Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier: qeIcSQEIYCP88UGXQcH0zVOxrTsRe6y0p0TRr0U1zAs=
Subject key identifier: C6:3B:7E:2E:F9:BA:CD:13:52:DC:11:5D:8F:BA:D2:03:3F:80:46:FF
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 019880F94A807D572BF585BC9A17C7085375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number: 0270
Signing time: Wed 06 Aug 2025 20:01:17 +0000
Manifest this update: Wed 06 Aug 2025 20:01:17 +0000
Manifest next update: Thu 07 Aug 2025 20:01:17 +0000
Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: 073kHjdKpSe1FMjirVQfUcoK9CGuA6SumVbE90cWUyE=)
2: JN9C0lCNENYeap20Rh2rmbTTK2I.roa (hash: JYxwyuD1IOAjEG0JPIbV5Puyq/yeqKzJl8UqOIBu2v0=)
3: mfDwEiGRmiWMmFDQIE-xmSECzg8.roa (hash: iS/PokmAhVq2sVGbLhXCo+Ur9JIXXT1eTOi1veSDLr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:4a:80:7d:57:2b:f5:85:bc:9a:17:c7:08:53:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Aug 6 20:01:17 2025 GMT
Not After : Aug 7 20:01:17 2025 GMT
Subject: CN=c63b7e2ef9bacd1352dc115d8fbad2033f8046ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:8a:cd:4f:7d:04:70:82:6d:c9:19:e3:f4:
f6:a1:19:3b:ff:97:ff:bb:27:11:35:9d:37:77:0c:
96:ca:ba:bf:0e:4e:59:d3:84:b5:ab:48:c2:41:55:
73:09:24:54:98:f9:d5:cf:b9:9c:b5:a7:cf:44:93:
db:be:f5:83:14:4f:4f:72:29:e6:d9:98:25:af:1e:
a5:f5:62:58:92:86:3c:d0:f1:ff:b0:cf:c7:c1:ec:
eb:dc:dd:09:ad:5b:d9:a6:6e:a1:c5:4d:a3:01:45:
ab:8c:64:10:e9:05:dc:aa:1a:2a:29:97:93:28:61:
ed:27:be:21:93:57:3c:94:80:2a:44:eb:30:07:a7:
1c:d9:ca:e7:0e:30:8e:c6:74:49:90:f4:e6:df:6a:
38:fa:f8:a2:2e:a9:d3:ff:b5:be:ff:d0:86:0b:36:
c8:0e:25:8c:61:48:50:66:f7:54:64:87:b1:96:31:
9e:5b:b9:7d:1d:98:6b:b2:13:5a:1c:62:01:6f:3a:
16:28:b6:aa:67:c0:54:47:92:ac:fb:39:0c:87:91:
8a:ff:96:d5:dd:b9:53:90:5b:c7:c3:5b:13:fe:21:
20:f4:1b:af:79:12:89:b3:92:d5:b3:92:8b:54:3f:
e4:6d:1e:b4:3b:8e:a3:85:8c:5c:75:82:7e:8c:a0:
fc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3B:7E:2E:F9:BA:CD:13:52:DC:11:5D:8F:BA:D2:03:3F:80:46:FF
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4c:9b:de:dd:6c:fb:ad:e9:6a:d5:e5:84:4d:43:31:95:90:
e0:d9:f0:bc:90:cf:cf:44:17:23:ec:4d:7c:92:7f:c8:53:2e:
40:c7:5f:ea:f3:81:ab:13:b0:9e:c7:98:5e:be:19:5e:dd:37:
a1:7c:97:9e:11:25:e4:ff:b7:5c:0d:62:26:21:06:e0:5f:a2:
0b:c7:72:7d:d4:29:fc:82:ab:d2:bb:5c:69:dd:84:2f:60:23:
05:eb:35:79:0e:17:4c:37:42:23:ac:61:4b:67:14:9a:24:4f:
aa:f5:11:e3:f3:78:38:e2:76:ad:5c:1c:aa:fb:a5:af:dc:fd:
cc:b9:fc:59:74:65:48:f3:e1:80:43:cc:e8:7e:83:75:55:8d:
6c:23:c6:d9:0d:19:4d:f1:5b:b8:0c:08:04:de:77:ec:be:f8:
56:df:7f:b6:1b:3b:7b:a2:d1:7a:5a:7d:68:21:2c:a7:72:4f:
4d:ae:a4:40:ba:f2:7a:a9:a3:f3:e5:2b:4c:96:28:52:ea:91:
80:70:66:5b:11:52:9e:4a:90:ff:a8:3e:cd:13:6e:1b:76:66:
88:06:2a:44:47:c5:0e:23:6f:25:ea:18:7f:9e:66:b1:5d:db:
e7:86:54:77:2d:8e:bf:bc:1c:e1:28:c0:c7:83:cc:28:86:8d:
58:d2:a1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:10 2025 by rpki-client