Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: H6YrPxwxNbVESHUHc6u0vIGKQDWMJkNpBpf6H1qODT8=
Subject key identifier: 55:0B:1D:FE:30:95:76:8E:3F:AE:4B:FB:BA:47:70:09:5E:96:58:21
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 0199307F4FAA1B8F02AC3DB597BE170D29D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0EE6
Signing time: Tue 09 Sep 2025 22:01:13 +0000
Manifest this update: Tue 09 Sep 2025 22:01:13 +0000
Manifest next update: Wed 10 Sep 2025 22:01:13 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: qwLAX5unCp+xUH09WotUmXIDZau7w5JYOOqM7blUiRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7f:4f:aa:1b:8f:02:ac:3d:b5:97:be:17:0d:29:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Sep 9 22:01:13 2025 GMT
Not After : Sep 10 22:01:13 2025 GMT
Subject: CN=550b1dfe3095768e3fae4bfbba4770095e965821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:86:08:16:d0:3b:42:c9:8c:38:e3:ac:6d:
71:7b:a3:c5:64:3a:49:89:76:c2:15:f7:ae:4e:18:
0d:96:1f:b9:80:0e:fd:6c:9c:62:18:67:d1:86:6f:
e4:c7:07:f1:5c:a1:e7:06:cc:f5:1d:ce:11:3b:5e:
b6:74:61:48:75:b7:cc:f2:43:f0:ae:9c:ab:84:46:
c4:2d:f5:02:7e:ed:3c:de:34:d0:85:39:56:6e:1e:
2d:38:39:67:64:04:d3:80:61:02:d0:21:06:e0:30:
3a:3d:98:ad:e4:bc:98:96:91:3a:be:dd:ab:20:bb:
12:57:1d:66:87:f8:e8:40:3d:d3:69:6c:5e:56:c2:
19:94:07:cf:66:85:90:68:f7:75:5b:f0:8f:7b:45:
02:d1:c6:b4:d1:b7:35:af:e8:15:89:6b:85:25:7f:
79:9e:8c:a9:e2:60:d2:50:cf:10:f4:31:35:cf:84:
2c:b4:a5:74:9a:a1:c3:a7:35:a8:40:8a:85:dc:97:
63:c4:03:d1:03:4a:20:d0:8c:f1:98:76:df:ef:d9:
f3:0b:4c:09:2b:11:d8:ae:97:0e:de:52:06:6f:d7:
8d:92:a5:49:09:f2:e7:f2:f7:f6:7d:68:eb:d8:5c:
47:49:4f:a0:aa:93:f9:ce:cb:79:5c:a6:d5:9d:c0:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0B:1D:FE:30:95:76:8E:3F:AE:4B:FB:BA:47:70:09:5E:96:58:21
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e7:b7:13:9f:ed:dd:5e:66:b3:fe:4a:af:d2:61:36:93:39:
ad:f2:52:33:07:05:fd:c3:11:67:cf:ff:4c:36:21:fd:8e:53:
d8:8f:b5:42:7e:54:61:78:b5:6d:01:c2:c2:c6:1e:8b:10:01:
41:c2:c4:d5:fd:a6:01:4f:80:3c:48:26:81:1a:96:0d:76:d4:
1e:c2:12:cc:eb:be:af:ba:f4:2b:e8:60:fc:09:8c:86:3b:1c:
2a:c4:8e:fd:28:24:09:fc:5b:82:57:6f:9b:42:c1:a4:1e:f5:
c5:51:cb:77:cc:35:c4:30:0c:bb:ab:82:55:b4:15:43:fb:33:
b7:6d:54:19:7a:6f:0b:b7:64:eb:fa:44:ec:59:8b:9e:f3:a6:
be:dd:7c:2a:25:ca:4e:c9:cb:31:78:fb:af:2a:cc:5e:2c:7a:
f4:17:a0:71:3b:1b:d5:cd:e8:5f:3c:6e:e8:67:e0:ff:0e:e2:
54:c7:c0:7a:f5:b7:ef:71:53:8d:bb:f3:8c:76:39:30:b5:75:
e1:e9:a6:68:ff:75:f3:79:af:8b:50:e1:aa:14:cf:a7:71:2c:
71:f5:27:01:72:79:c8:d6:78:81:ca:5e:73:2a:41:91:e9:91:
bb:97:55:cb:b5:53:ec:88:5f:a4:ab:ee:1b:1a:ee:4b:81:81:
60:ab:84:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:04:34 2025 by rpki-client