Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
File: yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json)
Hash identifier: VH14jS2q3DtBIxkFCqe2k5xGNnt+mlBYq+k7oCN74qk=
Subject key identifier: 8D:BA:32:FB:48:DB:7E:7B:38:4A:07:08:1C:83:BC:52:2B:31:F3:D0
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Certificate issuer: /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial: 019923D6576FF10236887E71828370232478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
Manifest number: 0D10
Signing time: Sun 07 Sep 2025 11:01:13 +0000
Manifest this update: Sun 07 Sep 2025 11:01:13 +0000
Manifest next update: Mon 08 Sep 2025 11:01:13 +0000
Files and hashes: 1: xYOsm8BUsmYBwfKFXCGnakfV_m8.roa (hash: 061quaNl9U6/3ODiu8AkctDs7yOiVTs6PkYfEN9U9Cs=)
2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: rbr3sHiv6Rp8opSc8NNPuNIECEdUMx3/ibq3z/U87wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:57:6f:f1:02:36:88:7e:71:82:83:70:23:24:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
Validity
Not Before: Sep 7 11:01:13 2025 GMT
Not After : Sep 8 11:01:13 2025 GMT
Subject: CN=8dba32fb48db7e7b384a07081c83bc522b31f3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:c3:02:2c:96:9a:52:03:2f:36:45:b6:cd:
51:98:3d:2a:18:95:ce:1c:fa:15:1f:f9:ea:66:a3:
ab:81:d6:98:b7:f7:7a:bc:dc:48:f7:7d:dc:ca:ea:
80:6d:be:22:02:cc:ef:50:c0:7d:65:1e:1e:92:f9:
4f:6c:61:75:99:8f:81:39:1f:49:1b:73:43:bf:63:
f9:40:c5:85:cb:8a:fe:7a:e6:5d:0c:38:77:09:d9:
22:61:22:87:38:aa:c0:a7:1b:fc:6a:2d:15:4b:27:
55:5e:68:a8:53:22:57:ff:cb:09:9e:51:04:36:61:
97:de:a9:83:41:23:5d:38:a8:98:69:da:40:21:dd:
76:2d:5b:39:e8:45:ce:e0:4d:6f:b3:85:e8:3d:c4:
e5:ed:c2:01:32:d1:12:3a:3f:94:cc:56:33:11:aa:
cc:59:6f:1d:3b:e6:ef:ad:37:27:d2:8c:04:35:d2:
48:88:f2:36:83:10:dc:d7:68:1c:17:02:ed:09:a2:
42:e6:3c:18:fe:98:61:c4:d1:2a:37:0a:ef:2e:b3:
bc:c2:2e:84:2a:20:93:e1:3d:03:6b:a9:a2:51:33:
06:50:5a:9c:6a:38:34:a8:70:a4:92:d3:db:3f:78:
ce:8c:fe:ee:aa:61:fa:bb:86:4a:3d:33:e5:73:8d:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BA:32:FB:48:DB:7E:7B:38:4A:07:08:1C:83:BC:52:2B:31:F3:D0
X509v3 Authority Key Identifier:
keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f3:7e:ad:81:5b:51:c3:0e:56:95:b4:75:31:85:c1:72:96:
c9:3e:9b:50:ef:01:25:7c:2e:14:bd:3b:01:ac:e4:e0:8f:b1:
ee:c8:08:39:4b:1d:c3:f4:85:0e:3f:8a:48:49:01:41:4c:90:
16:b8:ed:1d:28:45:f2:e7:45:69:de:bf:7e:b4:4a:0d:6f:c3:
bd:c0:a4:b5:5d:e8:07:68:cb:24:0c:82:4e:ec:ec:46:9c:a3:
bc:e6:c7:01:dd:1e:08:b6:00:ed:c5:eb:7f:74:44:cb:6e:59:
a7:2e:05:af:11:15:b4:8a:a0:21:33:34:45:36:e6:78:5b:25:
75:b5:04:0c:ed:a4:34:97:ea:ed:f8:1f:bf:12:11:a2:11:27:
c1:0e:7a:16:a2:69:73:06:0a:64:6d:eb:f9:80:05:ac:8f:c2:
d4:b8:bc:27:57:2a:e6:2d:86:11:42:c1:20:f8:07:14:93:66:
60:0e:ae:37:a6:3a:13:8f:ae:15:2f:68:9b:2c:f4:77:60:2a:
7f:37:f3:2e:38:e5:d1:db:79:40:ab:ec:72:9e:1a:0e:b8:b2:
cb:19:03:00:3e:22:af:65:ce:ec:f4:66:31:af:11:06:c8:a3:
6b:bd:e6:11:04:e4:67:1d:cf:52:48:6a:3f:9a:36:65:5f:a8:
1a:83:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:19 2025 by rpki-client