Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: 5BOBj+2FmC69B0dPDLWmxIsRmspbRx/W7wzeKS91RCc=
Subject key identifier: 79:B8:99:68:DC:84:C3:2A:08:63:7E:F6:3F:98:41:46:4B:C4:22:9E
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 01992D479E5B68A2CCD83496EC64BD922923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 0E3C
Signing time: Tue 09 Sep 2025 07:01:32 +0000
Manifest this update: Tue 09 Sep 2025 07:01:32 +0000
Manifest next update: Wed 10 Sep 2025 07:01:32 +0000
Files and hashes: 1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: UWU2jhSTwMxW26M5yjF8RtTf1DZmzJVvuAScb2ackuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:47:9e:5b:68:a2:cc:d8:34:96:ec:64:bd:92:29:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Sep 9 07:01:32 2025 GMT
Not After : Sep 10 07:01:32 2025 GMT
Subject: CN=79b89968dc84c32a08637ef63f9841464bc4229e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:86:9d:94:25:15:96:eb:f3:72:87:a5:b8:
37:68:b8:cf:19:ba:8e:16:f1:78:7b:ca:33:33:34:
cc:6f:6e:4d:31:1e:fb:8b:88:73:b5:f3:3b:7e:2e:
2b:74:87:41:f9:a1:e9:2b:0e:30:07:83:13:0f:3d:
fb:f5:bb:5b:1f:69:cb:e7:87:01:f1:b6:2d:85:ae:
f1:dd:77:c4:05:74:38:40:15:f5:f1:5d:02:63:38:
40:19:40:cb:d4:94:fd:cd:e2:c9:3d:5a:54:53:a6:
d2:1d:34:07:71:65:47:e8:bf:bc:c0:98:45:2a:87:
ef:db:99:30:38:db:cd:f3:54:cf:aa:c4:16:d8:db:
c5:03:48:e2:03:45:0b:19:13:1d:09:14:53:54:c4:
28:a1:c0:57:26:c4:86:78:21:8a:f8:db:ac:55:bb:
1f:90:32:f9:a0:00:90:51:c0:a8:65:ab:1c:f4:81:
f1:1b:5f:bc:7b:75:8b:fe:f9:6c:68:cf:15:b2:96:
f3:9c:b3:d7:14:e9:d3:c6:de:1c:d2:c2:89:a4:df:
3c:b1:d9:2e:74:71:bb:0c:df:28:0c:d2:d9:ee:1f:
38:58:98:2e:63:15:d0:d7:98:62:ac:1b:06:78:fc:
0b:d7:7c:4f:3c:c7:bc:67:d8:f6:fc:e7:8e:95:95:
42:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B8:99:68:DC:84:C3:2A:08:63:7E:F6:3F:98:41:46:4B:C4:22:9E
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9e:65:03:4d:9b:cd:de:8a:85:a7:fe:48:00:2d:99:f1:be:
b8:a6:88:f9:af:f8:c5:2b:39:62:12:73:47:29:2b:64:62:dd:
cc:e3:3d:9a:7b:3e:f2:ec:f6:97:28:0d:c6:33:15:eb:d6:f5:
39:9c:54:92:c6:81:83:b2:bf:14:67:11:3e:b0:92:e3:13:83:
12:7d:c4:5d:10:46:e6:07:fc:b3:73:a5:a7:c1:28:9f:bc:42:
1d:87:91:ce:0b:fb:78:59:74:8c:d2:fe:ab:af:3e:36:2c:55:
28:02:ac:be:d2:77:91:10:95:d2:27:29:c8:5b:d8:ce:b4:89:
86:54:5e:37:f2:c4:d7:ed:63:69:5a:24:9d:88:a2:e5:b6:a9:
50:38:10:c5:8f:87:59:e9:51:02:9a:63:32:3c:ed:a4:46:f2:
c4:ee:1d:56:13:fa:03:73:d2:99:e4:83:5b:3f:02:76:ac:94:
59:ca:8e:6f:a4:72:93:fd:3c:61:63:b9:7e:4f:fa:00:68:22:
95:e4:bb:54:11:ad:b1:84:b4:68:19:5e:79:35:04:57:2c:bf:
a1:cc:37:bd:af:4e:d2:f7:2a:55:37:5b:f9:50:66:6d:10:93:
5c:0b:38:7c:63:62:9c:ad:e0:9a:43:85:6d:bf:78:c9:0e:79:
f6:d9:d3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:27:04 2025 by rpki-client