Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File: yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier: KrxvTbommA1ixf2qezF8388joOwbpPWv40PWNrFgvkc=
Subject key identifier: 8A:77:7B:66:AB:BC:16:4B:EB:F3:1F:F6:05:F9:23:B4:49:97:CB:F5
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial: 019921E78D496A9988C107EA299B2E092308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number: 029D
Signing time: Sun 07 Sep 2025 02:00:47 +0000
Manifest this update: Sun 07 Sep 2025 02:00:47 +0000
Manifest next update: Mon 08 Sep 2025 02:00:47 +0000
Files and hashes: 1: kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa (hash: t72IL0Bu4xhSTiCzxaWI7CqqsPyLBuuMnaHiD42pbD4=)
2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: SVSTuhU+GXJ2MVs+/P38+A8feTAxuj4+xa0/N2hvu4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:8d:49:6a:99:88:c1:07:ea:29:9b:2e:09:23:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
Validity
Not Before: Sep 7 02:00:47 2025 GMT
Not After : Sep 8 02:00:47 2025 GMT
Subject: CN=8a777b66abbc164bebf31ff605f923b44997cbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:5d:e7:d0:72:71:4e:95:b8:29:37:5e:32:
bb:d2:60:ef:5f:5a:56:6f:61:23:8b:57:de:98:24:
08:27:5c:6e:f3:2a:3f:f6:3d:bf:b2:43:13:43:ca:
51:ed:0e:b3:b7:62:c4:42:14:a6:b7:bd:08:00:bb:
79:8c:3a:93:c9:60:13:47:dc:a2:c7:d1:c3:bc:ef:
8e:64:a0:09:2f:75:47:94:6c:76:0d:80:76:7e:ca:
c6:c1:b1:58:19:49:19:b4:0a:1a:08:b8:fd:9b:09:
37:bb:2d:c2:23:1a:15:c5:a5:21:8d:59:18:e6:e0:
16:34:1d:e8:2c:82:a7:a7:21:18:a1:d1:45:e6:ee:
95:c7:99:df:07:d5:34:df:b8:4c:7f:c8:b9:4f:dc:
01:07:64:d4:f1:24:58:fb:34:94:05:76:28:bf:7c:
d4:36:1c:02:0e:f4:64:8e:f2:d7:2d:45:27:9c:47:
47:a8:70:52:94:04:41:03:5a:c0:5b:8f:e7:12:e1:
ac:18:54:50:91:e7:69:ee:18:99:ae:1b:11:16:2a:
94:68:ee:a7:86:12:e5:5e:66:47:67:58:0d:a7:17:
22:c5:1b:14:4c:e4:bb:52:86:fc:f0:4d:87:ed:86:
03:c5:8e:cd:af:7e:d3:8d:8d:fa:82:72:e7:e2:8d:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:7B:66:AB:BC:16:4B:EB:F3:1F:F6:05:F9:23:B4:49:97:CB:F5
X509v3 Authority Key Identifier:
keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:cd:cb:40:63:9b:0a:3d:a5:d8:09:81:97:a4:38:ab:df:94:
bd:29:f2:00:45:a5:7a:1b:49:ce:66:6b:a4:3a:ce:b0:d6:1b:
18:5b:fb:48:62:ff:e2:6b:ef:17:9b:bd:31:b3:79:ab:ae:44:
6b:b6:8a:ac:a0:2f:9d:24:66:88:5e:36:00:a7:d3:47:fb:0b:
c6:20:d7:d1:f2:43:78:e5:84:d9:65:a2:05:8e:1e:e6:ae:09:
8e:89:b1:33:78:26:f6:bf:e6:fe:89:7d:3c:f3:eb:4a:4b:22:
20:fe:bf:bd:c0:d2:25:ad:7d:4c:7b:bf:d1:b0:2d:c0:31:e0:
9d:f9:83:82:47:f4:08:c2:22:9b:f7:0c:01:5c:74:a2:dc:9f:
59:54:7d:cf:74:5e:27:81:0d:53:59:63:94:a1:4e:cc:e3:98:
60:13:35:30:5f:b8:74:d2:e2:b0:64:b0:ee:1d:a3:61:2a:4d:
38:69:81:1a:31:95:b3:d8:20:c0:e9:79:29:d5:86:4a:96:40:
2a:c4:e3:2b:fa:45:35:c7:a6:86:64:f0:74:f0:53:86:e1:d3:
3d:d7:de:3b:f2:6e:a0:66:a4:4d:f6:78:49:b2:2f:94:80:43:
32:e0:05:14:55:bb:b6:19:8a:38:80:d4:92:9b:b8:ab:75:12:
8f:05:ca:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:04 2025 by rpki-client