Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier: uoh8ITIUtUuGgdbvzPAGvhpVsbMFN6s0Ol6/LsVdZRs=
Subject key identifier: B1:1C:15:AD:05:7E:A4:75:39:EF:DE:72:D6:E2:EE:C3:7E:1A:53:8D
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 0199228C4F6FEF0401B35C1AA84200B55BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number: 0853
Signing time: Sun 07 Sep 2025 05:00:44 +0000
Manifest this update: Sun 07 Sep 2025 05:00:44 +0000
Manifest next update: Mon 08 Sep 2025 05:00:44 +0000
Files and hashes: 1: 1-dSr_bwrsUwvfc9qQEvsXILMv3w.roa (hash: SF5ovM+mleomLfSZp/NHDAE5s82AVbxDbWTJFXrQrE0=)
2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: pEhabvHOuPaVRGN2/9AfoB7hKG6kWFdhAsIXXNbAhew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:4f:6f:ef:04:01:b3:5c:1a:a8:42:00:b5:5b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: Sep 7 05:00:44 2025 GMT
Not After : Sep 8 05:00:44 2025 GMT
Subject: CN=b11c15ad057ea47539efde72d6e2eec37e1a538d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:42:6e:99:13:66:98:40:1f:59:9f:6b:75:
fe:a0:ff:6d:90:7b:4c:34:f2:cf:ff:a6:2b:3d:b7:
6e:29:c8:31:dd:a4:6b:93:e5:2c:87:e9:84:2e:61:
72:42:06:a0:0f:a3:28:60:60:dc:eb:4b:2a:f9:09:
6a:63:a1:80:8c:42:6a:bb:65:61:76:08:15:d5:1e:
8d:f1:a1:9c:6c:4a:f3:27:78:b8:be:61:27:55:f7:
fe:8e:b5:a1:29:72:f5:75:d7:d3:9a:9e:e1:b5:c3:
18:de:33:cc:c2:22:8d:89:7a:ed:e9:7a:81:12:8a:
73:68:3c:03:db:7c:4f:96:26:43:25:34:66:65:ab:
f8:b0:97:34:72:27:44:17:e4:f2:7d:9c:2f:a9:d0:
0c:5f:31:05:ee:aa:38:04:e6:f4:3a:03:41:1d:4f:
bd:d4:d5:8b:ce:db:ca:54:e5:da:5f:cc:46:e0:2c:
be:8f:ca:ca:db:22:13:5b:f6:0b:57:c9:d6:f3:64:
e9:c5:ae:0d:af:2e:90:09:03:0e:e8:81:ed:5a:0c:
b4:7e:ba:9e:41:2e:bd:fb:43:9a:6c:36:26:06:7a:
ea:f6:73:c9:c0:f9:00:b9:8d:84:26:cd:9c:6c:89:
c4:07:01:a0:e5:1e:ba:8e:2a:ae:cb:cc:bb:8f:73:
7a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:15:AD:05:7E:A4:75:39:EF:DE:72:D6:E2:EE:C3:7E:1A:53:8D
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:44:81:7f:6b:0b:97:bf:13:3a:cd:be:0b:fa:d3:23:20:49:
c1:10:4b:c4:fe:21:a8:b0:33:94:ca:48:ac:aa:62:8f:52:3b:
e2:06:5b:db:34:ce:79:0f:a8:a2:36:8b:7e:8a:e6:f4:8d:f1:
70:a2:d9:74:a2:05:aa:8a:19:63:f1:fd:17:bb:b3:ad:7f:14:
d0:90:e1:55:f0:ff:50:28:7e:7a:56:59:05:5d:ec:68:d2:8f:
5f:07:23:50:53:07:45:03:98:34:2c:98:4e:60:2e:b5:fb:ab:
35:32:a6:65:43:ac:90:83:43:5c:31:02:2f:fc:3e:38:2b:24:
99:cc:6e:52:86:0f:d5:85:3f:e0:ec:ec:70:4f:df:dd:b3:be:
8e:b1:9f:d9:e4:e2:2b:a2:98:bc:af:a5:bc:6a:7d:9b:d2:fa:
ee:3d:96:a0:fa:0c:03:a9:eb:f7:5d:85:b8:b7:84:ef:9a:0b:
18:12:f3:1c:e3:80:78:32:6a:c6:bd:86:c1:fc:55:d3:55:46:
3a:47:11:1f:fb:67:cf:01:53:26:4b:05:60:e5:4c:65:0e:4b:
f5:6b:0a:25:46:37:6f:53:d0:f6:16:b0:dc:7e:21:c4:d9:19:
42:16:14:d6:15:cd:a8:46:4c:1a:4d:0e:85:b1:76:32:bd:8b:
0a:6e:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:17:28 2025 by rpki-client