Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier: 981cpNxAwRTbc8oAi6wEWViTEqAYvErMwBSekcDexwY=
Subject key identifier: 2B:F7:AA:67:15:EF:38:DF:4D:5C:9F:E5:99:B6:C9:76:92:F3:E9:61
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 0199221E29E253781B81D96A323607FEBC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number: 0E0B
Signing time: Sun 07 Sep 2025 03:00:25 +0000
Manifest this update: Sun 07 Sep 2025 03:00:25 +0000
Manifest next update: Mon 08 Sep 2025 03:00:25 +0000
Files and hashes: 1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=)
2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=)
3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: 7cDbYPhxu/ZuQnWCI1BhPuM9YTbsbTQWkYUJCNmczMY=)
4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:29:e2:53:78:1b:81:d9:6a:32:36:07:fe:bc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Sep 7 03:00:25 2025 GMT
Not After : Sep 8 03:00:25 2025 GMT
Subject: CN=2bf7aa6715ef38df4d5c9fe599b6c97692f3e961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:51:9e:a2:8b:a1:d6:2a:d6:8d:0a:d7:e5:09:
b3:7e:f9:1c:f2:95:55:ad:cf:45:c3:f9:01:04:08:
a5:71:f1:a3:da:88:3a:fb:62:c4:61:e8:20:12:ce:
68:5c:f0:89:38:fd:37:09:33:70:49:d2:81:53:f8:
a7:e9:37:82:f7:7b:c3:bd:0a:e7:8c:cc:e0:47:b9:
1d:e9:9f:bb:91:6b:b9:62:69:47:74:af:90:a9:9a:
c3:d1:f3:d7:42:2a:41:21:6f:17:f3:5c:f8:87:48:
85:32:5b:16:14:90:21:92:a0:83:6c:b0:ba:68:78:
26:62:28:61:50:0f:d1:92:92:3d:e8:5e:a8:de:43:
d9:7b:4f:1f:39:37:f0:42:a3:23:7a:7f:d5:32:d5:
26:7f:76:e1:56:3c:a0:eb:ee:21:72:8a:d2:2b:aa:
90:05:3a:b6:f0:aa:fe:c5:be:fd:c7:72:b3:1f:cb:
34:1c:67:06:4d:e9:82:07:0b:ce:ed:b7:de:90:62:
84:4f:ab:65:63:0e:fd:5f:e0:b3:25:27:5e:6f:49:
aa:74:cc:90:ae:63:02:69:cc:df:d8:cc:ea:06:a4:
09:83:4f:b6:33:23:9d:35:4c:8d:57:95:b5:34:28:
f0:1d:bd:78:5b:f0:05:aa:3d:e3:88:ae:5f:81:03:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F7:AA:67:15:EF:38:DF:4D:5C:9F:E5:99:B6:C9:76:92:F3:E9:61
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:83:9b:20:47:96:a1:ac:7d:eb:c0:02:c5:4b:aa:e5:97:3e:
58:2a:23:cf:ff:77:98:8a:36:fd:76:e3:c1:83:16:7e:aa:ff:
05:a8:f1:e9:23:68:7d:e3:ca:d9:13:b1:cc:59:ee:15:2a:89:
f9:7c:ef:b2:47:b9:ea:b1:7c:39:88:5e:eb:bd:ae:2c:6b:c0:
97:87:79:41:59:d2:41:b2:85:64:cd:6c:26:c0:44:1a:74:dc:
cc:5d:a6:c2:27:b0:70:35:79:1d:a0:63:23:f0:6a:50:fd:f0:
21:db:75:6d:cd:e2:83:d6:21:ef:ce:80:f1:ec:b2:c3:a0:ec:
7a:4b:36:70:be:8e:f4:95:b1:42:ed:02:e2:35:ac:ba:a2:fb:
b8:d2:4b:13:b6:e6:1f:89:3c:af:a2:7c:54:16:83:f8:60:25:
c6:5a:c6:97:fe:ad:4f:bd:b5:0e:69:66:32:18:bc:80:b7:b9:
c8:e3:c4:d1:18:c0:09:34:1d:4c:40:65:f8:ff:45:fd:21:13:
1d:c5:08:e7:46:a6:ef:56:45:c3:b3:90:68:1f:e3:6a:16:f6:
08:f4:c7:90:72:a9:08:2d:b2:82:76:2c:36:d4:12:62:28:01:
42:44:cb:b2:7b:e9:47:61:68:6b:6a:09:2b:17:7e:d5:47:41:
d8:2e:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:35 2025 by rpki-client