Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: nyExkUvo6NM7ps+DNyYmYpGUKGuN77tafqYVLYjyvoA=
Subject key identifier: 14:22:49:30:41:D3:9A:42:E4:E2:39:97:E3:5B:67:3C:2B:CA:50:BC
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 019884680573CEC5D8A054569225025D4DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0757
Signing time: Thu 07 Aug 2025 12:01:06 +0000
Manifest this update: Thu 07 Aug 2025 12:01:06 +0000
Manifest next update: Fri 08 Aug 2025 12:01:06 +0000
Files and hashes: 1: V9bu_0z7-vke15TqRAacNobtW_w.roa (hash: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: m2r0ZrHhaGl9vKaWuXdb017Ddve13t8MXoagiQY0I04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:68:05:73:ce:c5:d8:a0:54:56:92:25:02:5d:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Aug 7 12:01:06 2025 GMT
Not After : Aug 8 12:01:06 2025 GMT
Subject: CN=1422493041d39a42e4e23997e35b673c2bca50bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:21:d6:69:d2:90:0d:1a:cc:da:eb:99:bc:
c2:6c:bd:86:6e:c0:18:e4:ef:a6:e9:09:1f:cb:f8:
08:00:92:92:32:6f:88:07:15:c3:c9:df:52:7d:c7:
49:4d:2b:4c:6a:18:1b:76:69:7a:7e:f8:a6:cf:ac:
65:23:2d:6f:cf:20:65:96:00:c3:ea:03:09:ba:6a:
12:29:fb:f8:17:5d:39:53:67:e7:30:44:bc:42:c8:
05:5f:44:16:8f:68:d0:fd:56:a0:23:4e:6c:ba:82:
94:e4:b4:9e:70:2e:40:79:ab:a7:db:d9:81:b5:3c:
14:73:55:59:5e:8d:4f:86:54:c4:76:b0:a5:b9:d5:
d2:25:96:6a:cb:28:db:e0:0d:2b:d1:8e:79:d3:57:
e6:b4:a2:42:f6:08:f9:a0:15:41:f3:32:aa:05:19:
bc:5e:54:5b:ab:4a:d9:8c:54:b6:41:9c:50:b6:c1:
4f:d4:08:42:ea:ab:d4:5b:c5:98:26:f1:be:a5:30:
bf:d8:ed:96:9b:3c:13:a2:98:c0:49:d7:53:26:4c:
76:d9:9b:5c:ef:5a:a1:66:58:29:28:15:e5:4e:56:
22:c4:e0:7a:a8:b4:32:05:76:c2:fc:2a:9c:8b:54:
a0:4e:19:ba:ad:54:2a:91:92:88:0c:f6:25:91:13:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:22:49:30:41:D3:9A:42:E4:E2:39:97:E3:5B:67:3C:2B:CA:50:BC
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c1:69:1f:a5:11:d6:1c:2e:3c:e2:e3:60:eb:82:0e:e0:24:
b2:de:79:e0:9d:55:1c:59:d1:15:d3:5d:18:97:8f:51:81:fd:
7e:40:a7:79:e6:46:81:b7:5a:92:36:fd:0f:05:b2:55:31:04:
4e:bc:4c:eb:06:0f:b2:eb:e1:dd:d9:2e:6d:fd:7b:41:8e:b8:
f2:5d:1f:78:e8:a2:1f:df:f8:a6:28:64:d8:52:0e:7a:74:b7:
ee:8f:9c:31:77:2c:76:48:1a:6e:12:c3:78:cc:ad:a3:59:8c:
ed:7b:44:8c:96:7e:36:71:c8:87:94:04:73:8e:c2:c0:28:7d:
24:ce:ce:f3:98:15:c3:9d:90:df:2a:d0:68:5e:30:30:0c:aa:
3c:b0:45:7c:86:2f:bc:e3:c6:fd:0d:32:ee:66:4b:ee:62:b3:
6a:d5:24:e0:8d:ad:bd:6f:a7:4b:00:e0:92:8a:49:ce:16:20:
59:cf:4b:47:95:d7:a2:df:08:85:44:e3:d0:a9:6c:75:17:0a:
bb:78:4f:36:2e:d4:b0:ea:8e:1a:03:de:e6:83:68:66:ea:d5:
da:da:e9:ba:e9:d0:51:96:9a:ab:45:b4:8b:d3:00:65:47:a5:
8f:af:4b:76:ec:90:c1:85:0f:58:fc:3a:a6:05:57:e5:73:e2:
e6:7d:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:24:49 2025 by rpki-client