Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: ninn27A5bzwiaXcgwoM641lsPkfZmp6KXrLOatjgRK0=
Subject key identifier: A6:EC:56:B6:A2:B5:7F:9C:95:A0:B1:0D:74:D5:FF:06:59:61:8B:B9
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 019921E737D6C2DD4B86C32BC51CDBFE70D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 097A
Signing time: Sun 07 Sep 2025 02:00:25 +0000
Manifest this update: Sun 07 Sep 2025 02:00:25 +0000
Manifest next update: Mon 08 Sep 2025 02:00:25 +0000
Files and hashes: 1: EdKvKktbhV253248rH8OS7KgOJc.roa (hash: OVq8FxeeYttd7uYMiCGl4rm6BCNN8JrWv82y6k+zOKs=)
2: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: Qk9gs6jWBNoDdjH2WhWiAjIHj8vQwkXmNJoeopoHFnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:37:d6:c2:dd:4b:86:c3:2b:c5:1c:db:fe:70:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Sep 7 02:00:25 2025 GMT
Not After : Sep 8 02:00:25 2025 GMT
Subject: CN=a6ec56b6a2b57f9c95a0b10d74d5ff0659618bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:ce:bf:85:a9:13:c1:f8:aa:a2:9d:6c:d6:
d4:4c:d6:3d:1f:f0:f1:e7:dc:6d:e3:db:cc:15:9d:
f4:b1:06:ac:33:a9:fe:21:b0:e2:64:3f:5a:f6:47:
41:5a:82:1b:41:ae:b9:ec:fd:f5:7d:e3:8a:28:46:
8b:45:8e:e4:94:6d:05:7a:06:2f:9a:2a:4c:aa:9c:
46:79:e6:a4:70:42:62:00:61:5e:34:c4:c8:9f:27:
3e:bd:9c:3e:29:e1:4d:f2:7e:7b:d7:c6:07:e4:8d:
07:fa:c4:20:1a:b7:c0:d0:0f:ee:08:ec:a6:ff:21:
22:ae:23:3d:cb:ff:98:a6:14:c3:b1:f3:94:b0:77:
71:4e:96:90:74:cd:94:79:30:5c:9c:26:20:5f:70:
6d:2c:84:aa:04:98:2f:46:a7:96:e7:22:f2:01:3b:
88:fd:7f:59:f1:c1:8d:6b:e3:5f:49:34:dd:df:6f:
1b:c9:39:58:ba:f5:8a:4d:f5:1f:48:7e:31:73:17:
88:e1:20:56:41:a2:2c:e4:28:64:50:8a:3e:dc:a4:
f0:f6:e6:3c:e1:53:bb:88:40:b9:c0:42:17:49:09:
d9:e8:fd:01:63:b6:3d:f6:9b:73:d8:2a:8e:96:71:
08:8b:fa:6c:7d:96:54:7c:4c:dd:98:75:aa:0c:80:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EC:56:B6:A2:B5:7F:9C:95:A0:B1:0D:74:D5:FF:06:59:61:8B:B9
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6c:c0:c6:61:ad:58:1a:a5:4c:17:f7:0e:0d:ac:f2:d9:ec:
1e:ce:2d:01:4f:85:39:0c:f0:fa:54:b2:15:2a:c1:30:60:a7:
2e:b5:02:6c:58:be:c7:1b:75:f3:27:50:a3:57:1d:e2:d7:00:
85:f2:22:aa:d7:86:24:3c:0d:d4:fd:a0:cb:43:36:03:c7:78:
55:b5:5e:c7:68:68:f0:cc:5b:7a:69:96:1c:8f:46:ac:84:15:
31:a7:18:1d:67:70:ea:3b:d4:4d:2e:4d:79:af:b5:ef:fa:60:
5f:33:cd:c3:5d:85:fe:9e:83:00:16:49:91:5a:8a:66:b6:36:
06:1e:fa:f8:19:0d:92:6c:d5:b8:d9:c4:e9:89:84:8f:14:91:
7a:59:47:b1:e9:6c:90:e3:51:c2:67:3b:03:6e:20:7f:73:5b:
80:58:0c:60:fc:cb:b9:e9:82:3a:8a:03:60:7c:3d:1d:9b:14:
7a:55:07:81:d1:1e:fb:a1:1d:5e:45:bc:df:64:73:b4:cf:75:
3b:db:9d:61:05:84:c1:77:64:25:bf:d8:f6:5b:47:bb:be:30:
55:f4:7f:dd:a7:93:72:ff:50:52:8d:96:a5:ac:f8:d2:ad:df:
69:3e:57:99:7a:d2:a8:6b:3d:39:ad:0f:ca:56:ae:78:41:ac:
dd:53:62:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:11 2025 by rpki-client