Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: +eDIkzGpctOYD3kPPoyjI6wAe0iKOOYzN0ctMh16Q7U=
Subject key identifier: 7D:70:13:14:DC:C7:CB:F9:05:8F:8F:91:D5:C4:79:05:78:E9:02:52
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 0199C2D6729A6FDDE6D4A4C83B861AE09D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 08F2
Signing time: Wed 08 Oct 2025 08:00:57 +0000
Manifest this update: Wed 08 Oct 2025 08:00:57 +0000
Manifest next update: Thu 09 Oct 2025 08:00:57 +0000
Files and hashes: 1: L3qEBBzeJh8D6UqzEEk-9tnLcMA.roa (hash: shN2h6IdPkthKGJ1t7rh4Tc86Qf0XZxCIaY0/EgLJfA=)
2: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
3: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: 0u8mZ4LQRuCKJGiiilNub1hzFPafiiga+w0N4C4w07A=)
4: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:d6:72:9a:6f:dd:e6:d4:a4:c8:3b:86:1a:e0:9d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Oct 8 08:00:57 2025 GMT
Not After : Oct 9 08:00:57 2025 GMT
Subject: CN=7d701314dcc7cbf9058f8f91d5c4790578e90252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:e5:7f:31:de:07:1d:aa:c5:b8:d6:31:82:
3c:e6:93:f3:03:22:a7:92:a7:8c:cc:b5:cf:74:f4:
4f:db:bc:5d:29:b1:95:b9:b9:64:2a:bb:33:c3:43:
6b:20:35:70:4f:22:e4:45:04:2f:f2:0d:09:ca:ed:
02:cd:0d:76:2d:ea:d0:21:24:c9:0c:0b:92:c7:7b:
86:ba:75:a1:1b:a8:aa:29:1d:27:39:9d:19:ae:12:
42:4e:27:af:7c:26:c4:ce:39:49:6b:f5:31:b3:c6:
03:81:75:28:3d:38:53:2b:af:0c:15:c3:a5:18:9c:
82:34:2e:c6:f3:ea:fc:f8:c8:fa:ca:83:b4:1d:cf:
cc:a0:57:f4:98:ed:32:b0:0e:f8:79:9e:70:01:f3:
2a:af:41:af:53:4e:7d:4a:5a:a2:7f:85:72:f5:e5:
93:89:22:48:da:c0:5c:83:c0:80:80:84:57:90:fd:
fa:15:bd:1d:a1:b3:7b:5c:db:11:58:f3:e5:e8:e0:
10:dc:b4:d8:d9:29:1d:9a:30:b2:91:b9:54:77:25:
64:02:b5:93:83:02:4a:30:cd:a3:e1:49:27:cb:20:
b2:fb:81:bd:2d:28:a4:c8:07:8d:5e:3b:3a:ae:bc:
76:4c:06:f3:0d:68:05:37:e9:e6:5e:c7:2d:e8:87:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:70:13:14:DC:C7:CB:F9:05:8F:8F:91:D5:C4:79:05:78:E9:02:52
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5f:fa:ed:3f:8d:64:a2:08:19:1e:3a:c0:04:40:d9:0a:99:
98:1b:5e:55:63:57:79:66:41:99:7a:c3:91:ce:ea:84:0c:26:
1a:6b:25:6b:30:4e:ca:bc:01:10:f9:07:0f:fa:74:b9:fa:e5:
8c:bf:0b:d1:cc:32:70:05:43:cf:8d:c1:93:c9:05:5c:3f:09:
2c:7b:7c:62:d3:22:d4:d5:64:a2:f0:66:c6:35:c0:1b:9b:6a:
15:1a:7d:76:b3:3b:3b:67:e4:33:78:89:66:65:c9:fb:44:f7:
55:39:a2:86:39:2c:0f:92:0c:bd:bb:e3:b5:81:c4:7b:59:32:
91:c5:af:cc:7a:6a:6a:1a:3c:0c:7a:e1:12:8b:35:15:ad:83:
06:00:a9:52:7f:b7:63:40:fb:54:90:b0:af:7c:b7:f6:59:7c:
a8:21:c9:49:d7:c0:42:de:2f:1f:fe:f1:0e:6b:3f:61:3c:69:
35:88:56:4e:cf:72:16:0d:2f:2a:61:49:01:56:d9:9e:63:83:
13:cc:e0:3c:5e:d0:09:3a:c6:9b:c7:d8:74:89:82:ef:0d:ce:
55:1b:f6:9d:f1:32:1a:b3:96:f1:8c:bb:8d:8d:c1:64:bc:d7:
33:8e:26:84:77:e5:08:cd:57:1c:94:07:e0:5b:80:5b:7a:cd:
10:02:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:40:08 2025 by rpki-client