Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
File: YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json)
Hash identifier: UW/HmgzHD0H8C2V9mw3JEfp/PEpmOFHQeC4n+BYm6gE=
Subject key identifier: F9:63:7F:2A:F3:C5:7F:BE:4E:97:C6:55:D6:6F:E8:30:EC:6C:86:8F
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 019921B17EC990523368985068E8A56B7F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 01:01:44 +0000
Manifest this update: Sun 07 Sep 2025 01:01:44 +0000
Manifest next update: Mon 08 Sep 2025 01:01:44 +0000
Files and hashes: 1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=)
2: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: 9xM8BBAyck+mFiZGLbZphZa2UsjJgwg3N8YfC9RbnYo=)
3: n7FqNgB42yMNZn9HsllZdTK6BM4.roa (hash: El5LuNO8gbAy7J9nIaZ/6jvlxDskopE6EQQyObfppsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:7e:c9:90:52:33:68:98:50:68:e8:a5:6b:7f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Sep 7 01:01:44 2025 GMT
Not After : Sep 8 01:01:44 2025 GMT
Subject: CN=f9637f2af3c57fbe4e97c655d66fe830ec6c868f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:35:9f:b8:14:d5:3e:0c:5c:92:8d:ae:66:
1e:f4:b3:75:76:fb:f5:fb:a0:26:69:e3:43:d1:31:
e7:59:81:29:0b:5c:e0:fd:7c:28:91:f9:4e:4a:e0:
6b:66:0a:f8:e2:f0:d6:1c:16:dc:c7:eb:b7:96:90:
0b:98:d0:d9:ce:9e:ea:b4:d3:05:18:48:44:77:a4:
97:1e:34:b5:90:20:f4:2a:50:5d:fc:6c:52:50:72:
38:2b:bb:16:28:4e:b3:ef:c0:31:3c:8b:1e:7d:11:
c6:36:08:b3:70:ef:97:19:f9:6f:d1:5e:5d:29:f5:
c4:d6:6a:a5:1c:46:26:f2:0f:ea:e5:7e:db:73:13:
57:51:d4:15:da:9a:87:96:e6:31:dc:e0:09:ee:79:
eb:33:4c:ff:9f:1d:86:cc:34:13:d5:d5:11:66:cb:
76:7f:ac:ec:33:05:ba:1b:17:ed:4e:83:ae:4d:77:
e7:f9:64:62:e1:05:2b:32:d2:37:4e:a0:a2:1d:99:
e3:60:61:50:4c:5f:31:a0:ea:9a:15:e0:e1:0c:76:
cf:9f:8d:ae:b6:59:02:09:b2:cd:51:25:d4:29:d4:
54:59:b5:b5:98:47:a8:60:b3:3b:5c:9d:03:9d:53:
57:0d:13:72:13:ca:92:3b:2f:41:75:32:f0:70:be:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:7F:2A:F3:C5:7F:BE:4E:97:C6:55:D6:6F:E8:30:EC:6C:86:8F
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:66:c5:e4:e0:28:7e:9e:78:8c:74:ca:7a:9f:9f:30:23:ef:
0a:90:b5:2a:58:49:a3:6d:7f:aa:72:23:6c:ba:8e:90:03:f7:
9a:a7:8d:3d:83:7d:db:c0:77:7d:c4:44:96:ca:6e:ba:bf:d1:
df:a4:fb:10:68:c1:e4:d3:26:e8:20:2d:f4:50:8c:ca:45:cb:
1f:10:58:cd:42:86:83:30:e4:10:f7:5a:6b:3a:bd:f5:a6:fa:
27:8c:20:92:86:33:39:0c:b8:e6:2d:60:20:53:e0:c9:56:66:
bb:a4:40:f8:0f:95:49:89:94:c3:4e:12:76:11:7a:2d:fd:ce:
86:9d:2e:2e:17:b5:14:0c:05:c5:b8:b4:8f:d5:f7:d7:8d:6e:
3b:89:b3:bf:33:9c:8d:22:6b:93:3e:5c:53:7d:87:39:eb:8a:
67:43:fd:14:05:f5:97:e6:0a:da:b8:2c:61:be:2b:ad:ae:5f:
3e:f2:1c:54:22:61:47:10:4a:77:e5:1d:86:16:89:6f:7e:ae:
ed:cd:a6:e8:a8:a4:2d:52:74:50:aa:8d:3d:7a:19:87:fe:11:
53:f8:af:2a:1f:13:93:13:62:09:c8:ac:50:64:11:0a:3d:48:
b2:a5:26:b0:7b:37:80:30:89:01:55:fa:ca:5d:f5:71:dd:38:
51:19:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:10 2025 by rpki-client