Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: NsZ3WZo8JzGHp/+++uj8Cw4AfAqUR+Z+499bSO8Cojw=
Subject key identifier: 4A:15:A3:D3:9F:E4:53:13:1D:B9:8F:3A:79:E6:AC:F9:DD:CC:EA:93
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019939151C446072D663F2FA78C315B29A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 0F63
Signing time: Thu 11 Sep 2025 14:01:48 +0000
Manifest this update: Thu 11 Sep 2025 14:01:48 +0000
Manifest next update: Fri 12 Sep 2025 14:01:48 +0000
Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=)
2: OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa (hash: Nbt+Vb6iqoAZa8JSy2lqdMELR5I1GGwPOjEC79BMqrA=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: zGAXyETEVR3Bnd6skpiJ2qluoGT3r+cMTfbk3+FKgoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:15:1c:44:60:72:d6:63:f2:fa:78:c3:15:b2:9a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Sep 11 14:01:48 2025 GMT
Not After : Sep 12 14:01:48 2025 GMT
Subject: CN=4a15a3d39fe453131db98f3a79e6acf9ddccea93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7d:eb:55:8f:e0:c3:71:00:25:38:8d:b9:6e:
6b:b5:aa:17:be:76:7e:6b:8d:ff:99:84:f8:b0:96:
b4:d8:25:7d:f7:6d:84:c9:fc:65:70:81:c1:c9:2d:
2a:64:8a:45:72:fd:b7:72:d4:97:f9:25:8a:b1:bb:
fc:09:e5:9e:47:1d:c5:87:69:fc:b0:b8:90:f6:54:
d5:1b:0e:f4:fb:07:48:c0:06:44:22:34:ce:8f:96:
30:59:b7:d2:96:59:d0:c2:72:0e:fd:43:80:5d:80:
d8:7a:81:ba:f3:b5:9d:71:8f:a0:7e:98:46:9e:67:
52:87:54:02:d4:33:de:12:39:ac:97:4a:06:a8:62:
5b:b5:35:70:22:15:11:2a:fb:cf:3d:10:8d:12:e0:
1b:4b:f1:a7:1f:e8:5d:6d:b7:c8:ce:7c:a0:e8:d2:
e7:e9:fc:21:34:c8:20:90:a3:2d:c1:b5:93:10:70:
0d:c0:36:ae:2c:46:cc:5c:58:56:c3:0f:c2:70:b1:
d0:d7:0f:02:9d:0e:2d:47:7f:83:8f:e2:8e:5a:da:
29:2b:3a:10:d3:51:bc:62:66:7d:83:1a:10:fc:b1:
13:f3:a0:8b:6f:b5:3a:db:ca:7d:01:a2:ea:cd:12:
42:3e:59:4d:1e:f4:b1:be:bf:56:df:41:7b:6d:db:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:15:A3:D3:9F:E4:53:13:1D:B9:8F:3A:79:E6:AC:F9:DD:CC:EA:93
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d6:5f:e9:ba:f5:e6:55:9a:65:91:a4:e3:42:20:f9:14:62:
1a:f8:d4:ec:79:fc:a0:82:f0:1f:e9:cd:c9:aa:6f:2f:08:a5:
94:d7:45:e3:82:83:78:36:8b:68:2b:bd:a3:6c:55:26:45:1e:
1a:5a:24:5e:c1:15:e6:bc:ea:d2:ac:4e:c1:7b:79:dd:35:e5:
72:2f:c7:33:1d:44:e1:b3:56:7b:86:24:52:1c:3f:26:78:31:
34:e1:5a:14:42:77:9f:82:59:d5:56:ec:9d:08:1e:83:95:b7:
eb:a0:67:f8:9e:37:fa:c7:c8:43:0e:c3:92:81:2c:21:9c:e7:
24:8d:d3:ae:8e:44:ce:6a:0c:ad:bf:c1:e0:e9:43:be:85:f8:
a4:f0:9e:95:2a:9c:0e:ee:63:c7:e5:7c:50:58:a3:8a:3a:fc:
b3:0d:52:e4:d2:2e:77:66:52:76:a6:47:c9:ca:a1:be:49:47:
dd:c9:a8:8a:3d:db:2f:b7:f2:71:9d:bf:87:0f:c3:92:25:50:
ad:a9:3f:0d:09:09:49:85:d4:77:8f:a3:9f:d4:c4:c2:af:e2:
b8:94:6e:d8:e2:9d:24:d7:c0:9e:0f:b2:63:46:5d:4a:a6:0c:
bb:d2:48:cc:9b:5b:61:5d:54:93:ed:8f:0d:f2:37:fa:17:0c:
8b:30:1d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 20:40:10 2025 by rpki-client