Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: H6fF2S667qAO0Bch6SwJ0oHdqb9ihUZmzL4WEfJwIeM=
Subject key identifier: AA:D4:19:22:38:66:74:40:28:15:93:D6:43:0C:BF:ED:63:D2:13:98
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 019921B06FA32BFA80B916AECC0370F7AB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0C6E
Signing time: Sun 07 Sep 2025 01:00:34 +0000
Manifest this update: Sun 07 Sep 2025 01:00:34 +0000
Manifest next update: Mon 08 Sep 2025 01:00:34 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: kHRpDo0ZxjkCKU+EqmS2Hzn3LhfzGuHKHBpfcSRrSbI=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:6f:a3:2b:fa:80:b9:16:ae:cc:03:70:f7:ab:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Sep 7 01:00:34 2025 GMT
Not After : Sep 8 01:00:34 2025 GMT
Subject: CN=aad4192238667440281593d6430cbfed63d21398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:cc:e0:bd:39:f5:10:ae:5f:04:10:a4:af:
48:69:c9:6e:99:b2:93:e9:84:84:ca:aa:db:8e:df:
9d:af:99:2b:de:86:64:57:14:98:0d:24:e3:99:2e:
3c:3c:62:ce:4d:90:5a:62:64:6b:f5:5b:ce:3f:4f:
16:79:5b:b5:6b:ff:03:5a:7f:a4:c3:d3:3c:4c:e1:
82:43:e3:89:e7:de:92:e9:3c:0c:5b:6b:cf:cf:73:
a1:9c:c3:f3:3d:fd:f3:21:85:0d:ed:ee:e9:81:0c:
e6:28:bf:2f:6f:c2:87:48:0a:cb:13:3a:f9:15:01:
1a:bd:40:18:b8:67:c5:92:54:89:8d:c3:e8:e1:96:
cf:35:c4:62:09:9b:c5:5b:cc:be:16:2b:99:d3:57:
66:bb:fd:4f:c8:9c:51:b6:7a:10:9c:a5:be:0b:6a:
21:a5:95:b4:ef:01:40:bc:b7:c4:d8:2d:ec:b2:09:
a6:8d:b6:9d:59:80:9c:b2:7b:58:9b:30:cf:93:49:
40:ab:3f:0f:09:5c:05:e9:32:76:42:90:19:b2:de:
7c:24:a9:da:1a:5a:01:8f:b4:b2:e6:9b:da:bd:29:
3b:f2:79:4d:39:d0:94:09:20:c3:89:7e:4e:99:05:
c6:70:6f:bf:28:48:9a:0e:91:f3:7a:6e:d4:06:fc:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:19:22:38:66:74:40:28:15:93:D6:43:0C:BF:ED:63:D2:13:98
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4b:c8:9f:94:c7:c8:b4:6a:28:51:c9:44:4d:3d:09:5a:f1:
3c:06:46:26:5a:1f:1b:b4:14:91:9a:77:e4:28:20:a2:7a:1f:
81:ca:7c:34:c4:7e:3d:57:7f:de:8d:e0:46:f2:62:49:21:49:
a9:b7:a8:e2:7c:9d:d7:f1:55:fd:70:26:01:8c:04:33:f0:39:
d8:13:70:d0:e8:df:97:79:2d:0a:18:98:ba:8a:3f:dd:e9:7a:
8b:ae:36:2c:45:f1:63:b8:e8:b3:fe:50:95:f2:cc:82:f0:e2:
62:67:f0:35:28:b2:4c:9d:c3:37:92:9b:6b:af:c3:33:2f:c3:
32:47:e1:89:d4:a7:84:a4:d8:e2:60:c1:ca:59:3f:7c:57:54:
dd:5a:36:43:b0:e5:c4:fd:63:3b:c4:f6:95:de:5c:da:1b:19:
16:25:fa:9a:a2:6c:fa:be:35:31:5e:72:9d:d5:46:86:54:e1:
1a:5d:93:4d:77:5a:9e:7c:9c:e4:6c:da:3e:1c:29:48:40:67:
0f:82:75:0b:d1:8d:5d:94:72:c8:1a:58:90:e6:d4:18:c9:6a:
25:1d:f1:1c:6a:d7:73:76:d9:c5:0d:79:71:b2:b1:b9:5b:00:
b2:3f:c3:db:6a:95:48:37:6c:94:9b:a1:da:8b:e0:d9:13:16:
17:65:58:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:00 2025 by rpki-client