
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
File: my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json)
Hash identifier: oKRFnNKCiV1RWjfsd9A8owfh8Nkfl5g3JeqdNlv+sUY=
Subject key identifier: EF:81:08:50:AB:14:BF:F5:5C:2E:D0:CE:C6:FE:31:77:63:F3:C7:E0
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial: 019874193AC309B79B53BF1068254C7F1381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
Manifest number: 07B2
Signing time: Mon 04 Aug 2025 08:01:06 +0000
Manifest this update: Mon 04 Aug 2025 08:01:06 +0000
Manifest next update: Tue 05 Aug 2025 08:01:06 +0000
Files and hashes: 1: iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa (hash: GD3GHNZKL4fdpgdi7l7xwFI/fIJOKFQjsdvcNA8UW4E=)
2: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: hW9JrseL54nbKwzo0O9qldUZ5yYuvLY1z+0mP3U4IDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:3a:c3:09:b7:9b:53:bf:10:68:25:4c:7f:13:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Validity
Not Before: Aug 4 08:01:06 2025 GMT
Not After : Aug 5 08:01:06 2025 GMT
Subject: CN=ef810850ab14bff55c2ed0cec6fe317763f3c7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d5:2d:71:79:a2:55:da:15:d4:06:35:81:d1:
78:ee:ad:da:b4:5c:ae:94:d4:42:94:79:18:fe:18:
e2:5c:6e:bf:ff:7c:36:a2:d0:2f:99:a9:a0:ac:79:
cd:fc:a5:f4:8d:43:15:1a:68:3a:e3:9a:94:82:3e:
b8:ce:04:89:a1:39:8c:b7:d1:7e:06:32:86:89:ec:
bb:02:e9:26:a7:db:ec:86:77:c0:36:dd:00:ca:d5:
8a:47:71:25:cb:24:b7:88:57:01:28:4e:cb:e2:94:
fb:ad:ae:7e:31:80:1b:55:3c:ff:2f:58:9a:da:0e:
e5:e6:c5:05:4a:e3:72:c6:c9:d6:a2:a4:2b:2a:64:
ba:66:bb:9d:bd:55:b7:87:16:2c:23:2f:8d:c7:33:
50:fa:c2:eb:f3:ae:a2:bf:84:b8:75:d2:70:ef:e1:
5e:7a:49:1a:4c:1c:bb:66:e0:04:16:d9:e7:10:83:
e4:20:d8:08:66:f2:54:ee:23:0f:be:15:8d:aa:83:
53:b9:b8:25:54:33:a1:c2:24:4b:e7:7a:46:03:61:
10:21:5c:33:00:b5:93:25:b5:a7:0f:bc:88:c9:f0:
ab:34:12:2c:08:f8:6b:dd:0e:fc:80:c5:58:54:e7:
fa:0d:3d:81:9d:4f:71:8c:f2:5e:7e:08:9b:8e:5d:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:81:08:50:AB:14:BF:F5:5C:2E:D0:CE:C6:FE:31:77:63:F3:C7:E0
X509v3 Authority Key Identifier:
keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e3:b4:99:10:68:59:3e:69:3f:56:1a:6b:9f:fe:fc:3f:15:
c8:ea:80:35:f9:0f:2e:b3:39:49:ab:91:f6:2a:63:ce:54:bc:
82:72:be:fd:3c:d3:d3:00:80:d1:1f:33:60:4c:39:b2:58:df:
4f:d9:48:01:96:3f:79:af:2a:12:10:f8:b7:0f:20:88:f7:e0:
d7:2c:49:0c:bf:f9:17:1a:7e:a5:c1:67:ad:37:d9:8a:94:28:
6f:9f:b3:cc:2c:a3:e5:43:f8:40:ca:06:fd:fb:b0:5a:a4:51:
6a:ae:10:aa:5a:0d:f8:e0:2a:b0:40:4f:d4:6f:21:83:7e:55:
df:9f:b5:ad:66:76:e0:62:f3:b4:5b:0b:6c:32:82:67:9d:8c:
1c:73:05:c6:27:6b:52:08:82:37:db:94:10:e0:65:3c:12:02:
bb:88:c7:47:3c:23:ea:ca:17:98:77:41:ab:0b:83:f2:21:c6:
29:1c:7e:c6:f5:94:ab:9f:32:72:ea:5f:ca:2b:71:07:eb:10:
e6:c5:ea:db:77:75:4b:4a:ff:c1:03:0d:2e:70:c8:7d:c9:13:
8c:1b:c3:13:fc:fe:52:9e:4c:27:bb:e4:53:e0:70:e4:f6:9f:
63:fc:cf:c0:6d:b2:06:e3:61:9f:a1:75:47:85:ed:fa:f1:84:
ee:0d:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:44 2025 by rpki-client