
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: dOe1R9+0gfQliamaBk19SrXwKr0sJeO1psDFH82qYJU=
Subject key identifier: 04:60:D6:D9:D6:64:F7:86:C5:F6:95:B5:DE:46:24:46:90:DE:B4:66
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 019923D65E95566AF7ACEF07E14EE2A7F3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 01E2
Signing time: Sun 07 Sep 2025 11:01:15 +0000
Manifest this update: Sun 07 Sep 2025 11:01:15 +0000
Manifest next update: Mon 08 Sep 2025 11:01:15 +0000
Files and hashes: 1: dlzqaHBNCax7AH7cKOuLGUROmhc.roa (hash: V0WC0WTCXqpzuDi1+bDioL4WjgyLz03d8dARSLHOma8=)
2: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: q8ugVo7435KvFd1ebZ82MHFA6mBHzWrHNDfvuHFBADE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:5e:95:56:6a:f7:ac:ef:07:e1:4e:e2:a7:f3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Sep 7 11:01:15 2025 GMT
Not After : Sep 8 11:01:15 2025 GMT
Subject: CN=0460d6d9d664f786c5f695b5de46244690deb466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:16:26:ab:10:1f:22:62:fc:3f:dd:c1:fb:
50:2e:ee:e6:54:c6:e8:9b:e8:3c:4e:19:c7:35:3a:
59:7f:e3:20:8a:51:c9:c5:67:af:55:cd:82:71:a4:
2e:b7:48:eb:0e:d6:90:23:10:a4:0f:21:04:ee:8e:
e5:7c:64:7b:a1:fa:4a:d0:ca:d6:54:dc:18:ff:e8:
7e:01:6a:44:65:2b:f0:19:78:69:95:d4:1b:1b:cc:
86:46:b9:55:93:69:14:6a:da:58:27:c6:d6:a6:38:
31:8e:e8:04:53:3a:b1:b1:f3:5e:4c:6d:d7:50:3b:
e4:5d:ea:1b:dc:f8:2e:b6:48:8d:5e:c7:1e:72:68:
24:da:d4:a8:fd:5c:ff:18:90:9c:7f:c9:cf:00:a5:
66:68:d5:b1:d9:f2:be:fc:9d:ae:af:f4:43:7d:fa:
1c:5e:ca:46:63:d3:2d:e8:1f:6b:2e:1f:03:05:ff:
23:ce:00:93:00:1d:57:f5:be:0d:69:1e:05:6e:05:
56:22:41:d1:5c:48:ab:63:13:cb:a4:fe:4b:ea:50:
75:20:c3:bc:e4:11:75:9f:27:d5:17:1f:d5:47:f0:
60:65:b6:33:9d:08:04:54:31:e6:90:13:23:46:84:
e1:5e:e0:7e:b1:9e:45:58:fd:f3:a4:24:d8:bb:da:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:60:D6:D9:D6:64:F7:86:C5:F6:95:B5:DE:46:24:46:90:DE:B4:66
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9e:25:8d:02:df:df:31:3e:97:60:ca:de:f9:2e:40:6f:d2:
61:bf:2b:24:bd:b5:e2:16:67:20:2f:e3:cd:70:02:22:93:0e:
d3:44:7a:28:c4:f3:3d:45:34:0f:aa:d0:bc:ab:e7:59:31:39:
88:a6:d5:bd:b4:39:88:6a:db:ee:50:81:62:65:fb:4c:63:2b:
b8:fc:a5:5b:7a:4a:ba:52:ae:94:8b:f8:78:9e:fc:dc:9c:3e:
b2:14:51:1f:4e:6f:e8:38:1f:3b:c9:cd:63:33:16:ef:73:72:
f3:8e:66:1f:03:6a:16:e2:97:8e:1d:c5:6b:2d:d7:bf:94:15:
7b:df:22:83:f8:c8:fb:33:93:84:88:b9:6a:85:0c:6c:d4:14:
0a:c9:b2:6e:1b:51:31:14:61:db:51:8b:7b:bf:da:86:e4:29:
29:d3:7d:a1:4c:5f:66:e3:9c:42:82:f1:6a:a6:a5:b9:bb:34:
0f:86:ab:7a:9b:6b:c4:6e:36:81:74:c2:c4:c3:91:77:a7:9f:
94:23:5d:45:0e:07:de:d5:e8:bb:84:f5:dd:51:a4:19:6b:0e:
cf:f0:6c:f1:f2:41:1d:cc:46:24:b5:06:0a:1e:3b:ec:b4:8c:
88:9a:bd:d0:49:0d:ff:1b:11:89:22:8d:40:a5:e8:db:17:38:
d3:cd:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:44 2025 by rpki-client