Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: hKx6q/3U186/M/mmQIVSJ4zrsgejnGjFjInCFYwSWJA=
Subject key identifier: FB:12:44:FC:A7:13:CD:3E:C2:02:47:CD:18:36:44:1F:6A:F7:AB:5E
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 01992DB57F47CD41D6624BB8A23AE3C7C562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 1242
Signing time: Tue 09 Sep 2025 09:01:33 +0000
Manifest this update: Tue 09 Sep 2025 09:01:33 +0000
Manifest next update: Wed 10 Sep 2025 09:01:33 +0000
Files and hashes: 1: 63TdjH6W107on2R0OsWADBs0on8.roa (hash: Ncx3bdjsiwwzAHtwjbAlakIAyaghqw6YvVL5UElIrQk=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: VmiI0pj4RxVKgVy4gpl2NH16FWqwAm2+v2o8np3A0Ik=)
3: fWsFtqjlg1LQ_p_q5K_2GnL8QEw.roa (hash: CoDBOpj4/7ndyh9Jvl792nll1Mc+xm7ePsUPRUs36YE=)
4: rJW6voa1Wjy_FJWB-mYHdAKiSVs.roa (hash: vjUPxR8jUNlJ30WRpjQpZExmSVG2787XG5OfBnV64ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:7f:47:cd:41:d6:62:4b:b8:a2:3a:e3:c7:c5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Sep 9 09:01:33 2025 GMT
Not After : Sep 10 09:01:33 2025 GMT
Subject: CN=fb1244fca713cd3ec20247cd1836441f6af7ab5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:d9:e6:c6:b9:21:e1:f8:36:5b:9c:81:15:
7c:01:1e:81:5a:c4:da:2f:9c:5f:87:97:f0:19:4c:
aa:69:94:60:f2:cd:d9:c9:65:cc:71:92:d0:64:36:
54:b1:7c:55:f6:d1:b7:e7:88:fe:d8:45:0a:77:93:
5f:a8:f6:d2:a3:a3:2a:43:04:a7:a1:fd:eb:bb:60:
4f:9c:91:cd:87:df:d4:f8:a5:8d:1c:ba:b7:b7:5c:
e4:d8:27:04:85:c9:47:36:b8:f3:76:93:ab:1f:1c:
c5:47:da:43:08:03:5e:0e:a0:97:30:ea:2c:7a:4e:
67:b1:eb:a4:c9:90:e0:fe:74:5c:cd:1d:78:5e:9a:
53:d5:85:23:92:af:99:28:3e:f4:98:1b:3c:86:8c:
85:66:e7:43:ce:77:b5:28:d7:37:ab:dd:65:4c:f5:
14:c9:99:1f:44:e4:d9:a1:a6:d4:28:b3:ee:99:f3:
10:88:0e:5c:53:79:f6:9e:68:6f:f6:40:77:8b:0d:
54:45:ad:38:e6:af:0e:5a:6e:a2:34:77:f4:db:a7:
35:ad:71:be:56:23:36:78:68:20:ee:5e:ef:c5:68:
cf:83:e6:82:9b:6d:ba:ac:e3:2f:f6:55:42:50:d7:
8e:e0:aa:66:5b:04:9f:07:46:9d:85:82:53:7e:4e:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:12:44:FC:A7:13:CD:3E:C2:02:47:CD:18:36:44:1F:6A:F7:AB:5E
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7a:15:4e:2c:98:7e:f2:7f:12:2f:82:08:dd:f6:13:b8:21:
9c:be:5e:01:e2:02:c4:c2:30:14:7d:ab:a2:2f:1a:bb:ce:0b:
35:79:49:f3:6a:87:ec:65:1e:9c:ec:6f:3e:5c:14:70:a0:42:
95:15:b2:53:6d:10:fb:cf:b7:ce:b1:9f:b3:64:56:67:01:d7:
81:06:f5:7c:4d:21:49:e4:09:79:b1:bd:c0:00:38:99:7a:87:
3a:b5:9d:d3:95:07:f5:37:0c:b2:0b:fd:3e:72:11:ea:22:24:
33:51:a9:43:bf:9c:72:86:0f:76:68:f7:c7:2c:a5:20:cf:68:
64:0f:4b:44:c3:c4:89:e5:1b:f6:82:52:5e:2a:75:ce:1d:50:
7d:23:0b:dd:c4:63:b9:65:93:dc:08:af:42:0c:bc:1d:7d:25:
cb:07:f1:0a:4b:a6:ee:80:0c:7f:21:8f:37:de:89:46:64:3e:
7e:ec:26:2a:23:6c:0c:01:72:f7:58:96:56:c6:83:f8:1d:fc:
e8:f1:83:a2:4b:6e:e3:3f:12:2f:1d:c6:4f:fc:b6:85:ab:cb:
f6:7f:0c:03:4c:95:6a:e8:57:ad:82:2f:3b:ab:34:d5:ae:d5:
d2:05:b9:5e:99:1e:11:fa:0f:99:a7:ef:ab:56:c1:b6:7b:99:
e3:ef:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 11:35:50 2025 by rpki-client