Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: MkbM5PNmDiLDVCdnT531KRxaoPNFzMaCr5I8+uKIeX0=
Subject key identifier: 31:E3:94:E1:EE:AB:97:43:90:0D:90:B4:94:13:A7:5B:12:89:CD:B7
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 01994DAE7B379B2F2A145D38DB7150A49F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 13D6
Signing time: Mon 15 Sep 2025 14:01:44 +0000
Manifest this update: Mon 15 Sep 2025 14:01:44 +0000
Manifest next update: Tue 16 Sep 2025 14:01:44 +0000
Files and hashes: 1: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (hash: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=)
2: S7ra6Ov-UpB_vWrQKASj1i2bpWU.roa (hash: kepYC+QCOG1xoHVARWHcfGe1QSDNXlo9WvXDhx0i4AA=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: nfZprNf3UV2MJ0+pZWwDfneSwca9NfHoremVLLWiwvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:ae:7b:37:9b:2f:2a:14:5d:38:db:71:50:a4:9f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Sep 15 14:01:44 2025 GMT
Not After : Sep 16 14:01:44 2025 GMT
Subject: CN=31e394e1eeab9743900d90b49413a75b1289cdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:de:8a:d5:25:8d:39:48:e4:29:7e:42:09:
e3:b7:b0:77:3a:dc:77:a5:66:99:47:b1:4f:3f:23:
09:b3:6d:e6:39:5d:9d:4a:ba:30:fb:ac:48:c4:cf:
70:b0:51:54:b3:95:57:aa:06:b2:1c:df:a8:27:30:
67:f5:db:dd:34:da:72:18:fb:ab:fc:27:be:d6:81:
e5:2f:8c:7b:5b:77:ce:84:92:2c:74:2d:f7:18:f1:
0c:41:91:50:d8:6b:15:23:24:05:de:b3:f7:ae:6c:
66:f0:c3:a2:4f:8c:fe:7e:94:45:b1:6e:1d:b8:7e:
0a:0d:59:9f:3c:b9:76:43:f9:61:aa:7c:a9:54:6e:
db:ca:b6:53:36:5c:3b:cd:06:e8:58:7f:16:bf:36:
7b:dd:a4:30:68:1a:af:59:68:a2:e3:d1:06:e9:a7:
e2:d4:d3:8d:45:b0:63:66:38:a5:c5:90:17:3c:b9:
f6:0c:b8:64:fe:c6:e0:ed:24:24:9d:f5:a5:74:d9:
e5:3a:1b:75:e5:1b:92:fd:12:9b:f0:03:f5:7e:ef:
af:6d:99:ba:7b:ec:f1:0b:66:92:3a:39:ce:b5:33:
cb:f8:77:69:cb:c9:d7:1a:ff:f5:77:25:64:25:ae:
07:88:34:a8:ff:53:49:1e:4d:8a:b9:4c:37:54:06:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E3:94:E1:EE:AB:97:43:90:0D:90:B4:94:13:A7:5B:12:89:CD:B7
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b8:c7:61:36:36:97:17:78:16:fb:cb:01:2d:18:17:83:8e:
e6:12:5d:18:de:7f:70:67:3e:20:57:40:54:0a:88:72:d0:5a:
9d:43:a2:81:8a:20:a4:51:3e:82:c4:56:fc:ab:c2:87:2b:44:
52:03:2a:62:e9:69:14:85:ac:07:d9:24:ad:98:7e:12:53:fd:
86:bf:de:64:31:a7:91:a5:7b:ec:12:ef:b2:4a:82:ab:50:51:
96:f2:ed:5d:ff:b5:db:7f:95:a4:d3:56:38:89:fd:ae:1c:c9:
66:ba:80:2f:3b:70:c9:b3:c2:df:49:9a:8c:18:d8:8c:1d:11:
0a:c3:5b:5c:0c:b7:d9:57:73:a4:f2:9b:2f:9d:e4:da:4c:00:
5c:71:e8:bb:77:28:c5:21:17:ec:ae:df:1e:d3:41:6c:04:c5:
63:e6:4c:bb:ab:1c:cd:ca:22:38:2d:21:6f:0d:7a:2b:91:f0:
1d:3e:21:f4:eb:0c:3c:f3:c0:5b:b8:c0:fe:60:35:3f:bc:5d:
9d:99:88:86:c2:ac:52:59:d5:3a:68:b1:df:b3:e6:d4:57:be:
09:20:60:d5:97:ed:9c:d8:0c:cf:75:7e:91:8d:20:ff:af:43:
c9:ea:3b:e3:ef:07:c9:33:f2:02:7f:57:52:15:a1:0d:12:d4:
50:49:32:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 21:35:15 2025 by rpki-client