Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: iaNpvTyZEOfN64q83HyavssbutDg7qZR1jA3qYoUkrM=
Subject key identifier: 1D:81:52:35:BC:84:DE:B6:D0:1D:28:BF:19:4B:82:2A:2C:33:7B:EC
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 019935DC00C4BF78AB0D374F5B8867AF074B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 168D
Signing time: Wed 10 Sep 2025 23:00:34 +0000
Manifest this update: Wed 10 Sep 2025 23:00:34 +0000
Manifest next update: Thu 11 Sep 2025 23:00:34 +0000
Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=)
2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: qtcFenO98bJS7TIV7xkCx0ZGGtBycEYDqYwJFxzQ2pg=)
3: emyVhdOtUpRyesCtl5eoHp0JGEE.roa (hash: 86qnK0w4Cm+zX9631HiXs9UjrDd9iFThMb03qwigYKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:00:c4:bf:78:ab:0d:37:4f:5b:88:67:af:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Sep 10 23:00:34 2025 GMT
Not After : Sep 11 23:00:34 2025 GMT
Subject: CN=1d815235bc84deb6d01d28bf194b822a2c337bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:af:b2:a1:34:be:be:2c:ab:dc:bb:97:f3:
e8:41:fb:04:0b:29:b4:59:69:ba:d0:c0:06:e0:5c:
6a:f0:c2:80:8f:37:a4:ec:a5:53:28:f4:50:f9:d4:
79:f3:68:00:e0:8f:2f:24:59:65:df:5c:7d:f6:15:
56:72:8f:75:2d:7f:72:c4:48:9b:6b:e9:48:b2:f1:
fb:34:8a:25:17:52:a5:44:ec:ce:e5:0e:5a:20:67:
cd:f8:4d:4e:0f:7c:bb:99:5b:e9:6d:ae:a8:03:d7:
a9:f5:a2:09:1f:ca:9b:b9:5f:f3:a9:fd:df:bf:07:
15:ff:a4:f9:e0:3f:12:18:7c:75:79:cf:80:f5:0e:
02:91:0d:20:61:15:69:23:a0:f9:a1:49:22:fb:13:
d3:bf:4a:56:fa:92:04:6a:5f:25:47:1c:84:35:5b:
23:07:35:45:53:32:f9:aa:bc:64:02:56:f1:00:91:
02:c5:7d:2d:fd:d8:41:e7:97:af:c0:7d:a8:83:59:
fa:2a:c5:45:dd:80:c0:13:0a:b0:fb:08:74:13:1f:
0f:a6:30:02:5b:7f:90:03:20:59:03:3d:21:81:ed:
f7:c9:92:a3:8d:5d:37:51:f2:ee:5f:8c:43:c7:b6:
cc:b1:d0:f4:78:fe:7a:75:d0:22:11:ba:5f:2f:93:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:81:52:35:BC:84:DE:B6:D0:1D:28:BF:19:4B:82:2A:2C:33:7B:EC
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:77:e0:30:99:c1:42:35:63:c1:e5:55:7b:d9:8d:50:d4:8a:
b7:55:e3:48:4a:1b:d7:da:79:d4:71:c4:bd:85:8c:e7:c6:a5:
03:51:6a:af:dc:32:47:60:b2:49:d7:d1:ad:9a:f4:05:20:72:
20:3e:2d:70:f5:c6:81:23:8b:52:37:e7:7e:ea:7c:b5:2a:ef:
48:d3:d5:02:4d:a2:84:a2:8a:65:dd:71:a7:62:0a:1c:ef:b6:
cd:39:28:49:6f:f9:a0:73:6e:92:94:eb:09:bf:8c:c3:9e:6a:
75:a0:db:c1:f7:29:8b:fd:cf:d9:57:2f:dc:1e:a8:15:85:74:
b7:40:8b:d8:9e:dc:16:f7:31:3b:d6:5e:1b:30:e8:c4:e5:aa:
8f:10:5f:28:ae:21:65:5d:65:c5:a6:a0:32:74:6c:65:7b:88:
20:c4:eb:6c:d1:72:88:44:b6:3a:84:83:bc:cb:6f:40:9d:52:
0b:15:b4:d4:ca:14:1d:28:02:6d:5f:09:d3:1f:fe:d6:11:34:
d6:ca:21:13:cb:8c:49:b3:e1:3b:d7:79:a8:21:c8:18:07:fe:
52:23:1d:d7:87:2a:05:86:64:5b:9e:a6:63:e1:09:1c:e2:11:
78:ae:a8:29:44:24:13:c6:37:b7:3d:1b:a1:0c:e8:46:cd:51:
fd:b2:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:00:25 2025 by rpki-client