Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json)
Hash identifier: 08+uIfU+SfnjmeYEHgJJj3JOFTdZph+WDqncbWHFifw=
Subject key identifier: 7E:2B:A0:8F:66:00:25:30:A7:C5:1B:13:68:AA:07:86:B6:30:82:B0
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial: 019922C31FEC41CF9DF08877BB2CA48B1C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
Manifest number: 0BFF
Signing time: Sun 07 Sep 2025 06:00:37 +0000
Manifest this update: Sun 07 Sep 2025 06:00:37 +0000
Manifest next update: Mon 08 Sep 2025 06:00:37 +0000
Files and hashes: 1: eiXFhQbxCQpcEPNruQeHmSAD-Z0.roa (hash: MfMam3uqTveTnOv++uzEyTkwTSJ0lTcdAkWlcL+odNo=)
2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: MbInXezVF2SS8MewmBdOm31n6Jzuow4mtFNayFU6SeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:1f:ec:41:cf:9d:f0:88:77:bb:2c:a4:8b:1c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
Validity
Not Before: Sep 7 06:00:37 2025 GMT
Not After : Sep 8 06:00:37 2025 GMT
Subject: CN=7e2ba08f66002530a7c51b1368aa0786b63082b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:47:71:40:9a:8d:f4:54:51:2a:70:6b:2e:e8:
a5:bc:a7:4a:44:15:cb:06:0b:62:4d:5e:d4:77:18:
8b:1e:63:93:4c:1f:78:fc:d8:9d:ea:6c:d8:4d:ee:
5c:5e:b8:4d:7b:90:94:8d:58:0c:7c:13:3b:20:ab:
ab:00:08:96:4a:22:4b:82:f6:45:06:e6:8b:95:b9:
bc:26:b4:61:cd:ce:e5:fa:6c:23:c0:61:ec:38:65:
75:3d:99:9e:e0:bd:4a:01:18:bd:34:ad:89:ff:e8:
43:87:b3:83:72:60:4d:3e:26:f7:50:46:e3:25:0d:
1b:35:53:7f:e9:84:3d:c1:ea:b4:65:b6:af:ff:80:
10:93:43:2f:3e:eb:40:52:54:03:5d:5a:a3:81:e5:
82:93:4b:a3:14:aa:4b:c3:d1:bf:6a:6b:a8:9d:33:
39:d4:1f:21:c1:4d:69:78:da:52:47:76:24:ff:5d:
7d:72:e8:d1:9b:9a:64:23:8b:d5:3a:09:20:36:31:
75:dc:dd:40:0e:a3:fe:fd:2b:b8:fe:f7:2c:bf:dc:
42:21:dd:f0:db:af:77:4a:47:9e:fd:5d:98:08:d4:
5e:66:04:e1:49:5e:2d:89:bd:56:db:09:cc:a2:0e:
bc:03:bb:21:7a:81:d9:68:e4:40:0c:e8:e1:c9:f8:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2B:A0:8F:66:00:25:30:A7:C5:1B:13:68:AA:07:86:B6:30:82:B0
X509v3 Authority Key Identifier:
keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b4:e4:db:91:eb:0f:5b:76:63:74:d0:86:06:38:b0:60:e0:
f2:55:51:95:a2:41:3d:92:12:de:83:6d:31:a9:10:a0:90:97:
f1:fb:6d:7e:ef:97:9e:6f:d4:c1:6c:7f:6a:4a:8f:73:ed:d0:
d9:87:e3:37:e8:bb:37:7a:c2:dd:61:2f:5b:7a:60:ff:9f:c0:
e1:f3:ad:05:85:75:2a:b4:ec:5a:31:3d:01:c9:d6:80:91:49:
5c:e3:0b:a1:02:0b:56:f5:49:26:70:34:90:c2:33:fc:a8:34:
5a:80:a0:d0:c7:4f:e1:ed:6b:bf:10:0c:26:80:df:aa:ae:36:
d5:bd:2b:80:56:19:27:31:b4:4f:cc:84:a6:73:24:31:37:00:
7f:62:42:83:f0:52:9c:52:c2:2d:05:95:77:02:bd:a7:89:6c:
97:11:0a:04:28:09:77:99:48:6c:5a:43:34:ec:40:fc:98:cc:
87:a6:1b:33:a7:69:4c:6c:5a:f7:eb:6c:ff:3a:ab:64:f6:32:
3c:26:98:e5:30:ba:b6:a0:2c:89:84:04:ec:19:cb:c0:cc:2f:
44:bd:1d:08:bd:4e:cd:7a:e8:81:e6:93:64:ad:41:af:ce:4e:
ed:19:61:47:fd:23:12:d6:b2:aa:c1:f8:30:6e:b3:ec:95:53:
b8:f8:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:36 2025 by rpki-client