Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: RikxSWySLbY9PSZYUo3iZB/Jn2rzaPv3l3s3hUorpTM=
Subject key identifier: 06:EE:F2:7D:BA:E0:4C:08:34:3E:D9:1D:10:00:60:28:67:14:26:C5
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 019922C36196796F938C48A342AEBEDCF7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 1603
Signing time: Sun 07 Sep 2025 06:00:53 +0000
Manifest this update: Sun 07 Sep 2025 06:00:53 +0000
Manifest next update: Mon 08 Sep 2025 06:00:53 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: Cy5DVduPAvcqSUn7Mp3FOZji2JptJZAjWin4TO8WP9A=)
2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:61:96:79:6f:93:8c:48:a3:42:ae:be:dc:f7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Sep 7 06:00:53 2025 GMT
Not After : Sep 8 06:00:53 2025 GMT
Subject: CN=06eef27dbae04c08343ed91d10006028671426c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:04:66:1d:e9:09:e9:38:9b:8d:e3:a6:21:
15:c5:dd:fb:13:c5:5b:45:f4:be:6c:62:7f:3a:94:
4e:a3:0e:6c:f2:12:cd:c3:f7:63:4c:05:75:b9:4d:
8b:09:50:2e:bd:d9:3d:26:04:fd:ca:40:42:ca:87:
9f:2a:66:ab:93:af:11:b7:5c:69:41:e4:ba:5a:32:
e7:d7:d1:78:4b:97:c9:f6:d6:c7:47:ba:8a:93:fd:
85:5b:a8:bf:4a:66:12:24:fa:36:32:03:02:75:82:
43:84:c5:d5:c6:81:d9:02:5b:9d:f9:4e:26:16:bc:
a5:2a:24:40:50:34:dd:a5:4d:20:e7:39:d9:56:12:
c6:09:ae:3d:24:73:83:3c:ce:7c:72:cf:37:10:74:
39:b4:c0:1e:07:d4:b5:4b:05:a0:21:14:5d:d0:bf:
7f:5d:bc:52:8d:da:d6:9a:f2:79:a0:49:b2:1e:1b:
bc:6a:71:5a:a9:d7:51:47:bd:8f:65:42:f2:89:cc:
95:04:94:df:14:54:41:77:e7:36:bb:97:ef:c1:8b:
ec:e4:85:8e:b6:fe:ae:34:a0:44:67:cf:7c:2a:bf:
7d:6a:1d:15:08:bd:2e:2b:73:6e:c5:60:dc:bf:ef:
04:13:43:b6:28:aa:7f:9c:06:2d:f7:8e:08:e5:ce:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EE:F2:7D:BA:E0:4C:08:34:3E:D9:1D:10:00:60:28:67:14:26:C5
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e1:ed:31:fc:79:d3:0f:94:e7:bb:04:86:1a:6d:a5:8d:fe:
90:c8:58:57:f2:37:99:f7:42:a4:50:bf:32:71:82:35:de:c5:
58:38:cd:40:ff:e6:e2:f4:7c:de:fd:91:ff:8c:25:0b:e7:16:
f8:8b:fd:f8:4b:70:c1:0b:63:01:ab:bc:1e:8e:8e:55:8d:f1:
3a:30:ed:9f:0b:c8:ed:91:7d:5d:79:55:b6:1a:6d:a5:27:90:
4a:3e:af:96:6a:83:bc:bf:da:ee:3b:af:eb:81:96:76:5e:19:
9e:7b:0e:2b:05:be:ec:8f:08:46:66:4f:51:b5:c8:db:3e:70:
79:54:69:ff:7f:24:d9:ab:8e:58:7a:5f:72:b9:cd:48:8f:3d:
e9:95:f4:6f:64:88:ce:2a:bf:e0:69:09:c4:80:fc:af:53:7d:
da:ca:1c:4f:bd:db:a6:84:40:5d:96:9d:02:e2:ae:3d:80:61:
b3:c3:20:0e:66:c7:79:e8:43:72:e9:6b:87:6e:08:72:ff:ee:
bf:b9:cc:8e:21:fc:8e:ef:61:d9:a8:52:d8:0c:e8:82:2f:7c:
0b:d5:4c:12:17:54:10:25:bd:7c:d9:af:37:e2:b2:8e:16:0d:
06:dc:c3:ea:74:af:6b:e2:1c:0d:86:a1:fb:9d:f8:5c:aa:c2:
ad:89:7b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:07 2025 by rpki-client