Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: I9Hkw0IK+42BkNysBiUfZqAj4u209UHJyBmOgLgYzs0=
Subject key identifier: 1B:B5:D6:7C:23:8E:A7:3E:6D:1A:2E:85:B9:8F:0D:4E:BB:7D:28:CF
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 0199191B232019E6E00EF6CDA4E675D0B366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 0388
Signing time: Fri 05 Sep 2025 09:00:32 +0000
Manifest this update: Fri 05 Sep 2025 09:00:32 +0000
Manifest next update: Sat 06 Sep 2025 09:00:32 +0000
Files and hashes: 1: iO6OOltzYSW2yZ_5E85X-P4mF_0.roa (hash: 2XDE+mCyZurCdSAHCb4+FLC8SwOf/SeiDXoheU8dhOI=)
2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: FqxNZyxiIaOVTf2x72uoPkZSsdSO4J+EPZWVFf7pl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:1b:23:20:19:e6:e0:0e:f6:cd:a4:e6:75:d0:b3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Sep 5 09:00:32 2025 GMT
Not After : Sep 6 09:00:32 2025 GMT
Subject: CN=1bb5d67c238ea73e6d1a2e85b98f0d4ebb7d28cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:34:98:08:0e:d3:33:40:19:23:16:34:7d:
3f:1c:5e:dd:56:74:62:f8:b4:8e:60:d0:49:14:20:
39:a7:ae:03:b5:3b:dd:b3:02:bb:47:1e:9b:92:f8:
14:d0:43:0b:f4:1e:83:16:4e:62:83:3d:76:e0:07:
dc:21:be:ee:ec:2d:78:82:b5:c4:b8:ab:25:71:36:
b9:50:fb:7d:a0:6c:25:1f:6f:bd:d4:03:c6:80:e4:
40:2a:00:7d:c7:fd:de:15:93:f2:2b:65:7e:f2:95:
e4:da:84:fb:5c:cc:27:b1:63:95:01:25:b7:5f:0d:
b3:b2:5f:9b:56:4a:1b:82:b9:7d:a9:91:c8:7e:45:
88:9f:ca:2b:b9:78:37:04:58:1c:84:82:ba:c3:df:
db:ce:39:4b:d5:32:30:02:69:2a:5f:4a:33:1d:7c:
42:3d:d7:3c:d2:22:46:ce:62:95:89:ce:57:67:08:
79:c6:70:ab:08:1e:a1:85:1c:95:f1:85:0b:ae:45:
4d:5c:e1:a4:7b:9c:22:a8:e2:b1:52:f1:c5:45:5b:
84:af:b4:87:20:60:62:1a:fe:2a:66:d0:ab:de:7d:
22:1c:ad:f6:27:d4:1f:18:e8:2b:79:bc:84:9c:fc:
43:40:ae:d0:7f:b2:72:cd:c1:49:70:01:dd:7b:e4:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B5:D6:7C:23:8E:A7:3E:6D:1A:2E:85:B9:8F:0D:4E:BB:7D:28:CF
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:15:7c:17:ac:45:65:79:e3:bb:63:cb:34:3c:de:3f:fc:e9:
aa:1f:11:93:db:c7:86:6c:12:88:d2:5d:33:51:f2:cc:30:16:
44:a3:59:2f:6b:69:0d:3e:bf:df:ee:2c:c7:34:d6:64:44:63:
9b:b6:f0:9a:3f:0a:3e:58:f6:56:d2:22:45:f8:6c:0f:d3:f5:
90:0e:90:39:ed:22:04:71:ac:69:7b:f7:1a:56:8c:4d:3f:aa:
78:88:ac:3b:68:4f:b4:19:b5:26:03:a0:13:bf:7e:7f:c5:5e:
34:45:aa:24:63:d9:70:39:16:d7:b1:2d:59:4d:35:27:79:02:
97:65:b8:25:8f:60:ce:b3:0f:55:b3:9d:9c:23:3d:1d:3c:40:
a5:f4:10:d2:07:3f:13:16:48:d1:81:a3:2d:c6:03:c6:3b:26:
18:5b:27:af:a3:d2:af:fb:38:ad:2d:cb:52:69:bd:a8:7f:8d:
ab:f8:87:dd:d4:db:bd:63:37:ad:7e:15:e7:36:fd:e4:be:aa:
ff:73:1f:c5:a2:cb:48:40:42:7f:0a:35:62:7e:9e:7c:4b:24:
52:54:ac:f5:2b:2a:fd:aa:4e:f2:48:a8:b5:37:42:4e:77:ec:
b9:97:84:d7:97:4e:3a:74:38:e6:57:76:4e:43:fd:66:58:fa:
6a:7b:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:46:35 2025 by rpki-client