Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
File: YFUCYwejbuxeaBw5SK71Oif5lzY.mft (raw, json)
Hash identifier: qZfE8LrzcqhaS52g9tI5ioSdykM2h5wGxdVcCQ2aLHI=
Subject key identifier: 59:F4:95:B6:39:61:7B:34:C7:27:CD:86:20:36:CB:63:ED:D6:04:D5
Authority key identifier: 60:55:02:63:07:A3:6E:EC:5E:68:1C:39:48:AE:F5:3A:27:F9:97:36
Certificate issuer: /CN=6055026307a36eec5e681c3948aef53a27f99736
Certificate serial: 01992367BBAB1D01FC28F322D58638036273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
Manifest number: 8E
Signing time: Sun 07 Sep 2025 09:00:24 +0000
Manifest this update: Sun 07 Sep 2025 09:00:24 +0000
Manifest next update: Mon 08 Sep 2025 09:00:24 +0000
Files and hashes: 1: 7jIqwtDbMy9vdRo0YUm5EEwEiSU.roa (hash: zcVysxxJ8InMIpqNYEgmGN9PoMJVnhc3HSBD/6SlWos=)
2: YFUCYwejbuxeaBw5SK71Oif5lzY.crl (hash: FH5CS+9YcOfst1ZE9Ysg5w2wWl7yKR/2h/mA6bIJ4iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:bb:ab:1d:01:fc:28:f3:22:d5:86:38:03:62:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6055026307a36eec5e681c3948aef53a27f99736
Validity
Not Before: Sep 7 09:00:24 2025 GMT
Not After : Sep 8 09:00:24 2025 GMT
Subject: CN=59f495b639617b34c727cd862036cb63edd604d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:46:9e:f7:67:39:10:46:33:d5:5d:63:48:
01:04:90:28:3c:cb:bc:c3:fc:3f:ca:0b:99:6f:f5:
1f:fa:02:84:00:5b:1e:b4:38:ac:d2:fa:94:4d:73:
37:9d:ef:13:1e:7e:20:0e:9e:54:45:01:2e:db:23:
0b:b2:b4:f3:4d:b4:cc:94:7c:46:c0:f1:46:eb:75:
ba:d8:b5:bb:2c:d5:bc:42:18:e8:05:b3:ce:ea:97:
7c:d4:11:cb:f2:28:5b:52:ee:8a:60:c0:31:3d:3c:
e0:a7:7c:40:9b:1b:a3:38:09:2c:84:cf:a3:14:92:
e4:e9:38:85:c5:f6:e3:8a:f4:55:53:e1:33:28:fe:
2e:b4:06:c3:e0:67:1c:17:50:9c:eb:11:70:bd:50:
39:51:3f:17:77:08:be:ab:ae:4e:51:35:74:f5:74:
b4:4e:4f:85:0c:b9:9d:c8:b8:df:7f:a1:74:06:e7:
49:4f:41:32:8e:ba:f3:be:c9:fe:6b:12:37:eb:28:
57:77:49:26:59:05:f0:93:88:34:3f:d0:4b:4a:19:
6d:2c:53:25:dd:6d:06:91:c0:b7:d8:47:62:58:50:
9c:de:58:9a:64:ed:4c:ce:78:b3:a7:20:8f:5a:3a:
21:8a:0e:e3:db:02:32:d1:22:52:1e:eb:b5:7f:c2:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F4:95:B6:39:61:7B:34:C7:27:CD:86:20:36:CB:63:ED:D6:04:D5
X509v3 Authority Key Identifier:
keyid:60:55:02:63:07:A3:6E:EC:5E:68:1C:39:48:AE:F5:3A:27:F9:97:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8b:f1:d9:ca:ba:52:6e:30:a2:58:6f:d7:0b:77:34:a8:26:
33:75:9e:a2:54:f9:0d:96:78:d5:6a:28:13:87:24:1a:38:ab:
1a:fd:9e:88:c7:d1:95:1a:d9:9f:ea:c4:e0:21:88:bb:95:73:
9e:87:e7:ba:07:cb:2e:8e:b4:ba:95:83:12:fe:dc:6e:b0:b0:
5f:c4:b4:3a:86:fd:81:e8:d1:35:a6:5c:44:83:b3:4d:86:ef:
17:e3:a5:13:e1:2e:84:f1:16:5c:9e:01:dd:16:a3:f4:73:0b:
4d:c9:bd:f7:a0:a5:5e:ff:4e:88:7a:42:a4:fa:23:26:a1:58:
4a:11:e8:11:39:2f:ec:39:11:89:d3:0e:fd:03:76:2f:f8:bf:
fd:d7:3c:d3:a0:3a:b7:93:bc:7c:b0:82:13:db:9c:72:87:4e:
99:73:db:68:1c:a1:a0:6b:3f:b4:bb:f0:0c:ce:f8:05:4c:25:
30:c9:15:74:79:e1:e6:c5:d3:e9:bc:ee:b2:ff:45:d6:1e:6e:
7f:04:02:55:df:51:da:4a:2f:34:e6:9d:a8:79:23:2b:14:72:
93:4c:f5:c5:8d:c7:93:7a:cb:c5:fa:b8:8f:14:8a:c2:c0:e8:
53:13:84:3a:5f:0e:a2:5d:eb:d4:5a:55:be:04:f8:d8:3f:c3:
02:24:c1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:47 2025 by rpki-client