Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: 3NXaOiJX7THxj7U/u3JnmCmqnHEuD+mS0PeAKq/4Twg=
Subject key identifier: 23:C1:24:EA:B1:E6:67:16:01:AB:C9:F9:AF:EB:F9:CB:41:7C:C7:26
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 0199233164AF0083CA4534FAABDB720F822F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 08:01:03 +0000
Manifest this update: Sun 07 Sep 2025 08:01:03 +0000
Manifest next update: Mon 08 Sep 2025 08:01:03 +0000
Files and hashes: 1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: 3hErWvucAMVYS/ZqN9JpxHTroaissvJ9VSlJ16rmiCE=)
2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:64:af:00:83:ca:45:34:fa:ab:db:72:0f:82:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Sep 7 08:01:03 2025 GMT
Not After : Sep 8 08:01:03 2025 GMT
Subject: CN=23c124eab1e6671601abc9f9afebf9cb417cc726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:fe:d8:f3:8e:94:3e:43:6c:96:63:bb:3b:
34:75:49:ea:17:b9:f1:50:e2:23:33:2a:90:70:4a:
7a:2a:46:23:6a:11:0f:58:34:63:87:ad:76:8a:1a:
05:e3:4b:38:c4:73:84:0d:54:c7:4d:99:76:37:7d:
08:32:ef:0f:85:36:c7:01:ca:e3:e8:d6:be:06:25:
1c:2c:65:e1:de:3e:6e:6e:06:c7:99:d3:30:a6:08:
02:b6:84:63:95:fc:55:61:80:2d:fe:9b:5e:a3:41:
ba:36:60:4d:30:45:9a:3b:2e:fb:91:06:4c:70:5f:
9f:a5:55:4c:e6:04:cb:a6:2b:60:ff:8c:3b:41:fd:
7f:ca:7c:5a:6d:62:f9:58:91:d5:2b:8d:2e:e7:f1:
c0:c9:a7:0e:e3:0b:de:1f:e4:fe:3c:f9:39:66:7f:
68:bc:c1:a3:9b:21:1d:db:f3:08:2f:26:32:9e:25:
bf:a4:38:36:96:7d:3e:b5:75:13:83:0d:7f:71:cb:
18:e0:b5:e8:41:e9:78:b2:49:e9:56:95:c5:1a:60:
ab:f7:1c:40:62:55:9d:4d:79:af:51:77:ca:48:a0:
9f:61:db:5d:a1:7c:46:f2:45:3d:0d:ec:be:0f:82:
b6:20:22:bf:de:11:5c:bd:06:65:98:f9:8c:da:ac:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C1:24:EA:B1:E6:67:16:01:AB:C9:F9:AF:EB:F9:CB:41:7C:C7:26
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:af:79:62:88:52:41:f6:ed:6d:d1:08:0a:cf:79:46:34:1c:
7a:71:2b:9e:8e:a9:5a:d8:88:7d:94:e5:6f:17:89:77:ec:f5:
10:ec:83:cc:46:3b:bb:a6:b6:13:38:b0:d7:e2:cd:26:d9:22:
f9:2b:37:16:90:27:24:2d:81:1e:e8:49:9f:35:1f:16:4e:e7:
28:f7:4e:35:0b:1a:4c:20:a5:78:72:0e:61:b1:d7:4e:c5:80:
91:30:1c:fb:ad:e3:37:35:21:c6:c1:13:84:f2:0e:b4:b7:bd:
52:cd:4a:3a:12:89:7c:c3:15:0b:ed:da:b4:b7:6a:9f:99:9a:
63:5e:76:0a:dc:6f:5b:94:38:44:63:0a:06:7a:a6:1b:69:ec:
91:c4:fe:06:fc:ac:3e:ac:3c:d0:26:00:23:7d:9c:3c:80:1b:
64:60:b8:0f:83:16:06:91:f0:81:f1:18:27:41:5b:23:07:78:
7b:6d:bf:50:52:3a:1a:b3:10:2f:81:db:7a:bd:d9:84:97:e8:
b9:67:e4:e2:d9:cc:eb:7e:c6:85:db:c4:13:cb:f4:43:be:e0:
6f:a9:44:2b:52:58:f8:19:ce:d4:89:22:be:ee:85:6a:56:15:
5e:68:08:43:46:de:fa:af:81:d2:d3:80:3d:6d:95:9e:12:ee:
db:33:50:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:33 2025 by rpki-client