Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier: 31btn9sBF0HFd/R1TRu2zlSpgMPk5BWkXbzwovcRrrU=
Subject key identifier: 72:73:16:40:F1:D8:28:EF:74:22:A7:24:A9:80:58:02:1E:A3:1D:5B
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial: 0199228CF0B50F8AE21894531CC402CF8619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number: 0AE3
Signing time: Sun 07 Sep 2025 05:01:25 +0000
Manifest this update: Sun 07 Sep 2025 05:01:25 +0000
Manifest next update: Mon 08 Sep 2025 05:01:25 +0000
Files and hashes: 1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=)
2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: UPVD2gJ1g5cXhOqDw0dYQv9EZCsoiUtLYqnN0sxaKFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f0:b5:0f:8a:e2:18:94:53:1c:c4:02:cf:86:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Validity
Not Before: Sep 7 05:01:25 2025 GMT
Not After : Sep 8 05:01:25 2025 GMT
Subject: CN=72731640f1d828ef7422a724a98058021ea31d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:59:9d:30:a9:35:a4:3d:4a:c3:09:bc:e6:da:
26:5c:f3:42:a6:11:de:af:93:d1:6a:92:30:6c:7c:
5c:72:ac:20:3a:eb:59:fe:8c:d9:09:c3:46:66:f5:
ae:0d:95:8f:f9:58:e0:59:94:77:5b:95:4f:3b:51:
17:13:13:a3:05:2a:7a:ba:f9:6b:b5:cf:56:9a:79:
92:2c:a0:c4:97:ab:99:5e:5f:48:94:6b:b8:be:48:
c1:ef:14:6d:9e:53:18:11:2f:6e:b7:ea:46:de:41:
ab:ee:27:61:e8:70:80:28:43:4a:2e:dd:c8:19:ad:
c9:f1:a7:8b:e3:a7:bb:46:d7:71:86:c6:10:bb:6f:
e9:78:57:32:5d:6b:9e:67:0b:73:54:f5:f8:18:8c:
e9:a6:a8:57:53:20:49:56:49:85:45:56:1e:90:8a:
f6:9b:a3:36:17:64:fc:13:12:e4:0b:91:bd:d5:e4:
70:46:da:52:12:ad:a8:60:94:c0:c7:e6:7f:a2:c7:
5e:23:36:11:5a:30:79:66:3b:12:93:9d:ef:5c:8e:
f9:af:01:83:72:a4:59:1a:3a:5b:99:0c:d8:55:00:
0f:60:87:c9:01:cd:bd:c1:fd:72:3e:05:d2:d3:af:
87:fd:b4:0b:fe:2a:d6:60:81:85:14:99:fd:c7:e9:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:73:16:40:F1:D8:28:EF:74:22:A7:24:A9:80:58:02:1E:A3:1D:5B
X509v3 Authority Key Identifier:
keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:eb:27:c3:a6:27:66:8e:b7:66:55:d2:79:41:17:2d:02:c3:
1f:20:73:21:32:8b:71:24:be:55:9e:a5:67:a4:12:3c:b5:49:
85:f5:12:69:07:14:e4:ef:9a:e5:7f:5d:11:66:32:2e:3b:44:
7f:37:9a:c7:d7:9f:94:4e:d2:ef:03:b2:46:7a:fd:15:b4:0d:
44:e8:ef:11:c1:c0:dd:e4:33:cf:05:dd:44:c7:0d:f3:2b:03:
35:e3:3e:c5:d4:d6:6d:51:eb:d5:f1:9a:c8:3a:c3:78:7d:e1:
56:48:43:c5:b4:f8:24:43:49:7c:ea:27:2e:3a:fa:04:e7:92:
a6:39:d8:f0:d0:a7:02:7e:77:f7:95:25:00:d0:42:6a:f7:1c:
ff:7d:59:0f:da:92:65:26:0f:67:2e:d5:a0:d9:6c:ca:82:3a:
f1:97:38:67:3f:99:a7:92:00:11:c7:99:36:6c:78:ac:18:bd:
88:6c:56:3c:9e:e6:1e:c5:00:6e:34:b8:c9:96:5f:9a:a0:94:
0d:29:71:88:05:54:fd:9e:ec:ba:14:3c:a2:9b:38:b5:47:21:
b4:1e:f6:7a:3a:30:11:5a:a1:cd:8a:9b:fc:de:cb:31:d7:68:
39:47:a7:7b:13:bf:e5:6c:6b:ae:80:de:d1:5b:b3:fe:1d:84:
d9:57:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:45 2025 by rpki-client