Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: q6UVVPiE2SOBBOAUCWU1GYkFokdKdpTvWkO92aFN1fw=
Subject key identifier: 57:86:87:46:6D:A6:B8:DA:62:3F:17:76:62:5E:30:8F:C4:AE:DE:3E
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 019922557FA2F5D329D1A0BF4EC1027E86B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:00:52 +0000
Manifest this update: Sun 07 Sep 2025 04:00:52 +0000
Manifest next update: Mon 08 Sep 2025 04:00:52 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: gNAdg4suiNcqpCtdgEDZJY/rubH97fizESihX58+2Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:7f:a2:f5:d3:29:d1:a0:bf:4e:c1:02:7e:86:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Sep 7 04:00:52 2025 GMT
Not After : Sep 8 04:00:52 2025 GMT
Subject: CN=578687466da6b8da623f1776625e308fc4aede3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:01:f8:dc:1c:7f:0b:c6:b2:fb:4c:e2:cc:
00:6d:9d:83:41:33:9c:eb:a9:c1:0f:22:d5:16:30:
c9:40:26:26:a0:0e:9a:a5:44:3d:e0:c6:9f:62:dd:
9c:e5:41:e0:87:e6:1d:69:ea:91:6d:63:a7:a8:99:
d6:be:05:62:a2:3d:b7:f9:2b:18:78:0f:50:63:32:
5a:fa:cc:98:0a:95:f1:30:76:75:5d:91:94:16:a2:
10:57:36:b4:6e:a2:96:04:2b:cc:fa:04:12:a0:2c:
0c:91:76:4b:bd:c6:b7:c2:a8:a4:b1:49:4a:ec:35:
69:06:a1:39:64:de:e1:1b:70:29:08:a1:e2:0c:a7:
f8:7e:55:ff:0f:41:9c:67:80:0a:91:86:38:b0:69:
fe:18:02:08:ed:b8:d2:19:c7:b2:40:62:93:8b:3b:
a7:05:1f:b4:81:14:38:15:ae:c6:c2:14:36:6f:ac:
ba:db:47:f9:5c:63:db:7f:1f:94:c6:80:b9:0c:cd:
af:85:23:39:d1:2d:d0:d7:f2:01:b2:39:c0:e8:13:
b1:eb:9e:03:6f:e9:06:34:ac:38:a7:27:c9:5c:66:
47:fc:71:ab:f6:c4:0b:82:d4:aa:de:16:d2:38:81:
49:c5:4e:8d:92:06:12:59:6b:78:1e:fb:ca:d9:d7:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:86:87:46:6D:A6:B8:DA:62:3F:17:76:62:5E:30:8F:C4:AE:DE:3E
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6e:1c:33:5d:de:92:54:97:91:bc:fd:9a:39:49:b6:a7:2f:
99:d4:84:1f:d1:4c:b4:9c:7e:9a:75:c6:a2:3a:93:ce:f1:ee:
a8:8e:eb:2d:cf:be:d9:d7:a1:b8:a7:88:9e:3b:39:18:68:c1:
63:5a:d7:2d:3a:eb:57:c8:1b:67:f5:04:2d:1b:6f:a4:5e:ff:
22:42:22:aa:a6:7c:7e:17:43:a3:53:4f:f3:0d:1a:cc:7f:be:
cd:b0:06:d5:e8:d6:56:f0:56:e5:4b:be:dd:97:99:60:b7:c0:
c7:45:d7:14:6d:49:09:50:50:bd:7c:f6:b1:1e:f9:4b:89:95:
1c:0c:c4:6e:27:7f:4d:e7:08:3f:83:06:8c:ee:43:5b:7f:00:
68:b8:dd:f8:31:47:1a:94:85:f3:dd:2a:1d:6d:db:2f:07:ee:
d0:2d:f5:01:17:ef:13:ff:15:f0:d7:7c:2d:64:be:b9:d1:40:
0a:b8:24:8f:20:96:e9:7b:06:cb:86:d3:ed:89:1b:41:3c:05:
ae:81:e8:e1:ce:10:da:07:93:66:1e:93:39:b0:24:e0:a8:92:
69:02:12:b0:44:9f:64:f5:fa:69:13:a1:64:c4:ad:c5:65:f7:
e0:28:50:cb:1c:d1:4a:cf:e4:5b:be:98:90:2a:45:d1:55:86:
c9:7c:10:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:44 2025 by rpki-client