Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
File: YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft (raw, json)
Hash identifier: nsFR+dj9Z3htW1LtQiAKQrPVnaj7ZdcfY0FPUXrtX9Q=
Subject key identifier: 21:7F:A8:77:4C:C1:BC:F5:F1:95:2E:8A:45:1C:EB:3D:F0:D5:E1:50
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Certificate issuer: /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial: 0199356E04715E5509EBACFE51405E6FF48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
Manifest number: 0C0E
Signing time: Wed 10 Sep 2025 21:00:26 +0000
Manifest this update: Wed 10 Sep 2025 21:00:26 +0000
Manifest next update: Thu 11 Sep 2025 21:00:26 +0000
Files and hashes: 1: 4ohGnWINC3iPFe6nDpOqBOx7d2s.roa (hash: 9AbJKb6HLl4DZwmq7R7PVZTsMXxo/QDCXs2EgLL85AU=)
2: YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl (hash: yJSTStSitNcvMjHvmPYGpPW1Pwafc0mWPxOofubRpEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:04:71:5e:55:09:eb:ac:fe:51:40:5e:6f:f4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Validity
Not Before: Sep 10 21:00:26 2025 GMT
Not After : Sep 11 21:00:26 2025 GMT
Subject: CN=217fa8774cc1bcf5f1952e8a451ceb3df0d5e150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:5d:21:5a:6d:f0:2e:4e:cb:4c:e7:01:e1:
ea:1f:50:59:63:f4:aa:78:d8:25:4b:55:68:c1:36:
e0:7d:98:a6:0c:86:0a:0a:77:2a:db:27:61:69:07:
f1:d7:e1:d8:2b:3c:02:16:4d:63:cf:3d:a1:11:5c:
d6:f4:bf:25:f6:68:52:96:47:b7:a5:4e:4c:81:b1:
1a:c6:6a:a8:2f:e0:dd:06:ff:f6:f2:2b:c1:e3:31:
08:d1:a6:80:6c:48:f7:70:ea:4c:6b:f4:04:9b:59:
93:48:b3:b2:72:d1:8f:d0:72:a8:f9:8e:4f:d3:3b:
d7:89:85:3a:75:23:b6:13:43:c2:40:66:83:45:ec:
6b:b5:dd:55:e5:18:c7:ef:bb:58:0c:39:21:1e:30:
02:31:5d:87:5b:13:ff:01:8a:a1:8b:24:a0:a5:3c:
2f:19:71:87:21:8d:9e:a1:53:11:17:ed:f3:27:bc:
7f:3e:d9:f5:7f:29:0c:62:cc:d6:33:45:4c:e6:95:
e1:2c:3d:11:80:9f:0e:35:95:7a:71:85:02:f5:ca:
d7:f7:7a:3a:62:1e:29:fe:d1:7d:4c:b5:76:cf:ca:
69:c6:d3:c1:2a:0b:da:ad:f3:67:81:37:c8:c6:6b:
6a:fa:42:77:19:6c:42:90:bd:5c:13:e7:49:8c:6d:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:A8:77:4C:C1:BC:F5:F1:95:2E:8A:45:1C:EB:3D:F0:D5:E1:50
X509v3 Authority Key Identifier:
keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:17:59:f4:05:7e:9a:fc:51:cc:15:38:07:0b:84:41:fb:a0:
82:0f:01:0d:cd:3a:91:8e:c7:25:11:0f:8f:9c:10:34:7b:4e:
68:9d:6c:68:1b:28:fb:24:5f:fd:9d:94:f9:78:e8:f1:9d:96:
56:18:6a:82:27:9e:41:15:62:6b:2b:08:6c:ca:a8:bf:e0:98:
77:85:db:d8:f9:7d:0b:74:0a:0d:15:36:fc:fd:05:e6:3c:c2:
88:c3:13:30:7d:f8:ce:47:2f:0d:74:8a:55:c8:90:19:f2:2d:
64:a3:b9:4b:19:c5:09:26:44:47:22:ee:f5:f8:2d:db:35:3f:
13:ed:aa:23:85:0a:96:6f:a1:f2:f7:8f:7e:ef:67:f9:2c:71:
cd:f0:89:8c:a3:be:1b:a0:2c:73:26:33:aa:35:06:78:29:a5:
ad:31:60:5b:02:19:c9:d2:c0:98:7d:a7:f0:db:8f:b8:03:84:
e8:e3:d7:b8:c1:d7:6b:fc:58:34:2e:46:b1:e0:0c:1b:f9:3c:
fb:06:de:3c:bb:7e:81:fe:e9:66:47:c1:fe:50:7d:94:34:46:
f5:c3:0c:27:85:5a:08:da:a4:32:b8:c5:e3:df:c2:92:06:39:
5f:b3:41:56:0f:b4:97:4e:e9:b4:70:96:9c:92:6f:93:3a:8f:
2c:88:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:03:15 2025 by rpki-client