Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: NUCMAMQ2cb0ToWhk61INE6K3C/kHnheHAcInN/BjesA=
Subject key identifier: 23:80:25:17:FD:B7:B5:2A:1E:2F:4C:5F:53:D6:4A:7F:D4:B7:A7:80
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 0199349279A37BEEFAE0922C2EC2C6698863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 17:00:38 +0000
Manifest this update: Wed 10 Sep 2025 17:00:38 +0000
Manifest next update: Thu 11 Sep 2025 17:00:38 +0000
Files and hashes: 1: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (hash: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: Yoq6r25SGJgolxc8pNAoWEcBZy/DLlK0KbHrrWzKCt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:79:a3:7b:ee:fa:e0:92:2c:2e:c2:c6:69:88:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Sep 10 17:00:38 2025 GMT
Not After : Sep 11 17:00:38 2025 GMT
Subject: CN=23802517fdb7b52a1e2f4c5f53d64a7fd4b7a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:1f:00:4c:c6:fe:76:6a:3c:5e:5c:09:e2:
01:2e:de:10:93:b4:4d:a2:e3:29:d8:c5:75:a3:7a:
69:e3:f9:13:d4:31:96:02:32:b1:df:ed:7e:e5:61:
e7:82:36:e8:da:dd:32:87:f8:77:41:42:3b:a1:9a:
8b:a7:57:f0:be:b4:51:63:20:55:76:6c:28:26:f8:
fd:5d:9d:c4:fc:e0:7e:df:18:c5:9a:2b:f4:58:ff:
be:ba:df:72:c0:bb:e9:e7:ff:ce:49:4b:20:ed:2e:
2d:a7:c4:67:4a:e9:05:0c:1c:06:e8:d5:1b:09:7c:
78:31:e2:5a:a1:f1:be:5e:dd:89:f1:d7:a0:b7:97:
d7:6a:1e:f7:8d:85:5a:84:0d:55:9a:fc:d0:c0:0f:
8e:01:76:c4:33:40:24:7b:25:8b:0e:dd:b9:a4:bc:
8d:fd:d2:32:9d:95:1d:13:e5:80:c4:2c:6a:0e:64:
d7:76:6e:70:67:02:5f:c8:23:21:8b:83:eb:56:1d:
b2:b0:30:39:19:a5:ca:75:7f:94:7c:f6:2e:cc:9a:
2a:09:0d:44:51:e2:bc:8f:bf:e7:83:34:7c:41:ca:
50:1e:e9:aa:0e:bd:59:07:14:98:cc:4d:d2:d0:48:
2a:1f:d2:f3:a0:de:35:71:f1:8d:5a:5e:03:0f:bc:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:80:25:17:FD:B7:B5:2A:1E:2F:4C:5F:53:D6:4A:7F:D4:B7:A7:80
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:38:44:68:12:c8:09:3a:1d:dc:2b:93:e2:68:9b:d8:a4:ef:
cf:4a:27:28:74:37:80:8b:0c:e3:cd:6d:64:f7:85:93:aa:9b:
dd:85:42:94:cf:25:8c:c4:85:aa:2e:61:0c:f6:d2:73:03:96:
43:0f:f2:e9:3c:20:43:48:fb:58:a7:c4:4b:56:85:ab:f8:2d:
c1:82:19:7c:e5:38:c6:96:5f:90:91:44:56:ad:da:74:41:42:
23:e8:e8:36:04:fe:ca:26:30:c8:da:64:7a:56:67:73:34:6d:
4c:a9:5a:f1:20:82:3b:91:ed:20:96:1c:85:05:84:aa:9b:93:
5c:a2:56:3c:4d:50:e6:48:3f:d8:fa:21:c4:2a:c2:ba:c1:5e:
14:04:da:c6:60:c8:c2:05:cb:99:b7:e2:e8:60:12:3d:13:9a:
2c:db:62:2a:a2:d9:0e:07:c1:07:dd:bd:56:05:e3:38:a1:51:
ff:7e:5b:6b:42:77:93:60:31:6e:a2:f0:26:12:ce:d5:c8:3c:
bb:3f:e0:1e:83:20:a6:19:3d:cf:35:19:30:a1:5b:81:bb:b1:
80:3c:41:e4:03:88:47:26:96:3d:aa:bb:73:d2:d4:32:63:93:
a1:28:64:0b:d0:6e:d1:e3:ef:99:45:c8:a0:e6:7a:93:bf:f2:
6d:36:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:46:40 2025 by rpki-client