Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier: W5Adj4N5cKIH0Wv7QF8wjTGkFZe1Ru55/AF4M9t3FEY=
Subject key identifier: FD:86:FD:2F:EC:60:89:59:8E:15:0E:5D:DC:F2:3A:DF:83:E2:EE:11
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 0199350196A9FAF6D58A696EC98B2A9BD739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number: 0363
Signing time: Wed 10 Sep 2025 19:02:00 +0000
Manifest this update: Wed 10 Sep 2025 19:02:00 +0000
Manifest next update: Thu 11 Sep 2025 19:02:00 +0000
Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=)
2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: dp+C5LLf495V6oOCRTR8kKkhkYAyhV9fu/DEcp+UrZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:96:a9:fa:f6:d5:8a:69:6e:c9:8b:2a:9b:d7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Sep 10 19:02:00 2025 GMT
Not After : Sep 11 19:02:00 2025 GMT
Subject: CN=fd86fd2fec6089598e150e5ddcf23adf83e2ee11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:cd:8a:76:6f:20:0e:50:93:f6:1b:7e:e8:
93:92:c6:29:ad:ce:13:be:a0:bc:26:2b:1d:f1:76:
19:8c:09:be:52:5d:1e:e1:c9:58:5f:d5:71:58:ff:
16:4b:7e:0e:a6:4d:d0:99:7f:05:29:25:34:54:76:
02:9a:6a:00:a7:f3:a8:c1:60:68:b9:a0:01:43:6a:
24:49:d7:69:65:44:cd:bf:31:f3:4a:d7:d3:cf:6c:
b5:cd:02:de:6c:59:d8:91:26:33:92:a1:5d:c8:57:
ff:b9:22:95:23:83:cd:11:62:78:a1:e0:93:c9:19:
7a:a6:50:21:4c:9b:e3:ea:5b:48:9b:be:0b:ed:c4:
2f:9a:40:0f:07:9d:e3:b4:44:32:da:4a:9a:a4:78:
25:08:d0:4c:24:c8:81:1e:74:2b:ff:2e:bc:1e:a2:
71:46:22:9f:89:6b:84:80:dd:11:db:9c:17:36:26:
25:53:71:63:91:6f:e1:e4:12:d9:01:49:4d:b1:ef:
1b:ba:53:43:8b:7c:df:b9:c7:af:33:bd:e1:de:80:
f7:21:18:e9:16:e9:80:62:63:89:82:ac:fe:8e:99:
19:d4:0d:cc:cd:1e:3e:da:0d:2c:e2:c0:e6:ee:a9:
3f:ff:ae:07:ee:a9:52:72:39:bc:47:19:cd:06:36:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:FD:2F:EC:60:89:59:8E:15:0E:5D:DC:F2:3A:DF:83:E2:EE:11
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b2:42:b3:15:ae:45:3c:52:d0:3f:e5:57:85:af:77:0c:25:
99:d0:78:58:61:b8:25:f6:43:e1:aa:f2:9c:8d:44:d3:d7:d7:
c2:38:cd:6a:bf:29:c4:90:b6:61:14:76:48:b4:20:00:59:99:
78:71:e9:7a:f8:99:75:b7:b1:11:38:9c:90:4e:8e:04:53:10:
88:6d:f4:0c:be:19:67:73:0e:fe:58:f6:d6:b3:bc:ab:df:e2:
ff:f3:bd:c9:d5:ee:f1:3d:a7:38:6c:55:7f:75:16:05:63:4b:
7e:71:3f:7e:5e:2f:42:8d:ad:7a:c8:fa:91:5b:3f:ab:90:f7:
31:e6:12:bc:b7:c5:25:37:91:94:6c:2f:74:8d:f3:06:50:89:
23:8f:ae:63:3c:a7:e4:27:58:32:8e:6f:58:d9:90:8a:af:60:
04:b7:b3:dd:23:4c:9c:c4:fc:20:cd:0b:c8:37:8d:17:ab:83:
73:55:0d:3e:67:f4:16:93:98:0c:04:45:f4:e8:1a:91:fb:6c:
9f:0e:c4:4f:83:af:59:ae:8f:02:81:76:25:c7:90:47:11:96:
3c:12:a6:c9:2d:4a:b2:bb:df:38:8f:90:2f:b2:a0:d9:3f:73:
d5:af:ae:a6:c1:b8:ce:b3:d0:b7:06:0f:80:70:9e:5b:9a:4d:
f9:7e:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:56:03 2025 by rpki-client