Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier: sWLzW6fbtNDQk0i9YYVpvVJ6VvsFtYmBkb7eZVMJh0s=
Subject key identifier: 10:17:13:D1:2D:70:9F:8E:D4:2C:BE:67:7B:D2:36:39:35:B9:A9:BD
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 01992EC71BA2B5D70287E6799CD693673F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number: 011A
Signing time: Tue 09 Sep 2025 14:00:24 +0000
Manifest this update: Tue 09 Sep 2025 14:00:24 +0000
Manifest next update: Wed 10 Sep 2025 14:00:24 +0000
Files and hashes: 1: 78p7eZsSQ8zonV0TNMaLaLjK96I.roa (hash: +QO+TKXARPaWdOJ8baQ83Q+fqGFHJ3lndWpB+9vwuT8=)
2: Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa (hash: s3KelrVfC9+y7bPujzwFv1EKOWZnruzzVkasMV5xnU4=)
3: Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa (hash: xVI7un3YDJ74QBZKCGBUFc9S59Re+F08cwvGlwnT43k=)
4: LuLOUOJIGHxq7ykgB21inUS-57w.roa (hash: ab5+eNLQ6Vj2WxgXbW4Ku3+IuOco/UzZZHvYaaD6UKw=)
5: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: uoY23m1PyBaofBfAv+gsgvs7+iK7IIiM+sHGVoc6Mxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:1b:a2:b5:d7:02:87:e6:79:9c:d6:93:67:3f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: Sep 9 14:00:24 2025 GMT
Not After : Sep 10 14:00:24 2025 GMT
Subject: CN=101713d12d709f8ed42cbe677bd2363935b9a9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:2d:c6:86:0b:a3:e6:0f:06:d4:7e:f6:db:
6c:a4:51:69:89:85:67:ff:5e:70:8b:fe:7f:00:7a:
c0:11:df:30:18:a8:75:05:79:25:2b:56:65:c8:56:
31:4e:f4:fb:dc:67:d4:73:e5:f8:61:47:1b:a2:50:
08:7f:78:ff:c9:f3:fd:45:93:89:06:9d:3d:74:57:
ce:c8:28:49:07:a3:9b:f8:b8:66:e1:d6:cc:09:38:
74:6a:64:cc:8f:fb:27:02:72:e9:9e:41:2b:bb:b0:
25:e3:b0:08:73:e2:d7:3a:d6:93:68:af:4e:65:04:
37:f3:60:2b:7d:eb:03:2c:a6:8f:fc:97:6a:01:65:
f9:00:24:8b:cc:aa:4e:59:f6:11:6c:7b:16:0c:0d:
a0:34:fb:db:50:a0:6e:a3:14:f8:39:96:fb:5f:66:
67:cc:21:49:59:fe:02:ea:75:88:03:01:4c:08:51:
f6:91:e5:b1:b3:4e:5e:e3:45:df:89:f7:1c:65:49:
b0:a9:50:c1:78:f4:6b:cb:c5:f8:6f:d9:1c:58:57:
90:91:91:46:5d:f2:1f:92:06:c3:ca:87:98:49:10:
00:4e:4a:dd:60:ec:ca:62:11:f8:6f:e3:74:47:ad:
14:af:40:04:7c:11:34:cc:8f:99:9d:b9:3a:a9:60:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:17:13:D1:2D:70:9F:8E:D4:2C:BE:67:7B:D2:36:39:35:B9:A9:BD
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6c:f3:ac:df:12:89:29:9b:d7:ee:1a:52:19:cc:60:c5:35:
43:da:3c:16:b0:f6:d5:ee:a2:2c:10:96:32:ed:59:4c:a9:58:
95:e2:65:43:45:6d:2b:11:e4:5f:b2:bc:c5:be:e6:91:86:df:
fe:3f:26:7c:8d:9e:08:1a:17:a4:a7:40:f4:ec:3f:d4:d0:ec:
0e:6f:d3:72:87:65:66:3c:73:9e:8c:99:82:cd:7f:73:e1:67:
36:cc:bd:75:71:c8:3a:ce:6e:ac:83:cd:5e:e4:c6:af:f9:02:
9d:3f:ed:ad:93:37:9c:40:6e:26:8d:f6:0d:19:d7:bd:f0:bf:
b0:a6:a1:e0:5a:ab:57:a8:f7:aa:3c:c5:ec:d8:d9:2f:b3:8a:
d2:ee:4c:69:d2:b4:7e:2b:d5:48:13:62:28:65:bd:fe:9f:fd:
eb:2c:e1:a3:25:5c:c4:39:f6:82:1f:b7:01:88:bf:77:b9:57:
7b:9c:b4:4a:1d:7b:ce:bc:19:6e:e8:63:08:0b:30:50:41:10:
c3:71:85:96:d6:e6:f3:1a:f2:5a:49:46:0e:9a:04:fe:13:e7:
fb:c3:a2:e3:38:11:d1:bb:ac:18:1a:04:c4:31:ee:29:aa:1d:
18:db:48:c4:f0:1b:b0:9c:d3:96:dc:0e:94:e1:9d:a3:80:19:
e2:b8:cf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:24:41 2025 by rpki-client