Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: 2w4HuZ1XghaLDtI36TVrUGpC/2xW75fcjFFZJUEFWkM=
Subject key identifier: 62:BA:07:40:78:CB:72:B4:69:C1:03:E2:E1:09:CA:8D:82:A2:BA:98
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 019934925D57304340D50B4F6552FC84942D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 04CA
Signing time: Wed 10 Sep 2025 17:00:31 +0000
Manifest this update: Wed 10 Sep 2025 17:00:31 +0000
Manifest next update: Thu 11 Sep 2025 17:00:31 +0000
Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: rXt006WE23Etd+CVe9BFs+HJ4VwdGZpH3lMfAKukxF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:5d:57:30:43:40:d5:0b:4f:65:52:fc:84:94:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Sep 10 17:00:31 2025 GMT
Not After : Sep 11 17:00:31 2025 GMT
Subject: CN=62ba074078cb72b469c103e2e109ca8d82a2ba98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:11:30:33:51:09:ec:72:53:63:e1:cc:c1:
5e:8e:29:da:dc:67:88:f6:f7:f4:f5:30:ed:40:20:
ea:3f:13:1b:49:e8:61:d4:57:5c:bc:03:71:a9:41:
3b:82:4f:d7:fa:9e:1d:f3:29:ff:8b:ed:82:9a:dc:
bb:85:d3:b6:dc:1c:d8:a9:33:cb:31:44:d3:47:83:
b1:af:97:73:0c:86:3c:28:69:42:56:79:ce:52:45:
55:06:f5:a6:88:09:b0:d1:3f:08:e7:e8:d4:d3:f1:
9c:28:a2:46:62:8a:27:55:16:ce:5b:0b:d6:f1:8d:
ac:85:37:93:c3:76:a2:66:3d:eb:ce:2a:b5:29:b9:
87:85:1c:63:da:cf:cc:97:be:72:61:ec:b5:07:03:
59:16:eb:a8:8d:fe:c1:fc:64:c0:8b:52:f8:a2:c1:
45:33:8c:a4:45:4e:b8:73:a2:54:11:32:26:4c:d3:
61:3c:9f:40:79:67:27:0b:52:25:40:2d:2f:45:a2:
dd:76:48:d5:88:81:ae:b2:a6:00:91:f4:3b:33:91:
7d:f4:1a:6f:e9:85:1f:9c:44:75:15:54:3c:89:76:
1c:bc:2c:0e:f8:f1:1b:4b:25:86:5b:f9:d3:32:bb:
45:01:ad:b1:04:c0:be:31:1b:05:a2:cc:5c:c7:75:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BA:07:40:78:CB:72:B4:69:C1:03:E2:E1:09:CA:8D:82:A2:BA:98
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:77:50:05:ff:72:1f:2d:aa:dd:d0:ae:41:8b:9e:ad:e7:b7:
1a:1b:d1:ee:29:79:22:aa:3c:27:8f:26:1a:9b:1e:5b:a0:b6:
4f:18:9b:3a:df:9e:4c:2b:43:fd:16:d5:0d:68:8f:1a:c1:d7:
af:8b:3c:9e:67:a3:f3:d1:41:59:bb:c3:8e:9c:09:90:70:b5:
c4:08:3d:74:ba:ba:af:8e:6e:07:a0:6f:6c:7e:59:56:46:79:
b0:92:8a:19:71:dd:56:d0:05:30:92:d7:a0:7a:47:29:27:e2:
b4:4b:1d:e1:eb:6a:fc:28:e5:9f:43:cd:0f:b4:dd:aa:87:2e:
08:c3:36:7d:eb:2b:cf:b9:02:ff:51:ee:1e:63:88:d6:80:38:
37:4f:76:71:c5:c0:86:83:da:27:f8:7a:f5:36:45:a4:c1:47:
2e:82:d6:6c:38:8e:d9:36:93:9d:96:bf:f2:e2:77:e3:ef:17:
7d:25:4c:2a:ef:4a:b2:30:c6:3b:ad:d5:a4:09:01:ec:75:19:
e4:56:f6:50:a6:6b:b6:9d:11:ab:17:57:66:57:c4:11:a4:43:
68:92:c7:3e:43:ff:c8:00:43:f1:a9:66:ec:fc:2d:dc:bc:8e:
d9:4a:74:5d:d9:8d:ab:cc:39:2f:f3:98:22:9f:23:72:44:2c:
bb:24:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:16:26 2025 by rpki-client