Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: NiH05VHNLh5lgaV6mfrVOv+8+3YxBRCrMr2uuTyevbk=
Subject key identifier: 33:1A:FF:28:2A:19:B1:31:5E:F1:22:70:02:27:05:FC:F0:AD:D5:4E
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 01988A3328376AC60C2538E1F65215729202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0D09
Signing time: Fri 08 Aug 2025 15:01:05 +0000
Manifest this update: Fri 08 Aug 2025 15:01:05 +0000
Manifest next update: Sat 09 Aug 2025 15:01:05 +0000
Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: zUoE++Hz+m0JYt7lh/SeIPHQPSdaF0E3I/0gXaVawOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:28:37:6a:c6:0c:25:38:e1:f6:52:15:72:92:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Aug 8 15:01:05 2025 GMT
Not After : Aug 9 15:01:05 2025 GMT
Subject: CN=331aff282a19b1315ef12270022705fcf0add54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:fc:8e:f9:9c:38:7d:0d:20:ff:95:4d:fc:
0e:b1:93:99:99:76:9c:40:f1:45:a1:44:51:96:16:
1e:bb:1b:95:98:be:51:84:c6:60:22:47:7c:9e:cd:
cc:f4:19:e0:6d:06:49:df:1c:db:35:9f:82:d1:35:
ba:b4:e7:ff:86:7b:45:7d:00:17:53:71:91:cb:6f:
f5:9b:f0:5f:ff:8d:b4:f5:49:cc:0c:e2:b1:f7:d2:
a9:5a:75:73:81:1a:e7:5b:07:3c:da:8a:82:c7:6e:
56:90:4f:d6:81:89:aa:5d:40:9a:c5:28:a4:b2:99:
96:4f:5b:63:06:d2:89:e2:67:79:69:40:98:42:9c:
9d:c9:1e:51:c5:da:c4:c6:a4:0d:f4:52:be:b0:ea:
41:04:25:fc:36:d0:1b:95:04:b3:db:f1:26:3e:40:
fa:07:74:95:cf:e9:8f:34:69:9b:1b:24:a7:13:99:
ab:28:62:b0:06:7d:a9:d8:6c:98:7a:87:5d:51:ab:
6e:72:65:4c:0d:b3:40:65:42:3c:63:72:4a:3c:5b:
ec:92:86:71:d4:cb:0d:17:14:d6:8b:de:3c:34:f8:
8a:eb:e7:1b:62:b5:01:59:6f:62:9f:4f:ae:d1:d7:
7b:74:e6:3e:32:e4:96:df:26:4f:45:5e:20:b3:a5:
18:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1A:FF:28:2A:19:B1:31:5E:F1:22:70:02:27:05:FC:F0:AD:D5:4E
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:f7:0b:43:b0:3b:d8:fb:01:3b:eb:a9:16:70:6f:4f:95:92:
65:be:13:2f:02:e4:a1:f2:9f:52:9f:28:dd:ad:c8:16:10:cb:
bd:d3:ff:41:27:53:83:36:df:34:9e:7b:4d:b3:23:e5:f8:b3:
28:2b:08:c5:3c:d8:9a:bc:fa:36:78:11:17:ac:76:a8:33:af:
ed:f5:0c:85:50:a1:15:c7:73:e5:4d:2a:d1:dc:36:ce:e6:27:
5d:f8:fd:3f:be:41:32:9d:77:5e:75:c2:41:32:d5:92:32:0b:
9e:10:07:c5:63:f7:ca:a4:8f:fd:66:36:fe:7b:15:a5:af:3a:
10:21:be:77:1d:59:57:1a:50:71:20:9d:93:21:4e:a1:99:16:
e4:51:8c:f9:2d:13:ae:65:46:7a:b4:4c:cf:92:5d:82:6b:39:
f7:cc:16:2d:7d:f9:44:7b:4c:51:70:fb:cb:12:bc:ca:a7:8d:
50:04:ca:d9:ce:bd:e0:e4:6f:59:1e:27:88:92:ae:8a:16:39:
3a:c4:fc:db:d7:fc:e5:db:80:48:62:d8:3b:26:a0:a0:ff:35:
28:a2:cd:02:77:70:4d:b6:cd:53:7c:9b:ab:77:ce:dc:88:e3:
51:64:60:c5:a3:0d:17:79:e8:ab:9b:cf:57:1d:f0:07:dd:65:
b7:ec:6c:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKMyg3asYMJTjh9lIVcpICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1
M2Y4MzgwHhcNMjUwODA4MTUwMTA1WhcNMjUwODA5MTUwMTA1WjAzMTEwLwYDVQQD
EygzMzFhZmYyODJhMTliMTMxNWVmMTIyNzAwMjI3MDVmY2YwYWRkNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2X8jvmcOH0NIP+VTfwOsZOZmXac
QPFFoURRlhYeuxuVmL5RhMZgIkd8ns3M9BngbQZJ3xzbNZ+C0TW6tOf/hntFfQAX
U3GRy2/1m/Bf/4209UnMDOKx99KpWnVzgRrnWwc82oqCx25WkE/WgYmqXUCaxSik
spmWT1tjBtKJ4md5aUCYQpydyR5RxdrExqQN9FK+sOpBBCX8NtAblQSz2/EmPkD6
B3SVz+mPNGmbGySnE5mrKGKwBn2p2GyYeoddUatucmVMDbNAZUI8Y3JKPFvskoZx
1MsNFxTWi948NPiK6+cbYrUBWW9in0+u0dd7dOY+MuSW3yZPRV4gs6UY/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMa/ygqGbExXvEicAInBfzwrdVOMB8GA1UdIwQY
MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt
MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5
LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1fcLQ7A7
2PsBO+upFnBvT5WSZb4TLwLkofKfUp8o3a3IFhDLvdP/QSdTgzbfNJ57TbMj5fiz
KCsIxTzYmrz6NngRF6x2qDOv7fUMhVChFcdz5U0q0dw2zuYnXfj9P75BMp13XnXC
QTLVkjILnhAHxWP3yqSP/WY2/nsVpa86ECG+dx1ZVxpQcSCdkyFOoZkW5FGM+S0T
rmVGerRMz5Jdgms598wWLX35RHtMUXD7yxK8yqeNUATK2c694ORvWR4niJKuihY5
OsT829f85duASGLYOyagoP81KKLNAndwTbbNU3ybq3fO3IjjUWRgxaMNF3noq5vP
Vx3wB91lt+xsaA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:56 2025 by rpki-client