Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: WIUF3mmEEHzciqnTwN5ybjBPcTH6sNhaxRRuDZkjL+4=
Subject key identifier: CE:1A:1A:F8:43:D3:A1:A5:08:CC:B0:0C:C2:05:79:B4:C0:A9:0E:49
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 019921B298BB22241B2410F4FC9981354A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 068C
Signing time: Sun 07 Sep 2025 01:02:56 +0000
Manifest this update: Sun 07 Sep 2025 01:02:56 +0000
Manifest next update: Mon 08 Sep 2025 01:02:56 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: 8HgdDCBDN761eErVDQU/l1bZHDfwHMM7Mcl32/STHsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:98:bb:22:24:1b:24:10:f4:fc:99:81:35:4a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Sep 7 01:02:56 2025 GMT
Not After : Sep 8 01:02:56 2025 GMT
Subject: CN=ce1a1af843d3a1a508ccb00cc20579b4c0a90e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:37:af:78:01:28:a4:4c:42:33:2c:48:9e:
65:69:d3:52:b5:dc:cf:29:0f:f8:4d:0e:57:67:af:
51:62:58:37:1c:b0:88:7f:da:41:0d:bc:4b:14:10:
b7:65:03:5c:12:97:24:4d:5b:64:5f:94:83:d4:db:
19:8a:f2:a4:c3:a7:39:b9:36:ef:c5:96:e3:4d:45:
22:98:be:e8:9f:a0:f2:7d:73:64:03:bb:53:ed:27:
7a:f0:8f:25:05:ed:1b:0d:ae:07:04:91:2e:59:de:
43:a1:90:29:c9:e2:df:23:9a:90:15:45:ea:d1:ac:
e8:8c:d6:62:11:21:41:d2:b2:d3:52:88:76:8e:fb:
a5:db:ad:44:77:4d:26:41:1c:d7:7f:9e:f6:f8:fd:
f5:77:aa:df:b5:8b:d2:17:09:4a:d4:aa:90:d8:e5:
93:c7:bd:90:3d:7d:9d:1e:c2:67:5e:f5:b9:e6:37:
8f:24:a8:fc:e4:29:40:14:2e:3b:35:4f:21:05:7e:
50:13:d9:30:92:d1:04:d1:20:ac:90:01:c0:fc:ca:
08:26:54:9e:48:4c:67:7d:c5:de:52:b2:19:7d:21:
09:3e:75:dc:8a:7e:40:f3:e8:44:37:10:65:4a:93:
71:0a:a5:3f:a8:41:c7:c4:9d:4c:6e:7b:99:eb:93:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:1A:F8:43:D3:A1:A5:08:CC:B0:0C:C2:05:79:B4:C0:A9:0E:49
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ea:75:fe:07:72:c2:80:3e:26:10:ee:e1:27:60:14:90:24:
e1:1a:bb:ab:69:08:3a:06:d3:eb:58:54:e6:50:cf:79:db:15:
f9:45:bc:0a:36:38:22:23:16:86:bb:06:e4:65:03:62:43:38:
87:22:a3:d3:d7:03:99:29:19:1b:52:78:40:61:b7:69:cd:4a:
42:5b:1f:72:81:0e:f9:01:13:17:e2:77:94:33:c6:7d:bf:4c:
a9:90:49:de:3b:66:73:28:50:d6:07:ce:7a:dc:b7:0e:19:fa:
c1:f9:f9:9d:b3:63:87:be:66:3a:4c:a4:95:1c:e2:e5:57:04:
dc:3e:bb:83:2f:a4:36:8a:82:9c:13:44:62:78:4a:a5:96:dd:
37:06:6c:46:d0:c4:55:bc:f9:ba:4f:5c:ce:1d:5f:33:ef:ec:
2e:ab:9f:0a:c5:08:82:2c:4d:76:f1:08:f3:86:bd:26:9c:02:
65:c1:c4:9a:4a:6c:8d:aa:26:48:76:22:d6:1c:6f:53:4b:2d:
0e:ef:c3:ce:35:af:2a:22:a4:bc:67:70:a2:8b:23:a3:92:11:
cb:f5:7b:d3:90:23:7c:8a:7c:ef:f1:94:1c:f9:41:e0:bb:8e:
7d:ff:e9:a6:b8:ed:d5:4f:64:67:0e:a6:cc:b5:34:6c:a6:7a:
6f:c4:1a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:51 2025 by rpki-client