Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: hyWyGPzEoDIKWHRYZp+a5NI0EDYafjysfETHawqqSuk=
Subject key identifier: 55:72:E7:55:39:BD:A3:6B:27:B6:2E:E1:38:5B:82:5F:BD:D4:EE:A4
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 0199239FF7122230E776402A4B972285D100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 67
Signing time: Sun 07 Sep 2025 10:01:49 +0000
Manifest this update: Sun 07 Sep 2025 10:01:49 +0000
Manifest next update: Mon 08 Sep 2025 10:01:49 +0000
Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: FgRjHfmqvBAORWOWc/gwB6fTmE9IKOmanX1VqoeCxS4=)
2: ef5i4gFsUjQtA9jIFWXZmLBsI5w.roa (hash: nHPFZXhPCy6Yr/I1NdWh8sLmeUGTngr7MiMVHJxQNuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:f7:12:22:30:e7:76:40:2a:4b:97:22:85:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Sep 7 10:01:49 2025 GMT
Not After : Sep 8 10:01:49 2025 GMT
Subject: CN=5572e75539bda36b27b62ee1385b825fbdd4eea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:7d:c5:ad:81:b3:99:7a:c0:da:ce:94:26:
a6:7f:fe:65:e3:9a:2c:05:aa:e6:ad:ee:8e:f1:12:
7f:eb:30:a1:0f:1a:ed:69:27:e6:4d:d3:09:8f:f2:
84:e8:c3:68:6e:83:f0:f0:fb:bb:fa:b3:f4:54:a8:
fb:3b:73:c6:89:a1:8f:b5:c2:a6:98:0b:33:dd:d2:
c1:09:73:35:c4:2a:a3:32:f9:9a:23:c4:9d:19:9e:
29:67:e6:cb:19:23:e6:15:c1:61:da:ea:36:ea:93:
1d:74:8b:5e:dc:f3:48:06:be:b8:e9:a0:18:77:93:
91:77:86:80:3d:b1:2a:24:f6:ff:57:f5:3e:02:b9:
e2:32:88:aa:2d:e1:6f:1c:52:97:8c:25:1e:c0:dc:
a8:4d:2f:3d:84:c5:09:80:8d:6f:25:22:d5:b5:7b:
48:60:94:cf:6d:0c:ff:c7:de:ee:35:12:f9:6e:54:
2e:56:be:3b:83:19:e7:78:4c:a6:55:7e:2b:5e:d5:
12:43:69:d1:76:17:df:51:ba:d7:e0:99:0a:c3:ce:
51:a3:1d:a7:ac:88:1a:b6:46:30:96:c2:2c:69:e9:
dc:4c:5b:48:75:70:eb:5e:fd:1d:6d:11:16:f1:75:
45:fe:95:96:9f:28:d5:c5:3d:25:0b:e1:02:1a:70:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:E7:55:39:BD:A3:6B:27:B6:2E:E1:38:5B:82:5F:BD:D4:EE:A4
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a3:2d:79:24:16:4e:66:eb:bb:a7:8e:6e:57:12:02:68:d2:
3b:a2:7b:fe:5a:20:b7:6f:36:a2:22:ce:cd:73:db:d8:9a:1f:
68:65:45:23:14:33:5f:1c:24:49:93:86:fe:f9:93:a1:2d:94:
e5:05:57:7b:c2:6a:7e:3a:2e:a3:6f:ba:87:b9:23:c8:0f:6b:
9a:6c:8c:ea:6f:1d:f3:a3:61:8b:87:fc:20:75:91:00:77:bc:
4d:21:1b:54:20:9d:30:d1:96:30:aa:4f:2d:0e:ad:a0:37:ac:
2f:3d:4e:07:51:6e:8c:d5:79:21:95:2d:a8:97:33:5b:1a:55:
c3:df:30:5e:b0:26:a5:35:25:8c:ff:48:0e:83:fb:e8:1f:6e:
19:b9:dc:7a:aa:4c:a3:1d:c1:e8:c4:db:eb:e8:49:6f:63:05:
15:17:3d:43:de:36:cd:48:3c:79:b4:2d:45:4e:11:6b:ac:90:
c1:5e:5b:1f:38:b8:77:a6:3c:a6:7c:bc:4d:71:c6:04:c7:95:
a5:de:eb:e1:22:5b:81:a9:08:dc:7b:59:8b:65:af:84:bd:57:
45:36:f6:fb:5b:b4:ef:ef:75:7d:86:21:9e:f7:57:e9:d9:60:
c7:ce:52:e4:f8:76:e8:99:f5:90:68:49:25:3f:b1:a2:d1:ca:
77:2a:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:01 2025 by rpki-client