Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
File: 9Y3yxGnJeIlfhFgCTFBugByPsho.mft (raw, json)
Hash identifier: 2z5O5tcv4tudHxwPRvqgxrvDo2NJj57SW9T9rvtJuLo=
Subject key identifier: 59:C8:EE:45:57:A7:03:F8:05:18:9F:C1:AC:A3:8A:80:7A:7F:CA:6A
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 019874BE18933BB0AF39333DE92A387E08BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
Manifest number: 139F
Signing time: Mon 04 Aug 2025 11:01:11 +0000
Manifest this update: Mon 04 Aug 2025 11:01:11 +0000
Manifest next update: Tue 05 Aug 2025 11:01:11 +0000
Files and hashes: 1: 9Y3yxGnJeIlfhFgCTFBugByPsho.crl (hash: lPnA80gI912/rnym2JUoH4WX3M8Y0bga9Czm4WUUpyM=)
2: uTgF90O7aHLO_G7cSzTbj_nzdao.roa (hash: lwZMpyCYU1xDcN6IVFSHMP6G+054GMvXirawB6lbtsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:18:93:3b:b0:af:39:33:3d:e9:2a:38:7e:08:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: Aug 4 11:01:11 2025 GMT
Not After : Aug 5 11:01:11 2025 GMT
Subject: CN=59c8ee4557a703f805189fc1aca38a807a7fca6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:99:ca:86:4d:06:fd:da:9b:8e:b3:ba:32:
c6:25:09:05:ae:f6:be:f5:f3:c0:03:76:8a:64:a6:
90:c1:e2:39:36:d9:79:05:0d:04:6f:b3:18:07:02:
f5:fe:aa:8d:0d:a2:be:42:9b:c9:dd:e9:94:43:67:
7c:8b:98:83:74:21:a9:61:31:a1:67:34:3d:fe:e2:
d7:88:04:d0:b5:b7:7e:25:5e:ed:a4:e3:41:fa:77:
57:62:1f:a0:12:3a:e2:d4:cf:7a:95:c8:75:16:80:
cb:4b:ae:b6:1a:ed:18:47:b8:d9:c9:37:1a:d2:04:
b3:a4:b6:eb:ab:24:25:33:2d:c9:ef:9a:50:40:51:
14:99:d8:4f:57:1c:e2:35:f0:c8:7b:76:13:9e:0a:
29:01:33:41:5a:d5:c6:55:45:b0:4d:16:c6:fb:31:
69:53:6d:f6:9b:5b:51:5a:d9:7c:16:1c:c7:af:e8:
5f:dc:69:ff:07:fd:ad:a5:64:49:02:63:40:56:44:
78:45:5d:7d:5a:77:10:d5:3c:be:58:92:44:41:75:
4c:c9:23:4b:2e:dc:e4:20:6b:46:f7:73:1d:be:4f:
b3:59:b7:a6:8d:e8:30:c4:2d:df:0a:23:30:b7:e4:
ef:ad:07:0e:70:38:45:c3:3c:2b:3b:82:ff:ca:a0:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C8:EE:45:57:A7:03:F8:05:18:9F:C1:AC:A3:8A:80:7A:7F:CA:6A
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a8:d9:e4:13:f0:2c:91:78:10:84:e5:06:a2:a4:d6:26:62:
1f:7c:de:72:8c:07:7a:54:ec:83:fd:76:36:5a:9e:38:22:5d:
e3:f6:d5:ce:cd:d3:ae:dc:a3:d8:f5:a8:41:d4:fa:17:1a:d9:
1b:97:3d:08:58:cf:3c:98:d0:40:8c:71:61:63:78:11:a1:b0:
d1:b1:98:98:5c:76:f2:8e:40:f0:ce:ba:50:c2:34:a8:37:80:
87:f7:d0:8d:c4:ba:71:e8:51:4f:72:37:22:e0:4e:8e:96:96:
06:f5:64:9a:5f:8c:4d:87:01:43:6d:3e:8c:16:74:a9:e2:38:
f5:ec:e9:da:bf:76:fd:5a:27:3d:fd:b2:03:29:fd:ae:e2:bd:
23:f4:13:e8:80:8c:20:90:e6:65:48:45:69:4e:70:85:7b:45:
10:04:53:71:0c:bd:ef:1c:dc:04:80:bd:65:7f:6f:f5:d4:6b:
fa:a6:76:07:1c:1f:2c:d9:f9:47:7d:02:25:d7:ca:a0:e8:79:
ca:cd:29:d9:ee:99:95:6c:79:2c:76:4d:94:20:a8:ec:a4:52:
56:59:d8:4f:d0:22:c7:71:a8:f4:b3:c5:cc:9f:e6:89:24:64:
76:ba:b7:ab:15:49:a7:6e:72:68:b4:68:d5:11:cb:42:08:58:
ac:1b:2e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:30:26 2025 by rpki-client