Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: u9bhoIPtdUkoJDZ7nuvtiY5nkfdrrvuaWCLynYaYiOs=
Subject key identifier: B0:C1:82:D1:85:9B:68:13:4A:96:8A:A4:82:A7:34:F6:D3:AB:A0:D0
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 0199228C48689B6B0EEB6895E4CCB91C9766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 1538
Signing time: Sun 07 Sep 2025 05:00:42 +0000
Manifest this update: Sun 07 Sep 2025 05:00:42 +0000
Manifest next update: Mon 08 Sep 2025 05:00:42 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: 5x9yddeW6PCPu6n6wF0DnEsvqgffWu+AsLcYtIW7KYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:48:68:9b:6b:0e:eb:68:95:e4:cc:b9:1c:97:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Sep 7 05:00:42 2025 GMT
Not After : Sep 8 05:00:42 2025 GMT
Subject: CN=b0c182d1859b68134a968aa482a734f6d3aba0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6e:c3:1c:d5:1b:a6:91:bd:65:8e:01:0c:4b:
2a:46:0c:d9:d0:92:49:78:b0:cd:ab:51:5a:79:28:
45:aa:8b:51:43:39:36:0f:45:52:95:4b:5a:1f:66:
8f:f9:75:d1:92:87:54:af:a8:d7:88:c7:33:6e:dd:
a8:1d:a9:0b:be:14:12:35:fb:7b:1d:53:c2:ec:94:
65:68:a8:00:39:f3:6b:14:eb:02:cf:10:e2:7f:f4:
59:28:71:f3:b2:a2:b7:64:7f:16:36:b8:91:5f:75:
ef:a3:28:8f:bd:eb:29:a6:b9:1c:ee:c9:69:c2:4b:
10:93:e5:b9:22:be:77:62:17:a9:6e:f0:b9:52:8a:
c6:35:2d:d0:66:ba:47:73:4d:39:47:f4:08:cd:eb:
b7:ac:92:2e:e2:f8:ce:14:81:53:77:b3:fe:f8:94:
33:2f:96:fa:1f:09:15:95:50:cd:7d:b9:99:3e:59:
70:86:3e:de:1a:8d:18:44:bc:73:5a:e9:40:bf:12:
b7:11:7d:34:18:c2:4c:e3:90:cd:df:3b:2d:86:56:
82:3b:62:e3:2f:8d:81:17:9d:01:98:cd:f9:9b:31:
ff:fa:fb:a1:a2:22:64:a2:41:4e:83:34:5a:dc:ce:
96:49:ae:e8:4b:be:fe:e1:7d:07:cc:ec:39:80:d5:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C1:82:D1:85:9B:68:13:4A:96:8A:A4:82:A7:34:F6:D3:AB:A0:D0
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5d:02:bc:98:a8:14:f4:b6:05:7f:94:94:81:5d:38:a0:02:
83:b3:72:9a:bb:fd:5a:d5:a4:2d:07:9b:2e:e4:55:86:9b:5a:
41:ae:f9:8c:c9:b3:9d:e2:97:2b:d1:c0:95:4b:81:48:cf:e5:
87:f8:f4:27:df:1d:43:de:73:a5:a9:22:bf:83:5c:fa:e9:4d:
d3:fd:33:d5:d2:5d:d2:f4:8f:93:d6:5b:89:bf:ab:00:b4:7c:
d9:3a:3e:5f:4f:07:47:08:3f:ab:22:2e:07:0f:ad:b6:69:c2:
05:4c:27:12:f9:ee:f2:59:07:af:1b:63:a9:ac:2f:17:bd:78:
ee:4f:24:a0:d0:2e:b3:cc:14:15:ed:ea:2f:8d:63:60:b5:c6:
53:25:e7:f3:2b:04:59:24:ce:ff:23:92:77:57:d7:99:6e:2a:
c8:c1:16:2f:75:42:85:93:83:ae:72:cf:61:8d:1f:71:84:f8:
c2:18:0f:86:99:9f:92:d3:21:b0:d6:a5:b1:95:e4:3b:68:6e:
f4:4d:8d:42:f2:2b:df:5b:05:bd:56:79:d7:5c:1a:82:8e:40:
56:db:3e:e1:c8:56:95:47:a9:0a:70:18:a4:f7:94:37:d7:ae:
2f:57:e2:d5:10:16:c3:9d:a3:66:5d:1a:74:61:bf:0d:f9:15:
74:39:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:53 2025 by rpki-client