Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
File: Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft (raw, json)
Hash identifier: dBUsAtxr3rmhmZkQB1NmZqzxZHdFfRVd+aYgcCK8ELc=
Subject key identifier: 5B:B0:24:7A:3B:3A:CE:14:CE:85:F4:E3:D3:24:AA:95:8C:7F:A7:A3
Authority key identifier: 62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
Certificate issuer: /CN=62af1d7f36b1865802535e49a7331e035ad01008
Certificate serial: 0199161AFD6ACDA458EAA83002FF22914C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
Manifest number: 0ACE
Signing time: Thu 04 Sep 2025 19:01:31 +0000
Manifest this update: Thu 04 Sep 2025 19:01:31 +0000
Manifest next update: Fri 05 Sep 2025 19:01:31 +0000
Files and hashes: 1: Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl (hash: VzF7yO/6e82SZNi6zPMpKfIg192FjC/hAme1W4GcxRs=)
2: y9JMR_ZxLXrYLvgRShORqLwJidY.roa (hash: Uw28deLkoDLLwc6/RTXYzT+/L0LSFoqfWT5M5xI68aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1a:fd:6a:cd:a4:58:ea:a8:30:02:ff:22:91:4c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62af1d7f36b1865802535e49a7331e035ad01008
Validity
Not Before: Sep 4 19:01:31 2025 GMT
Not After : Sep 5 19:01:31 2025 GMT
Subject: CN=5bb0247a3b3ace14ce85f4e3d324aa958c7fa7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f3:74:1a:18:a9:80:88:26:f6:76:53:ea:cb:
16:b7:96:39:56:cc:fc:a0:9b:b4:a1:b0:a6:72:88:
86:f5:63:16:70:c9:8c:e5:73:8a:0e:04:3e:d5:a9:
a2:c4:45:f4:c9:be:9c:ff:8d:2c:6e:6d:b3:78:aa:
5c:44:c1:8d:df:d2:e5:f4:04:c7:c2:61:6d:b9:0b:
ce:69:62:8f:35:36:34:e7:2b:f5:4d:d6:8f:77:a1:
7e:84:e2:9b:d3:2f:12:7c:2c:83:f0:50:ef:7f:61:
4a:72:f6:fe:6c:fe:d1:9b:06:83:c4:14:af:ed:f0:
ee:22:98:56:80:2c:06:44:4e:d6:1d:6d:67:bf:71:
ed:2a:52:05:43:90:aa:53:e6:06:cf:53:af:e8:c4:
07:4c:3d:90:1a:89:32:e3:de:d6:1e:99:ad:c9:45:
40:e2:a2:d7:98:2c:3f:79:14:e2:79:ea:cd:37:32:
0e:65:28:02:ac:dd:f0:14:eb:56:7e:22:2e:18:10:
b3:f2:a0:30:bd:5b:11:83:0f:b0:93:b1:32:3e:b6:
2d:80:36:e1:df:82:db:9a:85:b4:2e:cf:e9:ab:1d:
a8:1e:8a:2e:8d:d9:dd:be:3b:21:bc:d7:4a:c2:dd:
c2:f1:49:28:9e:f7:36:2b:5a:06:4d:b2:4b:16:31:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B0:24:7A:3B:3A:CE:14:CE:85:F4:E3:D3:24:AA:95:8C:7F:A7:A3
X509v3 Authority Key Identifier:
keyid:62:AF:1D:7F:36:B1:86:58:02:53:5E:49:A7:33:1E:03:5A:D0:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yq8dfzaxhlgCU15JpzMeA1rQEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ed96c5-d633-402f-8e00-2b1d674595b7/1/Yq8dfzaxhlgCU15JpzMeA1rQEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:63:89:40:b8:10:ff:69:e1:13:ec:68:11:56:21:19:c3:69:
6f:d0:67:48:91:e3:8b:1b:06:7d:6f:18:9f:21:5f:8a:90:81:
0c:8b:49:c8:f4:6e:51:7b:a4:5a:2b:a2:ae:11:c6:bd:a1:87:
69:5a:f6:92:21:30:5d:3c:2b:05:d6:f6:58:ce:42:c5:f0:aa:
f0:62:8f:dc:e2:08:1b:85:8a:79:d7:66:7c:d8:8d:c9:41:ad:
ce:e3:7b:e1:5c:f7:d4:72:7c:46:2c:b5:a0:86:9f:9c:25:91:
89:f6:ef:a3:5f:63:50:44:a4:ea:42:ff:4d:aa:1b:7d:ec:ef:
b7:1f:21:94:2a:26:6f:86:61:2e:f3:99:76:e8:26:fb:5d:10:
5f:90:f4:1f:80:b0:8e:10:5b:6c:bc:3d:75:c1:10:e2:19:38:
b8:57:02:5e:98:81:17:de:a5:ef:a0:37:eb:0e:59:75:e8:23:
0c:da:86:80:86:af:69:3c:ef:4c:90:a9:1a:0d:0d:8c:de:33:
cb:45:8c:b5:fe:14:d8:61:c7:18:ad:7c:fb:3e:9d:76:54:c7:
38:3f:1d:d6:5f:06:50:08:3f:f6:66:24:ff:ab:7a:1b:ad:e6:
df:6e:dc:3c:ce:3d:ee:67:d4:30:4e:3c:4e:0d:7e:a3:28:a2:
33:08:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:18 2025 by rpki-client