Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier: Y73iy+Fx/9qm+z8xcLwVNWLwxoTLlEMHt03zEhdQnvQ=
Subject key identifier: 17:FA:BB:F7:FD:0D:2D:B8:3D:21:99:66:C5:14:FD:E3:90:23:8C:C8
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial: 019889C4D9B804DD36CEC5069582D288EA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number: 132F
Signing time: Fri 08 Aug 2025 13:00:35 +0000
Manifest this update: Fri 08 Aug 2025 13:00:35 +0000
Manifest next update: Sat 09 Aug 2025 13:00:35 +0000
Files and hashes: 1: mj2SP2YUf8OOW3PWyfsSenlnbcQ.roa (hash: 7rYL22HIBA9YP5PrLL9E5bTyxJEJdAa2DC73cuHwaP4=)
2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: IBtzG/uIfFuxDTnqG4Vp1MNj/S8b0yDQnviiH4wqc2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c4:d9:b8:04:dd:36:ce:c5:06:95:82:d2:88:ea:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Validity
Not Before: Aug 8 13:00:35 2025 GMT
Not After : Aug 9 13:00:35 2025 GMT
Subject: CN=17fabbf7fd0d2db83d219966c514fde390238cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:14:f3:70:a8:16:45:fc:5e:44:22:da:e9:
39:ce:b1:c4:b5:45:4f:cf:e4:09:b2:c8:b3:59:32:
39:84:43:0d:5a:9d:77:20:72:f0:78:43:ce:16:ce:
ac:ed:35:40:f0:bc:7a:eb:65:a3:54:2f:15:cd:b2:
01:ac:0f:88:82:c0:f8:dd:ad:71:87:15:8c:61:64:
ae:72:1d:6b:3d:31:cf:90:7f:3f:33:7d:d7:74:46:
75:72:0d:4e:9c:02:b8:86:a9:36:2f:10:68:be:df:
ed:db:63:3a:2c:b5:60:20:12:df:03:4e:c4:77:bf:
dd:8e:eb:02:ad:9c:2a:fd:2e:c6:e5:d2:34:56:6b:
94:ae:3f:40:8f:a9:7c:45:3f:f6:6e:f3:ad:b8:14:
c1:4d:26:1b:52:39:60:87:ba:7d:7a:c9:ed:dc:b1:
5f:25:dc:ec:10:b7:25:eb:68:73:e3:3c:7c:2e:33:
02:72:0c:10:38:36:a7:8d:cc:a3:da:6d:07:ac:94:
44:10:79:02:7a:72:d4:90:53:de:87:e4:be:d7:4d:
10:79:b4:30:59:37:17:15:0a:ad:98:9c:15:7e:09:
a4:e1:56:27:0b:e0:21:eb:37:76:6b:1f:30:30:56:
51:7f:e8:22:c0:ee:d0:d8:d4:23:e9:c5:89:99:99:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FA:BB:F7:FD:0D:2D:B8:3D:21:99:66:C5:14:FD:E3:90:23:8C:C8
X509v3 Authority Key Identifier:
keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4d:98:7a:b6:95:82:f2:90:9a:90:7e:87:84:b8:3f:89:20:
fd:29:6c:c6:06:0b:a5:93:4c:a7:49:e4:c9:c5:c8:96:e9:72:
fa:30:68:61:5f:f2:6f:5b:4a:87:4a:07:05:69:f1:da:67:55:
d4:ea:1c:6e:b7:65:fb:e2:21:63:7d:26:cb:4e:27:cf:4e:d4:
9e:e5:16:26:1a:7d:1b:53:f0:96:2d:84:81:d3:b5:ee:f8:db:
38:47:56:df:b9:dd:8e:76:40:79:f4:fa:ad:41:12:8f:56:0d:
98:3b:2d:fe:1c:31:57:91:9b:a8:01:8c:5f:0d:31:d2:4a:b7:
d2:c8:9b:63:a7:e9:9a:3c:9a:32:fc:e9:7a:33:41:bf:a4:c6:
fa:3a:af:c8:cb:91:bc:b5:da:77:26:f5:4b:74:d6:45:94:db:
93:50:93:8f:ee:b4:4a:76:19:ff:14:6f:9f:03:6e:65:06:80:
1a:9d:b9:95:7d:4c:40:1a:b0:c7:54:10:d3:07:82:c8:50:6e:
25:5c:1d:f2:38:a9:df:d9:2e:0d:be:6a:fb:c7:d5:18:da:8b:
99:34:da:e6:84:a3:0a:99:ff:5c:de:51:42:0e:e6:43:8a:db:
1f:25:2d:94:6e:4a:a2:c1:6c:36:2b:2f:c1:99:e3:f8:52:9c:
a3:ef:42:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:31:42 2025 by rpki-client