Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier: Zpg0cyUa90P2xE4NJaUccb7A9wYW+ycrgNGrUTVI1WU=
Subject key identifier: 3A:A8:D1:F2:F7:A7:08:F9:79:ED:86:66:59:C4:F6:07:E0:44:EB:C1
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 0199221E5138B4E91C5BFA768F2379FFFE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:36 +0000
Manifest this update: Sun 07 Sep 2025 03:00:36 +0000
Manifest next update: Mon 08 Sep 2025 03:00:36 +0000
Files and hashes: 1: fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa (hash: yAyZKCviC/wjO248iuIwgpoUtsrF9JNp+X9B5Xdnj9A=)
2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: vEXBI7tUxjbLcUSFNq6Vy5xlugrpYT5VTxJagiKdP4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:51:38:b4:e9:1c:5b:fa:76:8f:23:79:ff:fe:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Sep 7 03:00:36 2025 GMT
Not After : Sep 8 03:00:36 2025 GMT
Subject: CN=3aa8d1f2f7a708f979ed866659c4f607e044ebc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:87:29:ce:ee:24:d8:59:1e:05:28:16:1a:
2a:2b:e7:9e:54:be:90:a8:a9:36:e7:ce:90:44:5c:
40:a8:ed:5b:2e:fb:40:b9:c3:a9:60:7b:4f:57:80:
63:15:f4:1b:fc:44:d1:e7:b4:4b:01:00:5a:3c:dc:
fc:2d:14:8f:68:c6:a2:69:e6:23:2f:0e:f8:ce:f4:
1a:97:59:c3:dd:5a:2e:8d:e3:50:37:62:d2:2d:02:
96:eb:0b:75:d8:05:f0:40:4e:c7:70:10:a1:b7:f1:
b5:2c:b4:61:82:0c:dd:f9:b3:2b:2c:21:49:49:d0:
9c:44:44:11:5e:9e:17:da:67:13:ad:73:61:d0:5a:
a8:b3:97:9f:68:52:eb:40:86:fe:75:ee:53:9f:61:
95:63:95:aa:e0:32:c7:fa:50:92:e4:f3:3b:5d:7c:
28:0a:63:56:f1:fc:23:5a:a9:59:cf:3d:2d:93:f6:
43:e2:2d:4d:ce:17:a0:13:9f:37:2b:3e:fd:87:e4:
7d:4d:1c:a0:10:2f:a2:91:35:0c:cc:06:36:32:ae:
64:29:b4:d8:0f:70:93:e5:1c:b6:4f:a2:ca:e2:da:
4c:e3:4e:65:77:a5:f4:e2:b2:04:f5:c5:dd:fb:4f:
00:3c:f9:cb:f3:87:ad:6e:a4:6a:d7:c0:1b:64:f5:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A8:D1:F2:F7:A7:08:F9:79:ED:86:66:59:C4:F6:07:E0:44:EB:C1
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ad:71:31:1b:dd:4f:38:f7:81:95:36:72:73:ec:42:12:2f:
80:26:7b:ed:1d:4d:1f:24:59:dc:c6:a2:b0:7c:7f:35:b1:ad:
4e:ca:3c:07:fd:1f:b3:54:b0:f3:c8:c6:4b:21:ec:a1:3b:92:
4d:c5:c9:35:20:21:f4:b5:df:ea:e4:00:ed:a5:56:72:db:48:
dc:94:1d:da:2e:02:0b:e8:5e:24:35:07:37:10:ff:b5:0f:80:
9f:97:4d:9c:2a:6f:c2:98:38:7f:8d:bb:7a:70:aa:4a:4f:56:
f6:c4:d4:0b:c1:25:e9:31:7d:db:20:7f:61:9d:63:d6:43:5e:
63:6d:74:7d:87:3e:6b:ac:6f:75:09:07:6a:a1:40:0b:77:60:
60:a1:21:66:1b:9f:58:fb:e2:cd:94:5d:04:b1:78:1d:42:4f:
39:ad:9f:04:b1:aa:e1:95:44:06:85:28:69:42:c7:07:e5:1d:
60:47:83:60:77:02:65:c1:bf:44:f1:bf:ab:cf:91:c1:90:10:
22:99:df:f8:da:bf:c0:6c:01:ea:e0:43:4b:d5:c7:68:1d:f0:
98:cf:7e:ae:a0:7a:35:7b:d2:16:85:96:cf:0e:01:13:ec:11:
bb:cd:34:af:d2:73:85:06:42:bb:ae:42:b3:3c:2d:62:a5:de:
1e:60:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:28 2025 by rpki-client