Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: RFIWJQfGOqabwaxCGHbzM9XS/432v4kPEGoIGNEn7/A=
Subject key identifier: 28:BF:32:BB:F5:1F:B0:B9:37:5E:7F:A0:3D:C4:33:F8:AD:C9:86:DF
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 0199221E4FEEEC435448D2BCB2683701CC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 10B9
Signing time: Sun 07 Sep 2025 03:00:35 +0000
Manifest this update: Sun 07 Sep 2025 03:00:35 +0000
Manifest next update: Mon 08 Sep 2025 03:00:35 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: WiN2/IL7v9yya+/aszr3fodBlqUAMpczx3z7YdUUwIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:4f:ee:ec:43:54:48:d2:bc:b2:68:37:01:cc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Sep 7 03:00:35 2025 GMT
Not After : Sep 8 03:00:35 2025 GMT
Subject: CN=28bf32bbf51fb0b9375e7fa03dc433f8adc986df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:58:15:f7:f6:87:45:93:e9:b1:40:9b:d0:
98:9d:27:35:84:db:cb:a2:41:a5:9d:e4:f6:14:1f:
ee:d8:be:ab:e4:1d:0a:8f:89:eb:54:e3:ad:b6:c5:
82:29:55:8f:81:ef:33:d4:a9:03:26:e2:8a:aa:af:
46:5e:24:66:40:77:d4:7a:b4:4d:02:1b:12:03:75:
50:46:12:be:98:c4:57:23:3c:4d:87:ff:8d:3b:fb:
89:1d:15:ce:53:53:8f:47:2d:42:41:6e:75:49:d4:
3c:00:54:7d:60:fa:7d:be:c2:02:e8:2d:46:38:6e:
0d:c5:a3:67:69:ab:23:19:4d:9b:7c:ee:d4:bf:b2:
25:74:cc:38:2f:00:f9:1f:37:04:9a:8a:a2:9e:8b:
ea:eb:1d:3a:ac:19:02:00:b1:a1:54:17:c2:b8:35:
ef:7d:56:b0:03:dc:23:a9:e3:3d:ef:f6:48:a7:7e:
74:cb:6b:29:88:fd:e5:0b:f3:96:aa:3d:6d:51:2f:
5b:82:12:81:b1:9b:b2:83:f2:6f:c6:85:d2:3b:90:
96:74:72:7d:01:f2:34:54:f5:84:06:7c:df:97:6f:
cf:de:ea:11:e8:fa:d3:79:30:5f:0a:3d:59:3d:30:
f9:5a:bb:a3:f0:ba:66:c0:da:fa:6f:5c:d4:52:a4:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BF:32:BB:F5:1F:B0:B9:37:5E:7F:A0:3D:C4:33:F8:AD:C9:86:DF
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:79:7c:0b:9b:59:32:44:5f:88:ef:5d:8b:92:de:0f:3c:98:
7d:b2:67:1f:bb:9b:cd:a7:51:e5:97:7e:e6:16:99:99:ee:d4:
c0:73:eb:63:ad:ac:49:7a:93:9d:10:11:c0:16:d3:27:46:5c:
cf:87:09:b8:52:69:af:24:98:ed:6b:8c:ba:c9:0b:9e:c5:c6:
bf:4f:db:88:47:86:d8:fc:89:45:c3:6e:f7:92:cc:ca:e1:19:
fa:62:72:ac:db:4c:3b:ad:0c:e0:27:15:6d:14:d8:1e:44:f4:
33:9c:b1:5b:20:0c:b8:d0:a4:df:8b:9b:68:31:da:97:0f:bb:
ca:64:33:40:84:c7:1c:a8:be:95:46:9d:f8:81:2c:35:ab:d7:
5a:0a:fd:98:8d:a0:eb:98:ea:5d:51:ce:9b:c6:55:23:e5:cc:
ca:07:9b:2e:f5:08:ed:36:30:d4:c8:52:76:2a:28:9d:ed:a5:
3b:c1:34:53:2e:c5:f4:70:8a:04:5b:a7:51:e2:6c:3f:68:bf:
7c:2d:b8:58:e9:a5:86:80:50:ce:db:ae:fc:42:2b:07:fd:dc:
f1:17:e7:d9:52:22:dd:f5:16:5a:bc:6e:fc:01:eb:27:86:72:
1a:c2:35:45:b3:5f:d7:4c:d5:3e:92:22:7d:69:99:6d:40:fb:
05:08:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:00 2025 by rpki-client