6c:8c:8e:
b2:8b:7e:24:0d:35:d6:aa:d8:5c:c5:48:fb:8b:19:
40:da:e0:21:c0:19:f7:e0:3c:1c:81:97:f5:22:1a:
98:fe:76:8a:6c:0d:69:0c:54:b9:35:1a:f4:a2:75:
2e:14:a1:37:69:19:8f:8e:88:ca:3a:bf:96:3d:75:
62:10:81:eb:4e:19:7c:e0:23:49:cb:8a:dd:38:8d:
f4:3a:e2:99:34:83:01:c1:6a:07:87:3f:46:56:74:
be:df:e3:4e:45:a2:d8:29:6e:64:0b:7d:5b:2d:dc:
c5:06:16:40:08:b8:d8:cd:26:48:ed:06:25:2a:b4:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:88:6E:DE:EC:7B:8C:33:5B:3B:2B:4F:40:72:3B:66:0F:92:60:EB
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d3:cb:ce:ea:f1:c1:52:37:91:17:38:76:6f:02:3b:82:26:
2f:5f:40:a1:53:8c:2b:da:0a:27:21:e5:a3:ef:78:22:7a:46:
da:19:6e:0b:15:66:d6:3a:d9:32:43:e8:09:38:d5:37:f6:bc:
71:2d:6c:a2:db:af:d2:16:8f:40:d8:aa:92:e8:aa:5b:f4:c9:
23:69:30:de:32:8c:45:d3:8f:bd:13:dc:36:c9:6e:e6:c1:44:
ec:6b:e1:bd:7e:e1:ba:f1:65:83:f9:b5:99:17:13:1d:5e:a6:
8a:38:ea:72:3d:9d:53:ae:89:30:bc:ce:65:6e:fc:0e:a4:d5:
7c:5f:11:98:21:33:c7:57:77:02:4c:ed:d5:b4:d3:8e:e5:66:
aa:6e:e2:fe:2c:dd:ed:0b:a1:b9:2b:50:ec:fc:88:29:a4:c8:
3c:6d:f3:5d:c1:53:10:ea:2c:43:10:8a:b4:fc:dd:6b:b2:6e:
51:d2:12:fd:78:b0:14:1e:93:aa:d0:3f:a1:41:42:32:e9:cd:
0d:db:96:52:cb:c3:55:5c:e6:1d:cf:3a:08:e6:a0:8b:ff:84:
06:07:06:34:54:2f:df:dd:4b:47:a5:b6:97:a5:82:32:24:1f:
4c:1b:33:76:79:ff:05:7c:5a:2d:97:c0:51:8a:9f:9f:81:24:
47:cd:c7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:36 2025 by rpki-client