Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
File: lYjYtMeqRamyzXN8YUhx63GBur4.mft (raw, json)
Hash identifier: 5xRwxB02T1vrtG6j7NxB6dOyteyIroR+Nx8X0pZ8X1E=
Subject key identifier: BF:E4:18:24:E2:EE:07:4D:83:F2:33:ED:69:80:69:92:7D:2A:65:ED
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 019933B76A953268F6B76993FAB87BC5AEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
Manifest number: 14DE
Signing time: Wed 10 Sep 2025 13:01:22 +0000
Manifest this update: Wed 10 Sep 2025 13:01:22 +0000
Manifest next update: Thu 11 Sep 2025 13:01:22 +0000
Files and hashes: 1: 3srpGduL_zOjHqnp8WJJguH4g-0.roa (hash: 0YdFBJ148GiXs/92XtOcHZ9J9KnY83sjjDOEJj+352E=)
2: 84Pxk_QK5F5c0pwgTDFWtDT7vwU.roa (hash: c1siOGR8KUDdej1OO9Qc6j+ELIH1wDjJz2kkSXEbu4c=)
3: 8kHzjF6JFCHpsRwergAzR6Hl5jY.roa (hash: mffmLDMT2QFZfhtMRkhlhhueq/UkFuS4pA75sqzvXFs=)
4: F89bS7qNe1rnaq_S9GGqTSzrLTM.roa (hash: l3wobnBJMDC08NMZEcgpSqpNWZr9JHGOo3k9DjoFPHM=)
5: lYjYtMeqRamyzXN8YUhx63GBur4.crl (hash: iCo2hu5Ff9U/Vez6vNuRdZs0lAY8lzOtAGa8uLUDkEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:6a:95:32:68:f6:b7:69:93:fa:b8:7b:c5:ae:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Sep 10 13:01:22 2025 GMT
Not After : Sep 11 13:01:22 2025 GMT
Subject: CN=bfe41824e2ee074d83f233ed698069927d2a65ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d7:5d:f4:53:70:87:65:99:75:d0:34:ee:22:
01:fb:05:16:2d:bc:98:76:4b:09:7e:6c:43:8b:c6:
05:98:78:52:50:da:3e:40:5d:1f:6e:d8:8d:dd:12:
4f:18:40:5e:8a:de:df:47:3c:be:a5:28:c9:d5:71:
44:71:5c:bd:1f:4c:81:b3:1b:5b:65:82:3a:c4:b5:
df:f3:5e:1e:34:62:6d:a1:28:3d:48:05:2b:5e:4a:
0c:cb:2b:c3:8e:ef:1c:82:ce:04:9d:db:51:9f:3a:
41:ed:a6:d2:34:5a:23:02:07:55:7c:c1:76:05:07:
d5:0d:de:87:40:97:e6:17:ef:7a:82:5c:62:3f:74:
6b:8e:06:11:7c:c1:1c:ea:b9:06:c2:9c:f2:41:8a:
32:46:9c:88:46:05:02:a3:e5:b8:66:95:6d:5b:a0:
36:c3:d1:98:e6:a7:28:64:65:82:45:37:46:ef:59:
5f:a5:f3:82:2a:ed:69:79:8e:9b:e2:e5:3f:ab:01:
bb:76:3d:10:2e:03:4f:e8:f6:fe:1e:b4:ac:a7:6a:
91:b9:72:20:4f:8b:34:63:11:6c:46:0f:d4:9d:ac:
58:e4:7e:34:6f:32:1e:33:f6:b7:82:b6:a6:73:c9:
38:2f:f0:9d:57:5b:6d:df:42:28:13:6e:de:ce:c9:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:18:24:E2:EE:07:4D:83:F2:33:ED:69:80:69:92:7D:2A:65:ED
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bc:29:67:f3:68:25:0c:9c:b1:b7:66:30:e8:88:aa:dc:c6:
88:f7:03:12:2b:a7:eb:1d:c5:cf:3a:f3:01:91:36:5b:11:5a:
f0:b6:b0:53:9f:52:eb:8b:7b:1c:bc:1c:67:25:24:68:71:f2:
31:1b:cf:2e:de:06:c5:c0:b8:22:6d:00:25:01:60:f2:8c:58:
84:d9:47:17:82:89:5b:c5:59:cc:97:ba:e6:c7:0b:d8:64:00:
65:3c:a4:c8:4d:cc:65:fb:2c:22:cb:0e:68:13:9d:fe:6d:26:
67:fd:40:b3:cd:08:5b:5c:9e:0f:db:db:30:85:97:49:c6:56:
10:7d:42:71:f5:35:66:0e:0a:6b:4e:3c:9b:e1:81:8f:3e:93:
6a:0b:a0:29:56:da:5b:6f:ee:82:93:1c:d4:ea:ba:3f:84:28:
68:bb:1a:e6:73:74:46:8b:c1:8e:25:b7:40:95:23:79:de:d2:
72:4d:c4:1e:ee:2b:cd:a4:72:e6:5b:2c:a2:de:db:e6:67:20:
76:6b:16:86:b2:00:d0:81:92:d5:e7:f7:66:c1:e1:b9:38:e2:
1b:84:f6:3a:a7:a7:45:95:cb:42:d2:79:5c:27:b4:d3:b3:bf:
b6:1c:69:86:60:c0:0c:f6:29:b3:e6:45:8f:07:3d:bb:fe:af:
26:6c:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:20:50 2025 by rpki-client