
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
File: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json)
Hash identifier: BAkXI0gGwZq02Ek+577C+67Dcbz1tA7t9Iy7bs/ojR0=
Subject key identifier: D4:28:1A:9E:2B:6A:BC:4B:F2:0B:9F:79:94:56:D1:29:96:96:66:2C
Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
Certificate issuer: /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Certificate serial: 01988BEAA48EA961786EAF848124134324CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
Manifest number: 057F
Signing time: Fri 08 Aug 2025 23:01:07 +0000
Manifest this update: Fri 08 Aug 2025 23:01:07 +0000
Manifest next update: Sat 09 Aug 2025 23:01:07 +0000
Files and hashes: 1: meIfpWGWvt-OCR5hELolYg558lc.roa (hash: b6ypOtwfgJ3TZwPfNgJCJZ3JwL1dV4492jTSEMjG2cE=)
2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: 5eJj6nUTVnty5cp0fxrZK/f0R22Dgo3tiyVvjX5nJh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:a4:8e:a9:61:78:6e:af:84:81:24:13:43:24:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30
Validity
Not Before: Aug 8 23:01:07 2025 GMT
Not After : Aug 9 23:01:07 2025 GMT
Subject: CN=d4281a9e2b6abc4bf20b9f799456d1299696662c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:66:f6:ba:90:b0:fe:1b:91:d6:e4:f9:20:
8e:9d:e7:38:e5:f8:ba:0d:44:d7:c8:cc:2d:60:13:
04:11:11:5f:55:2c:eb:a1:cf:99:8f:66:3e:45:37:
0c:00:ed:b3:e2:db:25:0f:ef:b1:eb:61:75:ae:47:
e8:11:8e:9a:bb:e6:35:a8:0c:8e:a9:35:3d:54:2c:
09:bf:72:87:18:d1:72:5e:b3:a2:a7:d0:cf:03:0c:
b6:68:d1:34:2b:11:b9:9b:7f:e3:53:9b:0d:9f:c3:
9c:41:57:ae:49:f3:03:1d:0c:20:8b:53:4e:60:29:
32:9a:c4:23:0e:43:c9:35:01:41:7e:76:bc:37:d7:
01:38:51:9d:b5:cd:a9:1e:30:c6:8e:1a:20:62:15:
b2:f3:0c:44:37:a8:b6:5b:f2:e5:98:2a:46:1f:a1:
2d:5b:41:b7:26:76:12:3a:c2:7c:2a:ae:b0:20:08:
71:f7:28:8e:20:b0:49:2c:49:23:02:ec:e1:c6:15:
a9:69:4b:22:6e:75:07:f7:ef:48:02:c8:f9:07:91:
bb:d0:cb:5d:aa:29:55:1b:8e:ef:fc:cb:5f:ab:d1:
97:42:16:5e:36:40:4e:84:d9:3a:97:cb:25:ce:de:
e9:92:3f:7a:a7:c6:f3:41:75:f8:13:ec:a9:68:69:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:28:1A:9E:2B:6A:BC:4B:F2:0B:9F:79:94:56:D1:29:96:96:66:2C
X509v3 Authority Key Identifier:
keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b7:24:ad:01:d7:1d:89:c4:c0:69:69:85:0b:44:eb:37:28:
ae:12:d7:d4:fa:5c:d7:40:ff:9e:c5:ff:71:1c:81:11:f5:22:
12:2e:f0:3e:c4:24:90:fe:e4:1f:b5:0e:e8:95:9c:99:94:00:
16:4f:14:2e:2f:ad:e2:2a:3d:a1:f3:82:37:af:04:35:8b:9b:
75:10:29:f3:09:aa:8c:eb:64:24:4f:24:c5:30:80:38:44:fb:
dc:44:13:83:51:dd:53:da:dd:b7:91:c9:1a:f5:d3:66:1c:02:
e1:a5:e6:9f:45:a3:a4:57:ae:7d:29:b0:44:6d:7d:b8:e6:84:
55:f5:c4:98:4b:20:45:74:72:e0:59:1b:5f:6f:cf:52:d9:75:
81:2d:c5:93:e7:f3:72:c7:41:31:6e:ee:a4:cd:80:08:40:1b:
23:cb:9f:80:25:08:2f:37:21:44:ae:a7:a1:3f:20:19:6f:2a:
80:b2:40:a1:12:33:0f:6b:5f:60:34:86:da:a5:22:66:26:14:
15:46:b9:06:16:ce:3d:c6:7b:82:61:c4:4e:00:77:10:9b:3c:
04:fd:8c:eb:b8:39:02:ee:07:bb:b0:3d:8b:a2:38:a9:a6:2d:
38:ed:7f:4f:ac:39:98:0c:2f:f8:e5:99:fc:ea:5c:70:17:92:
e9:14:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:53 2025 by rpki-client