Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: dv2xuBEN78iL1NPM3lhRT5iFwRko2muq1MDr9fOM5oI=
Subject key identifier: 44:3E:49:60:F5:42:2F:07:72:80:73:BD:04:04:53:CC:BA:15:23:2D
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 01988EEBF154E6B73750980949289121FAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0995
Signing time: Sat 09 Aug 2025 13:01:23 +0000
Manifest this update: Sat 09 Aug 2025 13:01:23 +0000
Manifest next update: Sun 10 Aug 2025 13:01:23 +0000
Files and hashes: 1: 9qNQB_i0eu4jjJmVJKka4rzSK5w.roa (hash: NblnquqC2LajKbqJk5Dgnmv5h35qFu2LGP00XRuQHvU=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: 5K2yY4sJ+4kVq5HssWdfvy2gRCSHQaXroxFqJoksaRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:f1:54:e6:b7:37:50:98:09:49:28:91:21:fa:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Aug 9 13:01:23 2025 GMT
Not After : Aug 10 13:01:23 2025 GMT
Subject: CN=443e4960f5422f07728073bd040453ccba15232d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:55:49:1f:6b:cf:e4:52:7c:69:75:d9:33:4f:
eb:f0:09:ce:a9:29:04:23:cb:5d:77:e8:eb:1c:80:
66:f9:e8:03:ee:7a:45:44:ba:c1:6c:ca:f6:fe:f4:
eb:d2:ee:73:dc:74:a3:eb:71:8e:8e:85:b2:40:45:
2e:09:07:08:47:e2:e7:af:71:93:a2:0b:86:fb:84:
97:4f:f8:3c:06:4d:8a:ae:7a:04:2f:fb:6f:7d:bd:
ad:f7:f2:c8:3d:d0:55:3e:b5:f2:c5:a1:4b:79:af:
21:fb:93:1c:3f:60:44:7f:78:23:3b:48:c1:c0:bd:
b1:c9:1e:7c:3c:2b:b9:d4:81:2c:e4:83:c7:7d:ec:
11:ca:fe:20:ad:53:35:07:a6:52:23:16:ce:18:c0:
7a:f4:a0:37:00:fc:12:90:31:f9:a8:50:81:b1:dc:
47:9c:28:f7:ea:3b:5d:d6:08:1a:d4:a5:23:d7:49:
f4:d2:52:d2:3b:9e:16:72:ac:f1:5c:4f:7f:06:79:
54:00:e1:e0:8d:e4:78:0b:34:f2:63:b5:fd:55:0e:
09:f0:7b:6c:89:a2:49:16:01:16:db:17:16:4f:c8:
aa:ce:1c:d0:23:2a:f5:8e:37:54:2a:a2:f9:5a:c9:
87:1c:06:c7:db:82:40:b0:3e:41:1b:06:2c:52:33:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3E:49:60:F5:42:2F:07:72:80:73:BD:04:04:53:CC:BA:15:23:2D
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0c:1f:9e:55:e8:6e:72:fa:a9:67:12:77:85:8e:9b:7c:f0:
8a:f6:54:96:ee:36:7e:c3:15:a0:31:e7:8a:93:fd:18:12:d2:
ce:dc:6a:1d:2e:30:90:cc:cc:2d:06:3a:3f:cb:25:04:b2:e4:
a8:c7:bf:8b:d5:27:83:30:35:1b:66:c3:a8:96:b5:96:b3:81:
78:fe:a8:46:f8:f8:7d:df:b9:45:78:a6:5f:f3:ed:0b:14:0d:
37:40:f0:03:05:73:bc:3c:f7:f4:e5:87:8d:e7:b1:50:01:ba:
cc:62:43:b8:c3:ba:0d:91:53:ba:2d:85:74:7f:8f:07:46:69:
5f:75:66:3f:d7:7b:ff:d5:4a:fb:07:85:d6:39:e7:19:e5:a4:
8a:94:b2:2a:4c:29:cd:31:ea:d7:bb:a7:a7:ac:32:44:94:ba:
8c:25:19:52:d6:3a:35:0b:29:43:c2:0a:1c:3c:0b:de:f2:20:
79:f7:d1:fd:e8:d8:40:21:77:90:5d:1d:38:62:07:6e:88:e0:
2a:07:dd:20:fb:8b:0d:fc:32:81:60:0d:0a:c3:e1:f5:da:a1:
a1:30:f7:5f:b3:7a:86:1f:ec:75:c1:ce:5d:ea:85:e1:a8:b2:
13:39:5f:18:46:5f:1e:63:d0:6f:d0:c2:64:f5:4c:62:5e:cf:
c7:4f:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:13 2025 by rpki-client