Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: x2PPlbsw/q+b2iBP2E249Jt65hDUxDw9iKoCo08Nrc0=
Subject key identifier: 6C:F6:34:F2:E5:31:0F:53:EE:23:45:71:2E:9C:CF:97:76:36:D7:76
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 0199228CD62A2BC3F9F243E8673B25FF042D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0ABF
Signing time: Sun 07 Sep 2025 05:01:19 +0000
Manifest this update: Sun 07 Sep 2025 05:01:19 +0000
Manifest next update: Mon 08 Sep 2025 05:01:19 +0000
Files and hashes: 1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: 6Ub/J8GqqCnzihEh8ILqgQI+nWrlOKWH7o72WySI5cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d6:2a:2b:c3:f9:f2:43:e8:67:3b:25:ff:04:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Sep 7 05:01:19 2025 GMT
Not After : Sep 8 05:01:19 2025 GMT
Subject: CN=6cf634f2e5310f53ee2345712e9ccf977636d776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:38:72:02:ba:6f:2a:1c:1f:1a:84:e0:6b:
11:f1:77:9d:60:da:32:0f:37:3f:73:a7:e0:9b:9b:
ea:ff:fa:9a:23:86:0b:3d:82:34:09:42:ad:c5:5f:
68:ab:f0:6d:a7:cc:9e:fe:83:d6:a6:1a:24:72:ba:
85:7b:10:fc:86:03:d9:e0:e4:69:47:78:3d:02:71:
56:df:b3:84:ea:95:c3:d9:e4:b4:ba:27:87:0c:72:
45:1b:be:72:7e:48:97:69:ac:18:e5:6c:4d:81:c2:
a1:d9:92:7e:d6:cf:47:57:ab:0d:f6:fd:e5:07:2f:
32:02:15:dc:99:26:9d:dc:80:74:fc:1b:ff:69:ef:
4b:89:38:8b:73:3a:f2:21:32:f3:dd:b2:0b:6e:43:
a7:a3:7f:3e:5c:af:02:c2:5f:a9:89:c8:d3:ca:27:
88:f2:87:88:1e:70:b4:ac:44:f9:a3:5f:5b:20:ec:
ee:da:7f:ec:a3:a7:b8:07:29:b2:8a:43:8b:6c:c7:
0f:59:61:c3:9b:f4:53:51:bd:17:41:8b:69:5e:e4:
c2:f5:0d:c6:03:ab:d8:32:da:ee:2c:ee:a0:64:d2:
1f:73:6e:cf:c0:48:cf:f9:de:99:2f:d3:43:b8:73:
24:11:e9:7b:08:5a:0b:c6:4e:64:56:76:d6:02:23:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:34:F2:E5:31:0F:53:EE:23:45:71:2E:9C:CF:97:76:36:D7:76
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1b:ca:14:70:ca:41:e8:ea:73:1b:94:ed:2e:55:6d:56:97:
bf:74:0f:16:33:ae:5e:b4:6d:bc:de:d8:e0:b1:33:a8:f2:f6:
4a:dc:a7:1b:eb:7a:5e:bf:c0:cc:8e:f6:df:b1:14:cc:1a:c3:
66:06:19:ac:d9:b3:1d:b5:29:3c:e2:df:d9:49:28:3b:bf:5f:
24:bb:d4:fb:59:3b:73:dc:06:c8:bf:55:9b:08:cb:43:47:e6:
4e:82:62:67:20:17:d5:e3:1e:61:de:01:63:ca:81:c8:99:5e:
ea:d0:32:6e:55:f5:7b:49:6a:a9:8f:1a:54:6f:01:14:65:3f:
21:35:e0:ed:61:68:12:b7:c9:13:e8:c0:80:01:e9:3a:3d:05:
78:b1:fc:c6:fe:58:9f:2e:8e:a2:51:fd:5d:3e:73:13:20:77:
ee:b8:60:59:4e:b1:75:3a:0c:8c:88:e8:77:8a:fb:9e:cb:49:
02:d5:de:7b:15:c7:eb:08:b1:c0:b6:b7:81:89:da:87:af:f8:
54:3c:9e:57:ef:bd:35:30:9d:e7:f6:56:78:23:81:93:da:bf:
47:41:41:62:f0:2d:76:1c:5e:89:f8:f8:0a:92:66:70:9b:d6:
8b:65:c3:4e:5c:94:4e:0e:1c:a8:f6:3f:48:5b:e0:23:40:23:
61:4c:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:12 2025 by rpki-client