Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
File: YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json)
Hash identifier: O0IyvblYJSoIi2UiJHn5b2HhOLzyi9B4WpFj2cywj7o=
Subject key identifier: 32:B7:91:67:FE:C8:29:37:0F:DD:78:98:36:B1:27:7E:B9:93:F0:8D
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Certificate issuer: /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial: 019921E7AFE28FBDE75D2106B8BB0B23C3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
Manifest number: 1E
Signing time: Sun 07 Sep 2025 02:00:55 +0000
Manifest this update: Sun 07 Sep 2025 02:00:55 +0000
Manifest next update: Mon 08 Sep 2025 02:00:55 +0000
Files and hashes: 1: Gof8cYl_-_S4WvBztVMMpN2lO6Y.roa (hash: 6km18MyJ5IHTThvCW2WxtbASJyCxFy1OyHEgHJJtY7Y=)
2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: Pk/hevSOWXN1uzGC6LZjpf/bzUqQ/eANaSvrRf6D448=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:af:e2:8f:bd:e7:5d:21:06:b8:bb:0b:23:c3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
Validity
Not Before: Sep 7 02:00:55 2025 GMT
Not After : Sep 8 02:00:55 2025 GMT
Subject: CN=32b79167fec829370fdd789836b1277eb993f08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:18:cd:18:30:e6:36:3e:e2:ef:cb:20:5c:
33:4f:23:0b:af:9a:96:0a:11:6e:9c:c3:71:3d:8a:
e9:db:13:bf:5f:f7:56:31:ea:b7:ef:cc:59:10:15:
17:cc:7e:87:db:6b:29:9a:42:5c:a5:84:aa:20:34:
98:2b:70:d7:0d:1a:c1:84:a6:54:0c:1a:18:38:dd:
1c:01:7c:08:a2:ad:63:81:3a:8a:af:04:32:32:bb:
14:4b:6f:b5:be:f7:53:5b:08:14:b7:45:f8:67:b1:
b1:f6:d3:9d:a8:68:ba:65:2a:7e:7f:bd:62:1a:80:
a8:7f:40:eb:0f:e8:7f:03:ad:54:2b:88:5e:90:93:
a3:12:f4:81:b1:0c:f5:57:6a:c8:20:f8:05:2a:a6:
8e:c1:be:07:3f:d7:1d:ac:d0:d3:ff:b6:da:ce:67:
de:23:17:80:4e:52:9a:bd:0f:53:0a:55:a1:86:54:
89:d7:7f:fb:3f:d2:01:35:99:5c:70:87:b8:55:25:
ca:7a:23:48:fa:30:fc:af:6f:67:a3:e5:d1:7f:b4:
e5:64:5b:ef:08:c4:06:31:be:35:4f:71:db:e1:e0:
f9:1e:72:3e:e5:3e:39:2b:2d:6f:d7:b7:b2:45:69:
22:51:26:ba:73:e9:c5:6b:17:ae:2e:a0:45:d8:f5:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B7:91:67:FE:C8:29:37:0F:DD:78:98:36:B1:27:7E:B9:93:F0:8D
X509v3 Authority Key Identifier:
keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4f:35:01:3d:17:9b:fa:1f:69:2f:3a:ac:94:7f:11:0b:80:
64:93:a5:14:77:13:c5:d6:d8:cf:07:74:d1:70:b6:e3:0f:95:
5d:64:1a:ce:79:7a:71:f0:3c:26:b8:90:f4:b4:80:ac:e3:d4:
e9:8d:d2:52:6a:28:28:c1:3d:6c:ec:c5:04:45:70:cc:aa:a4:
b8:0d:69:dc:36:0f:3a:20:cb:16:5f:4e:e6:d2:f3:7c:a1:18:
db:8d:24:c9:40:51:86:42:5b:fb:23:e0:9d:c8:c1:54:ab:3e:
fc:9b:b5:d2:2b:a7:4b:a3:b9:c5:1b:44:36:9c:8b:ed:a4:9d:
51:08:81:58:7d:71:b6:03:7d:eb:1d:f1:34:e1:2a:a8:d9:99:
44:c3:4a:c2:a5:e1:8a:58:42:7d:35:d2:6e:a2:cc:e0:45:04:
88:75:ff:1f:cf:d7:67:8b:a1:34:af:fd:40:be:d8:18:59:5e:
d9:39:fa:ed:10:d4:f0:d4:69:31:40:c4:e8:83:dc:90:fd:a5:
b8:fe:be:da:49:74:38:33:b7:73:3d:b5:74:7e:f8:54:dc:78:
8c:c4:df:4d:a6:00:08:57:94:37:6e:2a:e7:f9:b5:35:14:06:
94:ea:81:bd:5d:35:6d:77:26:16:70:c3:79:4b:a7:15:68:3c:
2d:f0:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:11 2025 by rpki-client