Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
File: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft (raw, json)
Hash identifier: Eu9I8ommNYtdPaFuqWinL4cqGve2WpuGwaQPy/8ORlU=
Subject key identifier: E8:6C:C2:D0:82:D8:23:39:51:DD:CB:16:0B:E2:29:1E:AD:95:FB:3C
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 01987418F04353F2A91B59BDC35E3B5116AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
Manifest number: 0B33
Signing time: Mon 04 Aug 2025 08:00:48 +0000
Manifest this update: Mon 04 Aug 2025 08:00:48 +0000
Manifest next update: Tue 05 Aug 2025 08:00:48 +0000
Files and hashes: 1: 9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl (hash: EZUVM+Mohgg0pcG30WZn4Y8SYGsUT+bdL5TVgTbcWxk=)
2: cQb4a56386hwKkX2XTV23EzTpVI.roa (hash: T6mT7SHm8VLGp8LXtDhfbm2F1razovLuYTeTLKEqGFE=)
3: gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa (hash: knELgWCfA/Sf8Z/AQKl4MF48MxHULiqnBptb464jAhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f0:43:53:f2:a9:1b:59:bd:c3:5e:3b:51:16:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Aug 4 08:00:48 2025 GMT
Not After : Aug 5 08:00:48 2025 GMT
Subject: CN=e86cc2d082d8233951ddcb160be2291ead95fb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:6d:cf:4c:9f:e6:85:e6:f0:df:fd:09:f9:
d6:32:0e:cc:56:ee:62:18:77:d3:de:ff:2f:51:29:
14:b9:cc:f3:8f:5d:73:8c:ab:3c:70:27:60:d8:d0:
92:1f:7b:47:b6:03:77:51:40:53:da:37:4e:c1:29:
4a:1c:66:ff:22:79:5a:61:20:94:d1:b4:42:a0:c9:
c5:18:f2:3a:8b:5e:90:f8:4a:e9:fe:96:eb:22:c7:
fe:e1:c9:fc:22:e7:15:a1:25:3d:87:f7:60:0f:15:
f9:33:60:cc:e3:14:25:15:20:05:61:15:d3:ed:59:
9e:c2:c4:7c:6a:bd:1e:b6:47:33:d1:17:d4:2c:e2:
f1:3f:b6:ec:64:cf:ad:03:8c:0f:5d:44:c2:f4:fb:
a6:e7:fa:f2:a0:04:4a:2c:d7:45:bb:a4:26:01:53:
5c:a4:71:af:92:27:2a:38:5b:ae:de:01:a2:e7:3a:
9d:7f:35:5f:75:c1:32:6b:a0:7b:57:3c:1d:e0:93:
6a:0b:c3:5a:99:f4:65:b3:eb:74:a2:db:32:7d:32:
86:a0:82:44:1d:87:45:46:4a:a6:3d:2f:64:c8:ab:
c7:3e:72:00:37:7b:c4:c1:b8:4c:03:64:1c:3b:57:
10:68:ad:8a:9d:e1:ce:98:20:f2:cd:79:e0:66:32:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6C:C2:D0:82:D8:23:39:51:DD:CB:16:0B:E2:29:1E:AD:95:FB:3C
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:40:be:d4:60:ba:80:93:ac:59:87:e5:53:d2:b3:92:55:e5:
3e:fc:3a:d1:76:97:8c:52:6e:af:9f:46:1d:54:8b:43:c8:c3:
d5:03:9d:ef:5b:29:b4:05:e5:df:27:d5:c5:c8:98:69:a4:ab:
27:b0:9a:d9:7e:97:9a:09:f7:1a:ce:4d:fd:0a:87:db:ca:15:
db:d0:97:f6:fd:27:87:21:e7:46:d8:8d:68:4a:cd:c7:71:36:
5e:f8:4c:00:74:1a:03:c5:b4:d9:05:6d:be:a2:9c:77:55:4f:
d4:15:1d:cd:4e:31:e3:df:02:31:92:17:c8:41:85:44:3c:15:
d4:79:19:94:66:41:98:c5:3a:ba:76:da:ed:cb:f8:94:e0:6d:
36:bc:f4:3e:02:61:1b:9f:fa:3e:9b:92:06:23:8f:60:34:3f:
c2:9b:73:6b:fd:b6:57:63:29:58:b7:d0:76:67:61:ed:17:8c:
3b:79:1b:6d:73:ef:4a:20:1b:e6:10:0a:9f:d9:ea:a2:d1:7a:
2b:54:9a:76:9a:d1:88:52:6c:f4:90:ac:97:76:1e:49:94:c3:
2a:95:f5:6a:9d:a5:d8:1b:fc:6d:8a:9a:d8:3d:b4:c8:6d:8c:
5e:bc:cc:f7:76:dc:a7:c8:80:fd:09:52:3d:91:ad:23:bf:85:
b8:84:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:09 2025 by rpki-client