Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File: yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier: v2eRxtJnNgOJBGYB/UnMHMG6iTzo2y0EZFKAoHBWUio=
Subject key identifier: BF:85:B7:12:49:8E:43:FE:69:75:EF:6C:D4:CF:E3:DF:39:1B:B7:64
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 01994851CDEF4F5F659D196725ADED2111BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number: 1688
Signing time: Sun 14 Sep 2025 13:02:24 +0000
Manifest this update: Sun 14 Sep 2025 13:02:24 +0000
Manifest next update: Mon 15 Sep 2025 13:02:24 +0000
Files and hashes: 1: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (hash: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=)
2: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (hash: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=)
3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: CYgQLOSDTl9adOtw6j/rFiRjhOBFy/EXsNj0hzFt58k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 13:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:48:51:cd:ef:4f:5f:65:9d:19:67:25:ad:ed:21:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Sep 14 13:02:24 2025 GMT
Not After : Sep 15 13:02:24 2025 GMT
Subject: CN=bf85b712498e43fe6975ef6cd4cfe3df391bb764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:c2:c7:a1:76:f9:00:24:b5:4c:33:d9:3d:
1d:38:73:2c:ac:18:ed:11:05:d0:c2:0d:d3:3b:68:
02:c6:50:7c:87:fb:c0:fd:b9:4b:e7:75:42:62:50:
85:a5:90:1d:bd:bf:00:60:42:71:0d:50:7d:f6:fc:
20:05:67:90:6a:66:b8:43:a3:c1:fe:d4:69:17:f0:
57:a3:38:d3:8c:14:15:73:4b:d3:ed:1b:e6:33:f6:
4d:32:1a:37:e6:c3:c9:d5:0b:b4:28:a0:f9:75:34:
3f:e2:45:c0:0d:b3:0e:d7:c4:dd:b2:00:38:e4:96:
d2:4a:9f:bd:60:bf:f8:64:4c:20:e1:4a:ba:fb:74:
8b:88:79:2e:7e:7a:05:4a:12:b3:a6:ee:70:43:1b:
b7:dd:5a:55:08:73:13:e9:2f:fe:bc:b6:25:dc:8e:
3a:4b:06:80:72:c9:23:a6:2b:46:da:63:7c:2f:1e:
3d:7f:d5:e2:c8:e4:85:cc:b8:48:24:b2:ca:14:71:
57:8a:07:c0:36:23:0e:e1:a0:ef:ce:38:c5:17:93:
1f:8f:1a:75:1c:d7:b2:65:e8:f4:7a:67:41:0d:63:
b4:cc:e2:00:c1:8b:14:a0:73:bd:3f:9d:77:ce:44:
20:b4:e6:5b:1b:ad:7a:9e:fa:bc:81:c0:eb:3a:f7:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:85:B7:12:49:8E:43:FE:69:75:EF:6C:D4:CF:E3:DF:39:1B:B7:64
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:82:f3:68:d1:3f:79:a4:8d:e4:02:dd:0e:7a:63:54:70:36:
9f:c5:6e:42:92:85:52:f4:f1:7e:59:35:6e:17:2a:77:b0:a1:
df:b3:b8:72:af:35:fe:df:ce:da:b8:60:0a:36:2c:7b:f2:eb:
f5:46:79:1d:7c:68:e8:46:f8:42:48:f8:2e:fb:8a:25:ea:62:
96:6f:66:c4:50:26:8b:0b:da:25:35:e7:89:2c:db:f1:e2:2b:
aa:9e:27:3c:09:18:fa:61:58:f6:03:c4:85:9f:c3:7b:75:11:
fb:85:13:cb:00:2f:bf:d1:c6:ca:25:3a:0b:e2:29:2e:0d:e7:
86:f0:26:78:43:36:c6:aa:1f:70:95:e2:45:d1:f7:a4:df:9c:
01:b3:90:a4:63:ec:43:e8:2c:29:94:4d:c1:1e:17:59:5c:c9:
9d:9a:d1:7e:1d:ed:85:02:27:9c:45:42:75:8f:92:6d:76:9a:
2d:51:ac:e6:a9:ab:fe:62:33:f5:36:49:08:aa:b8:4c:0f:3d:
fb:93:2e:67:d1:c8:20:e0:00:20:76:b2:98:f4:82:1f:97:e4:
c5:eb:2e:fd:71:3d:b4:e2:0f:07:ef:b3:ee:17:2c:58:8e:c6:
03:04:5f:6a:9e:0c:cb:21:ba:cb:0f:c0:3e:d8:b9:e9:6f:d2:
67:05:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 17:44:05 2025 by rpki-client