Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: xjG/e7TRGwXGESRyJPrxVRe3NDbUlsjbxXlC4CrHXNs=
Subject key identifier: 7D:86:3F:68:10:5B:4C:C3:5D:E8:46:CD:B4:EF:44:8D:99:E2:AF:BE
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 01992E233E870D22CA53DD9C87A34F5BFE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 1675
Signing time: Tue 09 Sep 2025 11:01:25 +0000
Manifest this update: Tue 09 Sep 2025 11:01:25 +0000
Manifest next update: Wed 10 Sep 2025 11:01:25 +0000
Files and hashes: 1: HnblzgjRhv7ohFCku2dgX5Jr7vw.roa (hash: o9K0gGCxUA0R4sGgN9lj9M6IzHoNtSXBjdq46DJlaa4=)
2: dem0uBwT7g7YZDZIQsS-aXVQdOI.roa (hash: XISttqO419C7SgkgSmOfFJd6GmXYZpUuMQWw/YZudzA=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: f9/vARuJd0m3gQNKAiDbKL+7Wtyy9VLf8Kkz0oPcbjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:23:3e:87:0d:22:ca:53:dd:9c:87:a3:4f:5b:fe:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Sep 9 11:01:25 2025 GMT
Not After : Sep 10 11:01:25 2025 GMT
Subject: CN=7d863f68105b4cc35de846cdb4ef448d99e2afbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:a7:0a:5d:00:2c:77:98:96:aa:52:49:00:
18:c5:9d:42:75:62:f1:8d:46:23:41:6f:39:1d:38:
54:35:1a:03:e1:44:a3:9c:cc:0e:7d:6c:36:db:86:
ca:5c:6c:04:29:dc:76:1c:13:35:e4:e8:ca:71:e8:
53:96:ed:58:f1:02:48:85:6f:d6:50:b8:b1:14:5b:
5e:71:ae:c1:61:b0:b1:d6:7c:f6:3d:52:24:ab:75:
12:89:e6:4b:0a:46:ba:01:57:e2:b1:70:04:49:7b:
f4:f1:7f:be:b7:b0:6e:d2:8b:b0:87:4a:74:1e:d1:
ba:c1:52:85:c6:5c:dd:c5:62:bb:5b:88:ac:52:05:
fb:a8:ed:b4:74:9b:a8:2b:64:f2:b7:21:26:21:2d:
cc:7f:77:af:6d:47:26:7f:6f:11:bf:94:43:a2:83:
65:a7:44:5f:b8:04:da:9f:eb:5b:b0:51:42:fc:f8:
1d:ef:d8:78:46:45:2f:92:bd:db:53:29:14:ec:a3:
ae:13:57:5e:42:55:d2:29:7c:d9:98:97:be:fd:cb:
93:14:fb:42:df:42:f3:c1:59:65:b1:5a:ee:0d:a1:
be:fa:7b:cb:8c:00:6d:04:78:34:f2:89:ee:cb:ef:
3b:9d:d3:d6:3c:82:a9:af:c6:06:be:2e:7b:b9:6e:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:86:3F:68:10:5B:4C:C3:5D:E8:46:CD:B4:EF:44:8D:99:E2:AF:BE
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:74:5c:03:2e:5c:e4:23:79:c7:6d:3a:54:2c:70:7c:87:7e:
11:27:f9:99:8c:52:75:a3:62:69:04:1a:a1:cf:06:98:a4:97:
26:da:67:e7:ff:73:a6:f8:da:41:50:db:6a:d8:de:c9:dd:1f:
8e:a1:1c:93:bc:e3:f9:c5:f7:15:83:54:d4:87:19:f8:77:fc:
10:22:32:e8:b0:48:3e:ee:b4:b5:8a:0d:e8:1c:08:ab:cd:93:
74:8d:b3:40:94:4d:fd:a7:c9:cd:48:d8:ff:de:c2:00:01:12:
70:a7:d3:cb:15:35:53:a3:00:4c:2a:3c:ac:79:0d:3b:11:0d:
b3:c0:94:19:49:02:a4:df:96:eb:ce:a3:5e:2c:7d:0a:33:d1:
6e:dd:57:b8:35:ce:35:ec:0a:fd:a0:bb:17:cf:38:18:f3:de:
10:eb:a7:36:f9:7d:2b:fa:32:27:79:f6:3c:4d:39:95:82:22:
0c:ac:f7:37:bf:28:7e:96:e4:7a:c0:d8:bb:89:5f:9a:2e:7c:
08:b4:1e:b0:0d:62:23:3c:56:cb:5f:64:72:39:22:18:72:57:
f6:9a:8d:c9:fb:86:41:e3:c7:d1:d2:df:4b:f5:f6:52:96:b1:
78:d3:a5:08:85:ae:19:8a:ad:9a:5e:7b:eb:50:4f:a2:3d:28:
42:0d:2f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:14:36 2025 by rpki-client