Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
File: yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json)
Hash identifier: Or3XQwnnO4r00lvyggFsgrRIIUQVGbo+Z5XPmW7NMZs=
Subject key identifier: 59:DA:21:9F:87:F0:58:40:52:99:DE:C9:E1:99:37:0B:4A:A3:A2:62
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Certificate issuer: /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial: 0199183F891C9090A240CB7D29E6FA604459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
Manifest number: 0D4C
Signing time: Fri 05 Sep 2025 05:00:40 +0000
Manifest this update: Fri 05 Sep 2025 05:00:40 +0000
Manifest next update: Sat 06 Sep 2025 05:00:40 +0000
Files and hashes: 1: jZJbW0BsVFzwOis1-qgAs4YgHTo.roa (hash: Sk/yWlF7AwtnMT+QuY5wwjFpUnvnxIEukFPcttfDcVM=)
2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: 0ULV9EaLhAC8+1PqG96iEZc+w319dOfEzH9Xj39tFxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:89:1c:90:90:a2:40:cb:7d:29:e6:fa:60:44:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Validity
Not Before: Sep 5 05:00:40 2025 GMT
Not After : Sep 6 05:00:40 2025 GMT
Subject: CN=59da219f87f058405299dec9e199370b4aa3a262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:92:38:b9:14:51:4d:0a:0e:a2:e6:b4:b1:
aa:20:91:c4:73:26:fd:25:a8:35:cf:c3:16:1d:16:
49:39:5e:1a:dd:38:bc:21:e7:5c:61:4b:a5:fa:60:
69:9a:2c:c3:99:0b:22:13:c2:32:be:b7:ec:44:c4:
fc:a0:37:57:3a:4c:12:93:9f:4b:10:9f:31:fa:2a:
85:0c:32:a2:ad:bd:40:56:6e:c6:64:0a:cc:3f:a5:
99:64:6f:71:41:1f:a6:4a:b0:27:92:9d:26:34:60:
7f:19:da:0a:35:98:5d:72:27:23:93:12:68:e4:21:
a6:94:4a:62:74:00:dc:fd:2a:f4:5d:5f:cd:25:d2:
dc:6c:73:e1:e1:aa:aa:6b:77:9f:62:eb:ba:9e:70:
85:81:53:23:6d:ed:c7:9a:86:d7:2f:04:be:0c:37:
f1:94:31:4b:49:55:46:e4:6b:77:c1:18:b0:b0:78:
86:19:2f:23:1e:fe:b5:3a:4e:31:3d:f5:ef:9d:5b:
b8:4f:df:ad:a6:ab:f0:54:66:80:4e:69:92:09:a5:
09:73:8d:07:f2:1a:85:22:64:64:0d:4e:40:4a:b2:
0d:31:dd:20:f3:55:4d:a2:d1:a1:dc:83:f6:25:d6:
3b:a1:86:9b:e0:c8:39:0b:ad:a6:fc:b6:21:90:54:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:21:9F:87:F0:58:40:52:99:DE:C9:E1:99:37:0B:4A:A3:A2:62
X509v3 Authority Key Identifier:
keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:19:2e:4f:92:2e:45:5b:e2:05:2d:fb:cd:4b:bc:f9:a7:5f:
d4:44:f2:72:cf:3e:15:bf:36:5d:b5:5a:a4:c4:98:dd:08:82:
c4:32:c3:01:f5:c6:76:44:4e:2a:3f:41:71:e3:44:c4:12:92:
16:d4:47:df:45:7b:c2:ed:70:b7:ff:99:64:09:ff:9b:0f:0b:
10:4f:52:22:7c:0a:e5:92:76:3f:b1:70:30:b3:8a:81:8c:20:
3d:1f:bc:85:69:f1:00:ee:68:0b:3a:6b:7d:4b:b4:cd:3f:93:
7b:8e:c3:82:63:8c:3d:bc:6c:a0:d6:27:63:8b:6e:ed:b2:9d:
7f:75:5d:2e:19:47:25:6a:13:f5:45:55:15:65:f2:3c:fd:cd:
ce:57:54:54:e1:75:9c:82:3e:48:90:94:ec:55:ee:4e:17:9c:
bf:e8:fb:87:58:01:85:74:af:23:f7:c0:48:b1:70:ec:28:65:
ea:17:41:e1:6b:b2:58:f9:73:c0:91:4a:f5:e2:6b:b1:d0:64:
7a:18:53:ec:10:6e:af:c4:bb:28:7f:cc:2e:b9:7e:84:b2:0f:
0c:19:43:1e:1d:33:a8:81:b8:31:30:4b:f2:de:e7:3d:10:1d:
c0:a9:68:63:36:60:93:de:ab:ce:dd:ba:a7:a5:5f:a4:e1:7b:
f8:15:39:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:29 2025 by rpki-client