Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: p1anRWPxITT8P6DzlJuDdIhEGmCKyFlb/IR1KSElKts=
Subject key identifier: 92:BA:3D:B7:03:DC:9C:82:59:26:E9:0C:50:05:21:29:94:F8:86:E1
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019938DFD7BE5D130D8959E9166D14D41C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1683
Signing time: Thu 11 Sep 2025 13:03:37 +0000
Manifest this update: Thu 11 Sep 2025 13:03:37 +0000
Manifest next update: Fri 12 Sep 2025 13:03:37 +0000
Files and hashes: 1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: z3/s1yt4IHZ9Z8SqeiD6rlCzCySPRKbpW0OE35x5EGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:d7:be:5d:13:0d:89:59:e9:16:6d:14:d4:1c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Sep 11 13:03:37 2025 GMT
Not After : Sep 12 13:03:37 2025 GMT
Subject: CN=92ba3db703dc9c825926e90c5005212994f886e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:d1:43:bb:27:3d:8c:2d:28:53:98:92:d1:
c5:66:9c:0c:a3:38:be:31:7a:68:80:a4:67:81:0d:
bb:b4:18:5d:9f:fe:fd:8d:7a:5a:8c:0d:71:27:0b:
b4:4b:d8:3e:6f:6e:4e:9e:50:05:2d:c3:f6:dc:2d:
50:33:82:0d:21:41:b0:7f:fd:ce:a8:ae:36:4d:43:
5d:c4:43:a9:b9:65:07:dc:4c:60:0b:24:af:8f:0a:
de:65:7d:77:2b:5e:ba:ea:f4:7a:81:72:d7:f1:1e:
1f:d8:27:45:16:fe:ed:f3:fa:01:ff:71:ad:2a:73:
66:4d:22:f2:81:b1:4d:e4:8c:3e:98:79:f8:be:11:
23:ae:4a:72:46:91:8b:50:b4:f4:ca:3c:bb:ae:18:
7a:6d:bb:4b:2d:ab:27:78:f9:7a:4b:f8:9b:d2:fe:
3d:63:3d:7e:cb:3c:86:de:0e:41:c2:d2:c5:89:54:
a2:85:2d:83:64:5e:00:12:9e:12:79:b9:46:a6:b4:
c5:a4:f6:d3:d9:c7:40:98:57:c4:66:cd:32:14:5f:
51:4a:a6:a8:5d:b7:20:76:d7:f5:1d:40:d1:10:c6:
fc:bc:52:55:36:34:69:80:51:e9:f7:47:49:75:d9:
77:f2:d6:14:8d:b9:9e:3a:b0:b4:80:6e:fb:ca:c7:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BA:3D:B7:03:DC:9C:82:59:26:E9:0C:50:05:21:29:94:F8:86:E1
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1d:ea:e6:e5:93:39:91:e8:e3:41:e0:c5:e7:cc:a4:87:16:
28:e0:00:1f:8f:3e:08:63:23:b1:84:e2:69:fd:46:4e:e8:f9:
6d:68:9e:5a:fb:da:d1:3d:f3:37:3e:6c:36:08:f2:c8:56:f8:
91:d3:2c:d2:04:b2:37:02:08:2e:55:bd:03:3b:4b:fe:47:7d:
bb:a6:4f:5e:41:b8:1a:63:05:c7:4f:26:73:ce:f7:9f:40:b7:
de:b0:10:78:88:8b:bb:73:ec:16:73:db:c1:99:7e:6a:eb:7c:
fb:46:56:f9:cc:2b:e1:da:90:98:20:c0:be:8e:54:5a:0b:54:
98:f2:22:3c:47:f2:d7:18:52:54:ab:80:a8:b8:0f:b5:a7:ab:
9a:c7:27:c8:84:89:19:bc:10:57:66:5d:8e:82:91:71:fa:6e:
e9:c7:e8:a0:e2:01:c0:02:e3:66:9b:b4:ec:d4:c5:90:ff:ff:
2f:c0:08:59:b6:69:5f:8c:65:91:f1:e0:3a:7f:6e:81:53:1f:
a3:10:05:63:f1:7d:58:5a:45:56:75:83:35:a3:b3:3c:e6:27:
f5:92:4e:1f:b0:a0:4a:3e:7e:25:db:1d:a7:40:61:2f:b4:5b:
c8:a2:f2:34:1d:2a:bf:e4:82:f4:f9:6d:34:38:12:9d:0b:8e:
33:21:ad:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 18:52:49 2025 by rpki-client