Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier: phS1lnMDycqmL49pHC2d94K3vI6d4E2Zej3qQGQvlkg=
Subject key identifier: 02:1D:A4:C8:E1:8D:73:AA:B2:E0:3A:33:F4:58:C0:69:7C:CE:A8:AB
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 0199239F9800D94AFACBCDE91593F34D77D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number: 0DC9
Signing time: Sun 07 Sep 2025 10:01:25 +0000
Manifest this update: Sun 07 Sep 2025 10:01:25 +0000
Manifest next update: Mon 08 Sep 2025 10:01:25 +0000
Files and hashes: 1: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (hash: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=)
2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: XeboWV4JJNrsje2tMXmvBSDrFDzOAFxSm6rP1AgM+l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:98:00:d9:4a:fa:cb:cd:e9:15:93:f3:4d:77:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Sep 7 10:01:25 2025 GMT
Not After : Sep 8 10:01:25 2025 GMT
Subject: CN=021da4c8e18d73aab2e03a33f458c0697ccea8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:e0:33:b2:fa:81:96:c8:fe:9d:60:ef:ca:
52:0e:34:1f:a1:1d:9c:0a:5d:a7:e0:cb:a4:6f:da:
be:4c:1c:d8:f6:0b:69:89:af:c9:f8:ef:d0:66:24:
00:74:7d:c2:b0:1c:a6:d4:43:8b:88:ac:c2:5d:a3:
49:b6:01:30:58:79:7e:c6:39:c1:0b:8b:b0:e9:fc:
6a:48:21:d0:85:51:e1:f0:73:dc:31:6a:00:48:bf:
f7:f2:9a:c3:35:95:96:e7:3a:0a:9f:05:dd:33:44:
31:81:03:17:1a:06:c9:ab:00:3d:d5:25:67:68:a0:
44:9c:11:e0:d4:32:60:cc:fe:02:ce:69:7a:6f:e9:
e1:0e:c2:23:b9:90:a2:df:f5:42:dc:8e:1b:67:f8:
0a:f0:e7:7e:83:9d:ff:f5:8e:62:3e:a3:fd:5d:3d:
fc:6d:2b:74:67:35:ae:b1:e4:95:37:d1:21:1b:6f:
32:9d:34:a3:e9:26:35:85:67:ef:bb:51:42:7a:6e:
2c:79:cd:d9:ff:ed:af:68:ba:55:62:33:e7:c7:28:
65:2e:0c:45:1c:4a:a6:83:8c:d1:20:05:9e:c8:29:
98:e5:1f:0d:e6:6a:8b:d0:68:6c:b3:0f:22:2c:e9:
92:fc:55:f5:73:b4:9a:b2:48:24:3d:af:9c:7b:19:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1D:A4:C8:E1:8D:73:AA:B2:E0:3A:33:F4:58:C0:69:7C:CE:A8:AB
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:6a:40:be:d1:4a:d7:33:67:97:f7:44:fd:2e:34:5d:5c:04:
bd:8c:db:12:0f:3e:2a:e8:51:72:00:40:eb:68:e7:9d:c1:96:
de:24:b2:1c:2f:45:5c:df:83:ad:bc:59:72:21:52:a5:62:0c:
29:93:03:38:a1:40:7e:9a:73:fb:88:fc:64:fc:8d:96:cb:09:
24:86:3e:6a:f5:d1:b9:af:dc:61:1e:0d:20:81:11:d9:ea:95:
4f:9a:ba:1a:67:22:4a:84:64:86:6c:99:7a:0c:8a:f3:f4:f7:
24:f6:27:27:24:79:47:0b:56:16:8b:8d:a5:a9:92:9c:46:d0:
dc:ab:04:41:df:ac:54:66:ea:61:c6:d0:07:bf:df:97:b9:1a:
e9:b3:a2:cb:5f:c8:97:8f:7a:ed:27:02:36:ed:c7:4e:6f:8e:
8f:b0:cc:5f:28:87:af:c0:96:08:2f:10:d5:00:64:c8:81:1f:
07:53:45:05:ed:1e:d7:77:da:40:37:ce:47:ac:ee:64:33:92:
e3:6e:3e:af:b4:07:2c:73:62:c5:a5:7b:d6:55:b1:50:fc:8d:
65:8e:26:44:30:73:16:5b:5e:f6:6a:08:b2:ad:7c:36:a6:72:
4c:57:f9:28:88:2a:23:01:8e:fd:90:f7:49:4b:a3:de:76:eb:
99:95:fe:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:36 2025 by rpki-client