Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
File: y9lerW0qHa8u9oestMKedgdrKAk.mft (raw, json)
Hash identifier: LaqNb7MtLVt13VHUZHUn5lvdzwmWLqwzXkZgHvRLxWY=
Subject key identifier: BC:37:36:98:DE:95:66:23:12:99:23:09:3B:B8:38:4F:A2:CB:AF:3C
Authority key identifier: CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
Certificate issuer: /CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Certificate serial: 019873065259C6357583B7F53F411EBDBA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
Manifest number: 09F8
Signing time: Mon 04 Aug 2025 03:00:50 +0000
Manifest this update: Mon 04 Aug 2025 03:00:50 +0000
Manifest next update: Tue 05 Aug 2025 03:00:50 +0000
Files and hashes: 1: dLJ0i3DKxKOgLSZU6DT_1_-wzDs.roa (hash: R+7BGQyfLFShlywgi4Re33H2XJ0XnH/YSJRVXJB4EDE=)
2: y9lerW0qHa8u9oestMKedgdrKAk.crl (hash: 9nBpEm4P/w8zBrOAjVcGxGP1j4/iHo3CC8Lj4nruhBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:52:59:c6:35:75:83:b7:f5:3f:41:1e:bd:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Validity
Not Before: Aug 4 03:00:50 2025 GMT
Not After : Aug 5 03:00:50 2025 GMT
Subject: CN=bc373698de956623129923093bb8384fa2cbaf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:a1:a8:8e:75:bc:e2:0e:97:3e:6b:67:fa:
33:42:20:73:df:e4:2b:30:bc:11:a4:8c:cb:2d:33:
07:b7:3c:07:b4:d7:d1:58:48:68:4e:71:73:33:93:
57:08:7b:97:24:ab:4c:d0:d8:e2:30:91:62:08:cc:
ff:d6:a2:7e:1c:52:9a:32:17:8d:13:02:fb:d8:c4:
9d:af:52:1b:98:d2:8b:cb:1a:c2:a1:30:60:cf:68:
1f:f7:08:cc:d9:fe:6c:4d:f8:65:65:2b:7b:14:37:
0d:0b:a9:a9:28:15:03:99:3e:c0:8c:ba:ab:64:87:
86:e9:3a:62:42:45:1f:5c:9a:94:11:22:c7:03:1e:
2b:ea:55:aa:b2:49:50:4f:d7:d9:c8:a7:0c:a4:03:
00:d1:ca:e4:b9:73:4f:28:7f:e5:d0:3d:4a:c4:76:
68:e2:3c:5a:a9:39:b3:33:c4:47:a8:8f:53:1e:c5:
9a:8a:ec:16:a6:a2:11:fc:6b:f0:a9:cc:06:6c:e6:
93:41:69:40:05:35:d4:4a:df:8d:0c:36:c8:d6:50:
c2:39:68:eb:b8:20:9a:42:d6:96:6b:d6:ae:ff:62:
9d:32:94:14:3c:cf:df:b4:87:66:c9:67:ce:2d:c5:
8e:0d:60:8d:2a:f9:89:69:85:9e:e1:2d:ac:08:82:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:36:98:DE:95:66:23:12:99:23:09:3B:B8:38:4F:A2:CB:AF:3C
X509v3 Authority Key Identifier:
keyid:CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:66:9b:68:9b:93:fb:86:7d:7a:ba:db:6e:66:e8:dd:e8:d6:
8e:de:7a:7d:cc:f8:b3:e7:ba:66:b8:c7:cd:bf:9d:8e:b9:2f:
c8:03:33:1e:94:6c:36:ce:1b:30:cc:9d:70:bf:26:29:03:61:
cf:2d:61:3f:f9:1b:1b:a6:b7:21:85:34:fb:10:74:bd:3f:f3:
4a:74:6a:de:db:f8:d8:46:1c:e7:db:f4:00:2e:7f:dd:fb:b6:
3a:2e:37:9a:44:47:a6:1d:a6:30:b0:0e:21:37:78:d2:7b:c0:
f9:a6:95:83:50:36:5c:ba:98:b2:e9:50:23:a1:c7:3d:95:0b:
05:e5:13:f4:4a:63:5a:a4:f4:03:82:36:86:24:c2:4a:13:72:
ea:11:7a:e0:ae:d0:8d:6b:9b:34:26:b3:fb:59:39:5e:56:18:
d5:72:93:68:33:b8:cf:2d:7d:dc:95:d8:60:c6:47:95:af:e9:
06:6c:93:55:44:b7:97:f2:7d:18:eb:33:d9:1a:9a:c0:0c:ef:
90:80:a3:98:2e:e0:f5:0e:54:48:d6:ee:cf:30:f2:e2:bc:ec:
0f:ad:d8:c3:70:f6:b1:87:0a:f4:bc:09:16:c1:ec:29:f5:df:
9e:54:9e:3b:ac:4e:13:02:e3:6e:57:fb:ed:b7:e2:e5:c0:f4:
5e:7e:48:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:10 2025 by rpki-client