Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
File: yy2f-G42PbNNBVbsFkUfL38wPSQ.mft (raw, json)
Hash identifier: 5G+Oo16vDVjLqgCj2VvQHLIM60m8VkMsBP1d/RflMO8=
Subject key identifier: 7A:E8:D8:E5:94:4E:8D:CB:1E:5B:F2:5B:28:B2:64:F7:F7:14:39:B1
Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Certificate serial: 019935A4ED5CF67122208FAAE9A36061AE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 22:00:24 +0000
Manifest this update: Wed 10 Sep 2025 22:00:24 +0000
Manifest next update: Thu 11 Sep 2025 22:00:24 +0000
Files and hashes: 1: 92Huf3IHz49yEZcp8laODPaay4A.roa (hash: fHDvsxbqA8PNa+801vhXYVjpC3kLuwr6JG2deunc2nA=)
2: yy2f-G42PbNNBVbsFkUfL38wPSQ.crl (hash: 92HaMMiMWQ1+UQHMsWuiENOub8h4Akd4sUfddY4JLqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a4:ed:5c:f6:71:22:20:8f:aa:e9:a3:60:61:ae:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24
Validity
Not Before: Sep 10 22:00:24 2025 GMT
Not After : Sep 11 22:00:24 2025 GMT
Subject: CN=7ae8d8e5944e8dcb1e5bf25b28b264f7f71439b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:29:ed:7d:8f:fa:48:9c:68:3c:d7:1d:1d:
ee:2e:88:1b:33:50:fc:00:f3:60:b0:a4:5f:5e:65:
d2:7b:5c:b6:33:a0:a7:34:ea:d8:6d:c1:6d:11:ff:
9a:a9:c7:b8:a7:51:39:85:88:33:19:ae:44:de:49:
9f:fd:f8:a7:18:c1:05:6b:2b:0e:2f:fa:b4:8f:8c:
7c:e7:b8:8d:4c:59:5a:78:b7:a5:ef:f4:f2:72:81:
ac:bf:69:b6:dd:6a:8e:6f:b0:af:59:89:dc:56:1f:
b3:55:20:b1:c5:3d:90:52:f5:6b:0e:27:d9:f1:18:
7f:7d:b8:67:01:39:a6:3d:0e:86:35:d7:af:fa:c5:
67:ff:9d:b3:44:32:d1:a6:c9:e3:06:bc:be:32:84:
20:dc:76:3a:b1:37:a6:e5:da:0f:d2:29:f0:5d:39:
9c:e5:03:ac:7a:2a:05:1b:ae:a1:5a:4b:c8:11:cd:
cf:4b:a2:df:1c:48:84:a4:65:a1:11:e1:e6:4a:de:
f7:6b:ac:e7:aa:9c:3b:c8:8a:f5:68:89:4c:21:44:
63:6c:da:d3:f9:ce:1e:9b:ec:41:51:d9:9e:61:0c:
f0:f0:27:65:a8:ad:0c:e8:02:18:af:7e:8e:d4:52:
18:08:a3:90:e5:39:ea:79:f8:8e:10:67:bc:d8:03:
eb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E8:D8:E5:94:4E:8D:CB:1E:5B:F2:5B:28:B2:64:F7:F7:14:39:B1
X509v3 Authority Key Identifier:
keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b9:06:06:82:0d:7e:73:9c:7f:e2:dd:92:34:5a:a3:97:d8:
07:66:78:b8:e3:53:72:6f:04:fd:3b:61:77:b7:60:6a:63:7b:
7f:d6:09:1c:17:b7:0a:e5:9c:db:47:08:55:85:e7:6a:dc:0b:
43:eb:ec:dc:14:c9:7e:40:fe:fd:43:e3:f1:f5:a9:02:9d:6f:
6c:f7:ef:33:45:55:36:bd:b0:43:00:bf:e1:50:b5:01:d9:9c:
46:84:6a:69:6c:40:85:fc:f7:86:dd:c8:a8:89:8a:80:f0:99:
a2:05:fa:ae:aa:d9:9b:0e:7f:ef:c1:59:97:7a:cc:19:8c:1c:
a2:d7:7d:db:72:1e:e6:88:77:7b:03:16:24:db:34:fa:4c:9f:
b9:1a:01:b9:fa:be:31:e1:bb:8b:ab:02:88:d7:cd:70:8b:22:
11:34:18:97:49:36:7f:d3:e8:eb:9a:97:d5:d3:41:0f:12:27:
ab:1b:22:7b:b2:1f:bc:3d:6e:e0:f9:9e:8c:97:b5:bc:76:00:
f9:e7:15:8e:d0:1f:18:10:ce:a2:d5:46:53:84:b2:e0:ae:3d:
4b:a5:d2:5c:a0:73:fd:2c:09:ba:3f:26:49:59:2e:59:72:a6:
33:b0:bd:ab:14:a3:b3:69:b0:62:13:17:4d:f2:c2:f0:b6:d7:
1f:11:05:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:56:15 2025 by rpki-client