Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier: ZgBF0IzvLzfmUWUpYcQ0ZMTQjCgibgbL8OeiaT6KYAk=
Subject key identifier: 97:D9:41:C2:48:36:3E:7A:C6:B7:60:3B:8D:F5:19:49:79:ED:D2:50
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial: 0199375C9FEDC554C0ECE7DEC0BD528208D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 06:00:41 +0000
Manifest this update: Thu 11 Sep 2025 06:00:41 +0000
Manifest next update: Fri 12 Sep 2025 06:00:41 +0000
Files and hashes: 1: vKmVyZKo1mVbWaxUYsU2k0zxDdU.roa (hash: gYV9eOLfrWkPtH6rFSHehM6qyeO4Oplr2KmQKju1kVs=)
2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: 7uT+k/g3Qz+abmZmJBFUjBdRUE991VwNKBDMMBimTGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:9f:ed:c5:54:c0:ec:e7:de:c0:bd:52:82:08:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
Validity
Not Before: Sep 11 06:00:41 2025 GMT
Not After : Sep 12 06:00:41 2025 GMT
Subject: CN=97d941c248363e7ac6b7603b8df5194979edd250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:ad:ca:2d:df:d7:7c:ca:3d:71:10:a0:68:
8c:1f:c8:1a:9a:82:e1:6e:e5:7f:8e:73:05:f1:b9:
e6:ef:c3:58:fd:33:f4:48:09:f3:50:39:5b:b7:f6:
fd:1a:a6:e5:48:9f:10:65:0e:0c:da:5b:e8:64:fa:
76:3d:c9:4b:43:6e:74:09:58:f6:fc:d1:7a:03:87:
21:11:d5:b9:01:04:af:49:ee:ad:33:a1:fa:dc:61:
36:e8:16:42:8a:11:ab:cc:28:55:59:13:aa:db:41:
15:95:53:9a:9c:c0:73:dd:ed:df:ab:42:ec:2e:1e:
51:eb:cf:b9:b1:0f:b0:fc:8c:bc:30:d5:14:ab:65:
0b:b6:1c:d4:d1:1a:f3:96:6c:eb:50:bc:07:fa:72:
86:f7:77:f9:be:e6:1b:cd:39:57:12:b1:8f:84:6a:
be:11:b0:6f:df:6f:2a:ed:88:26:87:c2:3e:c2:b9:
92:a5:4b:1d:7c:83:64:68:26:cc:88:bf:a5:0f:46:
10:4c:6b:69:68:a8:33:dd:5a:08:76:12:c1:98:72:
07:c0:73:52:48:a0:51:6d:87:72:c0:c9:fc:f7:18:
aa:9f:db:5c:b6:8c:f1:01:59:27:ba:2e:90:28:07:
77:51:62:eb:ad:c8:2e:26:7e:7c:db:cd:4e:81:9b:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D9:41:C2:48:36:3E:7A:C6:B7:60:3B:8D:F5:19:49:79:ED:D2:50
X509v3 Authority Key Identifier:
keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:37:68:73:b4:aa:59:f9:26:7f:6f:df:80:fd:ce:7d:d1:19:
fa:42:67:29:de:f5:f4:81:9a:e3:e1:f1:67:29:97:0c:5b:c8:
f0:f2:de:45:2b:4e:56:79:4d:59:2b:b3:98:26:94:55:ad:e5:
c8:98:fa:ef:48:ff:32:c2:2f:b7:d8:5b:39:1b:bd:50:19:88:
a8:42:b4:97:8f:ec:ee:90:75:02:9a:4b:56:fa:e5:42:1e:8d:
d3:6a:be:c7:09:09:bb:63:e4:a2:db:1a:19:63:2e:7f:b8:a2:
a4:e2:b9:46:c1:8d:42:8b:fb:34:cc:05:c1:6c:d5:0b:78:fb:
c9:ba:03:a9:8e:e1:67:16:8f:ec:38:03:fd:2f:8a:80:01:43:
1c:71:f9:24:58:82:40:28:ad:5b:1e:14:42:54:a9:89:60:ce:
c5:58:91:30:12:ee:7f:5b:04:9d:7e:52:c5:2e:3a:7f:73:ee:
16:4f:81:34:00:1f:3f:93:77:d9:0e:ac:f8:ba:fc:29:4c:26:
97:8a:53:18:00:15:3a:15:74:51:3e:00:6d:26:7a:3b:8f:5b:
31:5a:51:6c:51:fa:a5:8e:0f:c3:8b:f9:ab:4c:7a:f3:4b:d6:
6e:f6:ce:8e:90:ea:aa:df:8c:b7:64:f3:fe:46:29:45:42:8b:
62:b4:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:43:16 2025 by rpki-client