Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier: gw5hse+NWLFdj1TPHKLDl8sY/uxun1ns0Z/RTBE1nHU=
Subject key identifier: B7:99:99:2A:A0:5A:AB:11:5D:7A:E3:30:CD:0E:BE:DE:A1:5E:E8:4D
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 01992E59AE7BD18F290C029AC6F92DE26E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number: 0739
Signing time: Tue 09 Sep 2025 12:00:53 +0000
Manifest this update: Tue 09 Sep 2025 12:00:53 +0000
Manifest next update: Wed 10 Sep 2025 12:00:53 +0000
Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: sN98OMfLvvaDW7vgxvQkjqPuVzCS0SKLQbayT6MzO+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:59:ae:7b:d1:8f:29:0c:02:9a:c6:f9:2d:e2:6e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Sep 9 12:00:53 2025 GMT
Not After : Sep 10 12:00:53 2025 GMT
Subject: CN=b799992aa05aab115d7ae330cd0ebedea15ee84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:6e:c8:b4:b2:ce:0e:2c:46:b9:6a:ee:85:
7d:42:57:11:fa:41:ac:bc:bb:08:35:de:29:bb:30:
3d:54:46:e7:30:35:c4:04:c2:59:17:77:bb:89:57:
fc:65:b4:a9:5c:73:81:ba:7d:c4:ac:06:60:bd:f0:
f9:c0:6c:70:6b:e8:bf:bd:03:b8:71:26:99:c2:6e:
34:76:11:fa:72:43:19:1b:ee:b2:07:72:6f:cf:70:
1a:5a:7c:52:3a:5e:71:19:fe:02:44:be:e0:e7:24:
e1:e2:d6:f6:70:95:1f:a5:b5:ee:e1:a9:72:fd:26:
8c:3b:c0:47:e5:be:27:2c:94:c4:4d:d7:65:b5:58:
aa:62:15:c3:d2:d6:7b:a9:50:d0:bb:21:b6:ad:d2:
1e:44:38:8f:83:9f:c5:0c:cc:0c:5e:04:be:2b:17:
f2:9d:6b:83:f1:67:aa:0d:75:37:ab:c8:bb:b8:88:
69:e5:cc:fa:49:3c:fa:a3:f5:be:63:b7:6a:67:0d:
0c:bc:e5:4e:07:fc:13:39:07:bf:5b:9b:92:35:2f:
e0:fa:ba:02:d0:35:58:bb:e4:4f:94:a3:2a:ae:55:
c8:2b:9f:46:53:91:0f:9a:db:8a:fe:dd:3d:e7:76:
66:1a:b7:dd:fe:b5:2c:52:d9:50:2e:95:00:64:24:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:99:99:2A:A0:5A:AB:11:5D:7A:E3:30:CD:0E:BE:DE:A1:5E:E8:4D
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:47:df:b7:1c:c0:8a:e6:92:11:d3:bb:78:52:2c:ad:2e:99:
27:9d:9f:43:b5:5a:ba:96:e0:06:dd:dd:89:7b:74:60:a1:1d:
21:54:95:97:fa:5c:36:ea:41:33:fd:28:3e:db:19:89:b9:b9:
a9:37:ab:20:37:e6:5b:6b:2f:f7:f7:7e:d7:ef:7a:a2:af:e9:
19:17:1a:8e:e4:ff:5d:e3:fc:25:fe:c8:fc:13:02:c4:ce:7f:
db:36:f8:c2:b2:6c:fb:d3:62:28:13:db:40:ac:70:f6:67:04:
08:95:93:1a:4a:75:05:d3:cf:c2:af:82:ae:67:41:51:46:f8:
c4:d1:b3:8a:29:57:4c:bd:21:13:bc:28:0a:60:5b:1c:c4:6f:
e2:89:14:e7:2c:2d:0e:58:bf:53:44:62:57:dd:a1:a2:84:5f:
b3:6c:5b:0f:6a:66:1d:77:30:84:ce:5b:b1:32:59:9e:7d:ab:
de:8e:4b:39:2d:2e:37:04:e7:58:4c:40:5a:04:05:f6:bd:9e:
6d:c5:e1:44:9f:65:c8:87:fe:7d:90:6d:a4:02:16:9c:93:50:
9b:1a:9c:a8:09:a9:a0:4b:ed:96:2d:c4:32:67:9f:17:60:38:
19:90:98:d4:6d:71:f0:46:9c:9b:56:5f:64:46:33:ae:66:17:
44:b9:19:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:59:56 2025 by rpki-client