Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: nFUKUPV9xD4mvaL2Giy7aC5ByDhBCgIQBXQDauAySFw=
Subject key identifier: 67:49:64:44:39:91:F5:DC:2F:2D:9B:7C:00:8A:71:AD:8B:89:11:59
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 01988B7CC8097BFF074E2D2968F0DB352A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 05B9
Signing time: Fri 08 Aug 2025 21:01:07 +0000
Manifest this update: Fri 08 Aug 2025 21:01:07 +0000
Manifest next update: Sat 09 Aug 2025 21:01:07 +0000
Files and hashes: 1: MwipPwUawCuJkrJRTiNh4fCkKto.roa (hash: 5ZpTx+e30gtrqh8BtmkNV18Y4nMljwf+6r/HDqn1lyA=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: vvE2egSy6EiESSak9TO4/ckcuhN3590ERGQLaKFQuEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:c8:09:7b:ff:07:4e:2d:29:68:f0:db:35:2a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Aug 8 21:01:07 2025 GMT
Not After : Aug 9 21:01:07 2025 GMT
Subject: CN=674964443991f5dc2f2d9b7c008a71ad8b891159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:91:81:9a:b1:9a:7d:e9:f1:72:82:9a:f2:
54:92:ff:28:75:1b:bf:a3:2a:26:67:84:d1:21:77:
74:0b:e1:4b:62:ad:3f:fc:59:12:70:9b:5a:d7:d6:
e1:93:90:41:a5:9f:a1:64:dc:2b:fb:4f:a6:b7:d9:
c9:72:de:78:1f:44:ff:46:27:00:c5:33:08:5b:5a:
0a:80:b5:98:55:a8:b8:68:68:46:a0:75:11:f0:06:
6e:cf:59:a0:87:88:47:cf:6d:f8:3f:14:ad:f9:15:
0f:2f:5a:27:22:e2:ae:98:90:5b:ba:ae:bb:b3:f0:
78:1e:06:2c:03:81:82:be:f1:c0:67:ea:2d:8a:d3:
57:01:3b:4c:91:29:70:bb:16:bf:27:cd:96:e2:f7:
fe:31:bd:13:b9:bf:8f:f4:77:53:e4:7d:6a:d0:6c:
4a:6b:bc:6d:08:d8:5f:40:9a:f5:a4:7d:bc:4c:e0:
32:8b:74:c6:84:63:a6:bf:bd:f1:d9:04:e9:b2:68:
ae:d0:7e:b7:60:6b:3e:07:11:91:da:85:0d:42:41:
d4:7c:f0:2b:6f:c5:44:73:65:37:c5:78:1b:07:4c:
ac:c5:5a:b6:e8:03:7b:a1:33:a1:1e:35:ba:33:98:
77:18:bb:da:89:89:cb:0c:1b:44:80:69:0b:5e:5e:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:49:64:44:39:91:F5:DC:2F:2D:9B:7C:00:8A:71:AD:8B:89:11:59
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3c:ec:d2:6a:34:90:2e:05:16:8e:80:5d:6f:ec:18:4b:20:
b3:60:5c:a8:19:0f:56:67:ef:71:63:07:1f:1c:66:15:d8:36:
2c:30:fb:1e:66:fd:79:e0:aa:db:bf:6c:79:47:6b:fb:99:6e:
12:d7:cb:e2:14:7b:5b:bd:7b:d2:26:87:76:44:00:ec:8f:2a:
f7:11:90:15:b3:c2:3d:86:64:3b:76:a5:57:07:42:86:2b:b0:
0b:c9:5a:6b:03:60:8f:33:58:7f:53:e3:3c:fb:c3:24:1e:93:
d7:88:44:55:a2:ad:d9:d0:b0:2d:9c:75:f4:b1:44:f3:43:1a:
ff:b5:12:01:12:cf:ee:db:b9:67:44:e8:a9:16:ca:14:cc:5e:
5d:17:31:95:4f:0d:63:ba:5e:8c:14:c1:e3:7f:82:b4:b9:eb:
73:1f:a9:d6:81:97:d5:87:b6:db:79:34:e4:f7:13:c8:93:38:
c3:78:7c:a6:ff:5c:30:81:90:54:59:5c:f1:c8:19:64:18:c5:
a5:39:2c:f7:ac:00:8e:5e:4a:e6:87:44:84:33:8b:cd:35:09:
e9:71:b8:ff:2d:cb:e9:73:28:7c:a9:69:12:2c:f9:b7:48:63:
a5:cc:5a:0e:48:03:61:ba:37:de:8e:d7:e1:98:2f:6b:46:ee:
0a:4f:ea:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:57:13 2025 by rpki-client