Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: 0867RfMQiHkAipULpuVKBnxwXyoYzy6CV8vKKJ0lsw0=
Subject key identifier: 4E:2C:7D:03:B6:B1:AE:34:85:CF:52:0E:71:20:AE:49:EA:16:9E:9F
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 01992B593704AE225F0C73099A81EC36C0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 12E9
Signing time: Mon 08 Sep 2025 22:01:30 +0000
Manifest this update: Mon 08 Sep 2025 22:01:30 +0000
Manifest next update: Tue 09 Sep 2025 22:01:30 +0000
Files and hashes: 1: APe792PPzgn2UcG2RsKnM9NZvXY.roa (hash: P5YJH0mHT12JV4knVxcd215g8BRGbGqkMZPdkHPu8r8=)
2: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
3: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: uhhFBkc/Lm+os5pB/P/m0PVZamUqmplG1Ef8iBw0kgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:59:37:04:ae:22:5f:0c:73:09:9a:81:ec:36:c0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Sep 8 22:01:30 2025 GMT
Not After : Sep 9 22:01:30 2025 GMT
Subject: CN=4e2c7d03b6b1ae3485cf520e7120ae49ea169e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:a7:86:27:b2:e1:41:bb:95:a4:af:69:07:
77:84:86:35:ca:fe:6e:dd:ba:5b:f3:5a:f9:c8:c7:
a4:54:dc:34:ea:8f:8e:d5:b8:a0:27:68:13:ef:37:
fa:45:f0:32:e1:27:57:d5:b7:82:a4:ad:6d:df:e6:
d0:37:79:6d:c8:22:c5:b9:c6:18:1a:77:9d:60:0e:
6a:81:7a:da:41:b0:8b:a3:26:bd:17:ad:6d:0a:23:
d6:23:e8:83:eb:c3:9b:73:25:ac:60:a1:e8:42:df:
ff:16:50:20:f2:a1:42:b9:c4:f9:2c:30:13:bf:b4:
57:aa:91:89:d5:bc:9e:11:30:cf:c2:54:6b:4d:d5:
bc:73:67:59:20:a9:93:60:cc:2d:ab:33:9e:6a:25:
19:cb:52:02:e4:bd:49:cc:e2:59:40:4e:a3:ee:30:
de:00:f4:56:a7:7a:95:fa:98:b5:b3:12:ca:27:0c:
ff:87:86:48:41:9b:8a:b3:23:84:4b:88:a3:a8:18:
34:e1:d0:83:15:0e:58:25:67:be:d5:f0:be:c4:26:
32:bb:eb:58:66:4a:fe:14:05:b7:f3:e3:8c:05:c6:
5b:6d:74:0b:fb:11:ed:95:cc:a6:a0:ca:ef:c8:f3:
61:8b:75:62:d2:fd:50:6f:67:57:52:9c:66:ce:11:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2C:7D:03:B6:B1:AE:34:85:CF:52:0E:71:20:AE:49:EA:16:9E:9F
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c6:4e:1b:24:a6:d4:8c:48:62:5d:de:a7:fd:96:0a:bc:b0:
52:c8:a7:4b:ed:3e:fa:b3:b0:31:ca:3d:4b:3b:0b:1c:df:e5:
c3:6b:2a:32:03:5a:25:3a:68:03:7f:1a:02:09:67:c4:cb:eb:
82:31:59:1a:9b:73:94:f4:8a:35:bb:86:48:0b:76:a9:52:df:
26:6b:86:c0:04:59:ae:98:83:bf:ee:56:63:fd:68:7c:aa:af:
4a:77:ef:eb:da:9e:e9:55:4b:ad:13:88:dc:30:76:38:61:51:
93:28:fc:46:33:13:ca:8a:7f:4a:85:12:ff:54:b8:d2:8c:59:
2e:1f:aa:61:1b:ac:a2:54:15:30:8c:3e:c5:f8:7f:27:03:03:
2e:c2:29:cf:ec:36:d1:bf:8c:70:00:5f:ad:27:2f:a8:1b:f8:
c9:78:bd:2a:ba:e8:39:b4:21:00:1a:bb:96:8c:16:21:b6:f2:
41:60:6d:07:c6:62:fc:6b:ce:da:03:c5:77:08:2f:20:6a:31:
a6:d2:93:90:4a:62:6f:6a:07:37:08:b5:91:f2:04:77:ca:15:
84:18:d8:51:7b:f0:5c:7d:df:37:ce:3b:db:3d:d3:eb:99:d4:
f6:14:83:42:cd:bd:7b:af:e6:2c:f0:15:16:74:9c:2a:66:d7:
9d:e4:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:11:29 2025 by rpki-client