Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier: Dzzu+bZjxjY8QnvPxUFXSeguy1ZfnRLbY3RGPauUtYs=
Subject key identifier: 87:B1:C0:30:F5:91:31:C4:28:DB:96:B3:0D:DA:38:9C:BA:37:D3:0F
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial: 0199221F48482C823C3AC088526AADD0DC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number: 0917
Signing time: Sun 07 Sep 2025 03:01:39 +0000
Manifest this update: Sun 07 Sep 2025 03:01:39 +0000
Manifest next update: Mon 08 Sep 2025 03:01:39 +0000
Files and hashes: 1: COcUW0x5kxM0ZoYaE6bjH_ilI5I.roa (hash: DiDBhNFDOT29doleyEuXM5Xz1UWaH+5+crJRRQCdBnI=)
2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: ELSBByC74DQHs5DMCklBCXoq/WpaK4aAKlVsfNuV0Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:48:48:2c:82:3c:3a:c0:88:52:6a:ad:d0:dc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
Validity
Not Before: Sep 7 03:01:39 2025 GMT
Not After : Sep 8 03:01:39 2025 GMT
Subject: CN=87b1c030f59131c428db96b30dda389cba37d30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:85:b3:fe:6f:d3:44:9f:58:f1:94:06:27:c1:
b1:e7:d7:98:f5:2d:ab:b6:17:21:76:03:6a:67:e7:
bc:28:48:88:71:56:f9:33:46:1e:14:0e:e9:63:af:
99:56:b2:ff:cb:47:17:b1:03:9b:10:cc:cc:d8:8f:
01:b4:70:e0:ae:f3:f3:ce:71:16:d9:96:09:eb:49:
87:6a:9f:d9:2d:fc:c0:8b:df:07:3b:80:f0:d6:76:
2c:59:d9:ba:3d:e6:fc:63:8b:cf:32:6c:ef:43:32:
b0:17:bf:99:61:30:90:37:f3:94:0d:30:53:f9:14:
17:92:94:20:c7:3b:8e:b8:d4:9f:ca:ef:de:ab:00:
0b:16:d3:99:75:0a:95:40:36:20:62:59:85:be:76:
53:36:8a:5d:56:24:ab:90:55:6e:c6:74:3d:68:b9:
20:b2:a3:35:0d:a4:5c:ce:24:5e:e6:f5:3e:53:e2:
a4:17:88:f8:e7:84:3f:9b:84:39:c4:c3:84:45:6c:
f1:96:b8:8e:52:8c:a5:b4:a3:67:70:f1:4b:cd:c5:
a2:8e:c9:87:61:eb:f1:b7:00:ac:9a:72:01:72:b6:
4c:2a:ea:b0:0b:fe:5a:a7:1e:ad:c9:0e:94:dc:e4:
f1:cc:22:5a:70:3c:60:93:ad:89:38:6e:a4:6f:77:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B1:C0:30:F5:91:31:C4:28:DB:96:B3:0D:DA:38:9C:BA:37:D3:0F
X509v3 Authority Key Identifier:
keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:21:7d:03:21:1d:b0:3a:05:df:f4:25:34:d9:c4:bb:89:74:
e4:29:88:37:e1:fd:a6:40:a1:65:e4:eb:5d:fc:6f:bc:64:fb:
28:92:40:6a:52:bb:e1:16:fc:f5:28:d9:09:1a:6b:7c:83:b5:
41:2f:8d:b3:82:37:86:87:07:d9:ce:aa:3b:3c:02:39:6a:f2:
c7:6a:1b:36:0e:e3:b7:3a:79:8b:3f:9e:74:31:66:06:4a:cb:
2f:d2:17:e9:ea:1f:e9:85:78:a5:89:7b:f1:e8:45:e2:6c:45:
de:88:c0:01:34:78:14:ce:0c:7e:9b:21:3a:84:b6:14:24:f6:
97:73:2f:09:66:54:ed:b7:86:b5:34:79:47:79:ab:85:66:51:
b1:01:33:5f:9f:f1:88:57:d5:75:cb:20:55:2e:8c:31:5d:de:
a3:b0:37:48:92:31:8f:7d:5d:49:da:a5:0a:6c:d5:13:c2:99:
01:2b:52:4a:eb:ab:e2:ac:b8:19:16:a1:15:fe:5c:8d:97:67:
83:11:e3:29:e9:26:ca:1b:b3:3d:00:dc:b4:e0:89:ce:df:fb:
06:be:ba:a3:8d:fa:4a:12:4c:4c:57:9f:eb:84:89:cd:1e:66:
64:13:89:ed:f3:ed:9f:3f:4a:70:d1:57:b5:6c:cb:29:31:19:
60:cf:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:59 2025 by rpki-client