Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier: NbKZ61TrLJGGCXjkjUxezVBuTryrRPgnchh+Y89LBQo=
Subject key identifier: 97:A3:D9:A2:17:D8:8F:66:50:0A:32:CE:6F:76:94:AD:48:79:8E:BC
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial: 01991E786656D14EE970D2732DBB9479A3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number: 15B4
Signing time: Sat 06 Sep 2025 10:00:30 +0000
Manifest this update: Sat 06 Sep 2025 10:00:30 +0000
Manifest next update: Sun 07 Sep 2025 10:00:30 +0000
Files and hashes: 1: iv4w_q_Q0lB1UAUD7TgMR_xxyYA.roa (hash: fMZ0QGK6B5sX/J++IQoulADhQ3kbWhx95qL8TpCZZ84=)
2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: iWcnR8g3m6m/LNCS450dCoC/faeQZBfeRUOsLcZ2KD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:78:66:56:d1:4e:e9:70:d2:73:2d:bb:94:79:a3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Validity
Not Before: Sep 6 10:00:30 2025 GMT
Not After : Sep 7 10:00:30 2025 GMT
Subject: CN=97a3d9a217d88f66500a32ce6f7694ad48798ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:57:be:a5:1c:2b:d3:a3:99:f6:e6:ad:ce:
28:c4:0e:4b:99:06:86:78:d1:38:f9:4e:10:3e:1e:
5b:d4:03:48:e8:65:7a:43:bf:21:26:34:0e:d6:15:
22:01:11:00:9c:fa:a0:1f:f6:4e:12:b5:5d:6d:5a:
c8:f8:5a:a4:e5:8f:58:5d:74:50:53:03:49:4a:9a:
0f:26:f9:1a:9c:8e:3b:fa:d7:a0:6f:c6:6c:0d:99:
3c:e1:4c:0d:46:62:d7:6e:f3:3a:b9:47:37:5d:8c:
ed:cf:af:1b:ea:d0:33:c5:52:9a:16:a2:4d:fe:fb:
0e:81:e6:cc:7e:96:72:77:1f:45:57:f5:67:83:0b:
da:97:fd:eb:90:1f:c0:3e:bd:ed:5b:c9:29:89:c6:
fa:8e:b0:53:3e:32:d1:7a:e7:41:56:f0:b6:63:db:
f3:7e:ae:d3:a1:b8:15:10:28:f6:58:0e:a3:31:21:
e2:be:a5:b8:9d:e3:30:f6:fd:78:6e:ff:5d:79:ed:
36:c0:87:4b:26:9e:dd:3b:1b:d0:a2:14:bf:ff:0e:
c9:62:c8:06:b4:71:19:5d:eb:39:8d:c2:d2:33:bb:
76:a4:05:5c:0b:37:c1:44:e9:6a:53:bd:89:9d:3d:
80:92:8c:2a:10:9e:a1:d0:2a:9f:10:02:d1:97:32:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A3:D9:A2:17:D8:8F:66:50:0A:32:CE:6F:76:94:AD:48:79:8E:BC
X509v3 Authority Key Identifier:
keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:87:6e:9b:e5:ff:47:1a:44:4e:45:6d:bb:e9:8a:77:9f:f8:
c6:60:e5:d9:d7:87:2c:38:82:92:f0:12:41:ce:72:d6:0d:3d:
6d:77:34:91:7d:03:06:82:d2:fb:9c:4d:57:b0:c9:9b:1c:0c:
2c:3d:a9:01:ef:9e:96:a4:33:3e:4b:a3:a7:9a:8f:08:6f:45:
44:f5:dd:51:dd:ac:0b:ff:d3:bd:62:c0:3f:7a:4a:0d:d3:ff:
7b:d0:97:f5:d1:37:4f:c6:34:d8:6c:3a:c7:57:26:1e:58:15:
d6:99:6a:22:19:5e:fa:0b:72:de:38:c0:4f:3c:7c:73:c9:70:
67:57:4a:d5:b8:20:cb:8a:2c:0e:d8:25:0d:63:4a:c4:c2:4d:
42:64:88:fc:34:54:98:3f:df:5c:7c:55:de:58:bb:3e:a6:0a:
ee:36:72:b0:ad:0b:d9:8b:c3:59:35:05:58:8e:dd:97:3f:4d:
09:e6:8c:24:20:50:70:69:87:2f:0a:2e:d9:e1:55:a0:db:01:
e6:43:e9:f2:b1:4e:0b:ea:bd:4a:90:91:9c:c6:f3:b1:be:6b:
b8:03:b5:20:d9:77:23:f3:d0:85:22:41:f8:e3:40:29:58:8d:
b1:28:62:7f:fc:24:92:e4:62:87:98:b5:88:36:73:f5:8a:20:
8b:d5:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:40:33 2025 by rpki-client