Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
File: sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json)
Hash identifier: D3p7QUUIR9FfqPIJ5chw41JXJTIbqXWV1hZx6QYfMNY=
Subject key identifier: 13:4D:B2:0F:05:BB:38:FC:9E:A5:CA:E7:71:54:53:0A:E7:99:47:C6
Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
Certificate issuer: /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Certificate serial: 01993680AB63DCBE5520CDFCE51A28660CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
Manifest number: 03AA
Signing time: Thu 11 Sep 2025 02:00:26 +0000
Manifest this update: Thu 11 Sep 2025 02:00:26 +0000
Manifest next update: Fri 12 Sep 2025 02:00:26 +0000
Files and hashes: 1: OfdMOcUbbc7oEojb1zo08qkIRuQ.roa (hash: IicrU+y2VcBYbd4QyyTDfZZRjrYA59p1rvePkvFgFRg=)
2: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: ndkS1xuqvRCf6RYnolU2D+tttx76m/hUQS5a9p0xB40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:ab:63:dc:be:55:20:cd:fc:e5:1a:28:66:0c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Validity
Not Before: Sep 11 02:00:26 2025 GMT
Not After : Sep 12 02:00:26 2025 GMT
Subject: CN=134db20f05bb38fc9ea5cae77154530ae79947c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:ee:de:1a:9e:e3:b2:71:dc:d7:c1:02:9b:
74:9d:0a:fd:b2:ef:f2:50:fe:df:ed:b7:ec:cd:a3:
a8:0e:9c:f0:42:13:93:18:01:cf:a2:a3:bf:09:20:
06:cb:de:0e:4a:7e:fc:5d:10:33:e0:2d:33:f9:72:
ad:1b:4b:f7:e2:83:e3:4f:06:cc:cf:5d:31:db:1a:
4a:69:21:d5:bb:ec:24:22:f5:e9:a7:41:af:64:e8:
bd:95:4f:dd:a2:10:ed:aa:86:c2:22:a5:53:05:b1:
8c:8f:02:45:6a:f5:8d:5d:e7:b8:c9:02:30:c0:15:
a0:f0:0e:45:5d:28:80:52:5c:33:51:29:97:78:38:
e8:41:8c:da:53:7d:51:d5:49:c5:f9:73:51:3e:1f:
20:f8:82:43:00:e5:e8:cb:dc:c1:a9:ab:64:f9:2b:
14:d1:d1:c0:f5:30:11:89:b9:60:be:7a:f2:a9:93:
ed:67:54:1f:11:f9:b8:14:62:21:94:f8:02:da:94:
b3:29:09:8f:db:48:1d:09:33:58:04:56:e1:6a:84:
d9:fe:a2:10:f0:5b:1a:60:ab:fc:91:b1:af:3a:80:
22:9b:d9:6c:c0:e0:7a:2d:cf:a1:c3:da:d7:66:c0:
43:40:d4:ff:37:6d:3e:68:47:27:00:8b:f6:0d:38:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4D:B2:0F:05:BB:38:FC:9E:A5:CA:E7:71:54:53:0A:E7:99:47:C6
X509v3 Authority Key Identifier:
keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:da:75:46:0d:6b:8e:7c:71:74:8f:80:33:09:6f:06:db:b8:
da:35:8f:e8:bc:9b:ad:de:8a:85:ee:73:1c:e9:9c:d7:1c:db:
ed:4c:20:7f:46:a1:b2:20:e2:94:57:17:c3:eb:36:0f:8f:ea:
b1:cb:76:11:8b:b5:74:05:73:a2:c0:96:f5:0b:0e:b4:18:ba:
fb:a3:26:a8:c9:07:41:6b:ec:2e:ab:73:c8:ea:01:28:e3:bd:
9e:3e:ba:80:35:0e:f3:70:c7:79:49:44:1f:3e:d1:0b:83:e4:
01:9c:02:be:03:e8:d4:66:cf:36:d7:10:17:f7:df:bd:4c:d5:
d9:65:fe:81:c7:2c:14:49:79:1a:40:7d:5b:93:05:83:d4:ec:
aa:db:5a:15:fc:fc:23:a9:94:d6:e3:78:4c:48:32:22:94:97:
94:8b:f7:34:c8:77:4b:33:c7:2f:8b:84:64:7e:43:de:42:a7:
79:3e:93:7a:ce:4e:1c:61:82:a3:3c:0a:81:1e:12:ef:4b:39:
50:2f:a7:a9:a9:67:a0:a4:b8:89:b2:63:2e:9b:ad:d6:d4:fc:
51:8e:1b:d2:9f:15:9f:fc:b9:5f:0f:f6:d0:cf:35:2f:8b:6d:
8f:0e:07:a8:4d:3a:c6:15:d8:4b:0d:8d:06:c5:55:ff:d5:a9:
a8:c8:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:04:22 2025 by rpki-client