Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier: PXbqsUm46tYnJDvzqABH8KBs0T4GhIveMeQTF8p029U=
Subject key identifier: 43:EA:02:EF:F7:AC:81:B8:9E:07:AC:30:34:39:CB:76:BF:65:1C:2F
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 0199180AA07F692AD06729E84A26F7B14414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number: 0AC5
Signing time: Fri 05 Sep 2025 04:02:53 +0000
Manifest this update: Fri 05 Sep 2025 04:02:53 +0000
Manifest next update: Sat 06 Sep 2025 04:02:53 +0000
Files and hashes: 1: CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa (hash: OdCH0xAebcoZtMG/wZGi9eDKxyAg95m1InonEHGGddU=)
2: ZevzjSVvulMbqdJtY8B4bnQMQ18.roa (hash: W1po1ozIsux5yOEXy/FIuleWTHBIh+Vuq+plxlxVu8s=)
3: _xVJ1hQmic9FLrcgVmh-KAZfgtA.roa (hash: psme/h2vzp67q25AbH+m68R73Xe8GmTvYaqc5PS4Y/k=)
4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: G4ApEmnlHe02/MnkIJ09xcEex93zWe2gVmWFgQ50hd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:a0:7f:69:2a:d0:67:29:e8:4a:26:f7:b1:44:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: Sep 5 04:02:53 2025 GMT
Not After : Sep 6 04:02:53 2025 GMT
Subject: CN=43ea02eff7ac81b89e07ac303439cb76bf651c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:bc:4d:de:c1:ca:7b:08:f5:b6:ce:09:c6:
a5:2c:20:49:cf:0a:ef:df:5d:da:ee:30:45:23:e8:
1d:3f:0e:4b:2c:77:94:c3:63:05:a1:61:5a:ca:55:
6f:f0:20:11:93:cf:73:35:8d:6c:e3:15:0e:81:0d:
bd:b3:7c:ab:62:fc:d6:47:2d:4c:8c:12:82:94:d0:
8c:7a:c7:2e:07:4c:66:b3:7e:ba:e7:5b:34:9d:72:
54:1e:a1:16:3c:0f:ea:d6:32:04:a6:9f:20:e4:10:
15:52:77:d3:d1:f3:40:a0:e7:d4:77:f1:6e:81:0b:
85:91:67:49:af:00:32:3a:6c:fe:a4:12:6b:a1:55:
37:ad:a5:5e:0a:84:12:e9:e6:a1:f2:9b:71:2c:08:
f2:cb:07:62:f4:c1:7d:a6:fa:d4:17:b0:38:39:4b:
74:04:55:31:37:0d:d1:5e:b2:25:ce:6f:4c:e3:8d:
a2:81:76:4a:a1:e9:41:85:08:85:74:bd:68:d9:41:
f5:92:bd:75:c3:b5:71:4f:03:94:5b:6e:c7:dd:1c:
29:3e:7a:67:8f:f2:78:04:7a:7d:d9:4b:00:c9:32:
ea:00:66:cd:20:db:09:bb:0a:ac:96:6a:e3:3c:81:
0c:8a:68:85:72:ac:fd:ef:81:c9:eb:aa:7b:28:73:
7c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EA:02:EF:F7:AC:81:B8:9E:07:AC:30:34:39:CB:76:BF:65:1C:2F
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:57:de:52:69:87:27:12:79:4f:43:89:f0:d3:1b:30:37:
73:48:28:f1:35:f5:1d:ca:db:d9:a4:e0:f3:64:99:15:c3:79:
e4:6a:60:74:96:ba:bf:ba:5d:60:64:21:1d:16:1e:af:76:73:
a2:cf:97:cb:c0:29:77:38:ad:70:39:90:d6:8a:45:9c:66:2b:
68:39:08:b4:a7:5c:b0:46:76:e6:f4:10:6e:b5:02:cd:42:94:
9e:4c:81:13:7a:df:5a:63:0e:48:59:f8:50:06:d3:4b:d5:31:
62:57:cc:97:04:02:86:6e:0c:50:aa:d6:c2:50:4c:09:b3:bf:
57:3c:75:a3:6e:7c:bb:57:03:e1:2e:8e:d3:b9:69:32:8d:3f:
aa:b5:e1:c6:fb:b8:45:9d:8f:9d:d4:9f:91:e9:a9:15:7c:02:
f8:79:71:65:e8:c4:ec:0b:86:6d:79:f5:4c:28:4b:6a:4a:fd:
24:50:56:fe:cb:50:d2:14:97:b9:6d:44:cb:10:4d:76:50:6a:
93:14:fd:31:8f:36:5d:a0:1a:7a:ea:02:19:8c:73:fc:5e:a6:
89:36:10:51:9a:36:e6:82:6d:86:7d:cb:2b:ca:12:5b:ea:f0:
11:0e:ae:f0:ec:f6:49:d8:22:11:36:b0:ae:7f:c0:e1:49:7e:
55:06:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:23 2025 by rpki-client