Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: AdPW8M2qFks7IHPNUHcbtrxPahDC7kWnnwfAbayT/WY=
Subject key identifier: 93:02:43:B6:83:93:A7:7F:5F:24:F5:54:1C:01:8E:F5:42:BF:10:86
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 01992255B421FBE69A6786A35F561AE1BEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 077E
Signing time: Sun 07 Sep 2025 04:01:05 +0000
Manifest this update: Sun 07 Sep 2025 04:01:05 +0000
Manifest next update: Mon 08 Sep 2025 04:01:05 +0000
Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: w4VB13bJB1cr5i4jcUNN8J4R+GwPwUqEYUzvIK1HNzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:b4:21:fb:e6:9a:67:86:a3:5f:56:1a:e1:be:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Sep 7 04:01:05 2025 GMT
Not After : Sep 8 04:01:05 2025 GMT
Subject: CN=930243b68393a77f5f24f5541c018ef542bf1086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:e9:47:58:e0:33:8d:20:6c:15:17:c7:65:
33:97:30:c8:b2:a3:c5:75:89:10:c8:65:32:dd:f7:
c8:6a:12:89:69:8c:e2:cb:ab:fa:64:e7:d4:12:66:
88:d8:9b:a0:2f:c2:ee:ec:ca:b9:74:3f:dc:6a:d6:
4e:33:ef:35:f5:45:0b:25:71:6b:da:f5:5d:15:6d:
a0:ac:0b:3c:33:94:2a:67:ee:6e:c2:3b:e8:3d:11:
f8:51:7f:1c:bc:9c:fc:e9:e6:fa:36:55:22:13:e3:
36:93:3e:61:de:6e:54:45:5c:e5:f2:21:59:4e:a7:
dd:dd:af:49:e9:5c:19:79:b3:8b:93:76:97:63:61:
8c:15:26:83:4f:f5:14:55:2f:24:20:13:30:8e:67:
7d:1b:2d:cf:03:9e:83:f5:a3:e2:75:a9:e1:30:cf:
55:af:da:d9:a3:3b:40:26:a8:b4:2d:8d:8e:85:86:
5d:9e:bc:31:b4:70:e8:54:92:31:93:2b:59:21:83:
44:79:65:b8:f8:79:6d:22:82:d7:bd:08:2c:bd:7e:
8d:0e:3d:5e:ac:75:c8:76:01:86:0d:ba:4b:14:fb:
e2:d9:89:1e:28:92:3e:f8:4e:ea:30:81:27:ae:ef:
7d:78:63:cd:59:78:9a:0f:aa:8d:b1:fb:e9:b5:62:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:02:43:B6:83:93:A7:7F:5F:24:F5:54:1C:01:8E:F5:42:BF:10:86
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bd:ae:a4:93:e2:41:43:0d:76:dd:a1:43:4a:da:e3:07:7a:
41:d9:fd:cc:29:71:bd:76:cf:20:53:77:cd:b8:ee:d8:40:64:
8d:fc:90:7c:ca:89:86:08:f8:60:7c:c4:df:2c:bc:b9:51:e4:
47:1b:e7:91:54:8f:1b:eb:b9:3e:9c:18:93:81:7c:e6:e8:d5:
87:c6:a2:40:84:cb:22:32:d3:33:ee:b8:67:db:25:9b:61:a6:
3d:30:47:28:35:56:8b:4a:af:78:c9:17:8a:ed:38:37:62:67:
59:e2:70:7c:79:06:0f:a5:cb:16:86:96:fe:98:f4:8a:9d:b9:
b8:d0:16:e8:8c:92:1b:c3:2a:53:e1:0c:c1:15:ab:7f:33:6e:
f3:5e:00:03:35:ee:1b:b3:ae:2a:c7:9a:f3:81:23:46:da:af:
ef:ad:fb:51:91:55:8a:e4:8a:3a:78:11:9d:ce:1e:5d:5c:46:
bc:7a:e6:b5:99:3b:de:de:80:eb:bb:7f:cd:4b:a8:f2:e9:48:
ce:44:c2:82:51:cd:5b:0d:de:b1:78:4d:e3:49:3c:6a:d2:c4:
9b:26:cf:3a:ef:0a:8c:e6:23:66:47:a3:ed:5c:94:c0:32:59:
0d:5c:6e:fa:04:17:17:af:0f:80:a9:93:2b:55:6f:6e:cf:9d:
de:ae:f6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:29 2025 by rpki-client