
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
File: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json)
Hash identifier: IH8VaHm5Gf7OUmkUF6UeJTqxGE8kubT4EBaDXD7w6F0=
Subject key identifier: 54:3D:58:52:AF:DC:8D:CE:D5:B8:F6:15:23:C7:66:6F:E7:DF:90:73
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 01993500DA323306D3A84A6FD2E54747B60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
Manifest number: 1699
Signing time: Wed 10 Sep 2025 19:01:12 +0000
Manifest this update: Wed 10 Sep 2025 19:01:12 +0000
Manifest next update: Thu 11 Sep 2025 19:01:12 +0000
Files and hashes: 1: 3sMCPh_TSYY4GpOsXTf0kpJFJJE.roa (hash: REslMcuG9HXm7BovLzYOAaMUk36BGxFiDYcZuAUfor8=)
2: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: nZtJ/Aft5g8JNOMAled6+sDd4hVrAvVOi6UrUdMdU+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:da:32:33:06:d3:a8:4a:6f:d2:e5:47:47:b6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Sep 10 19:01:12 2025 GMT
Not After : Sep 11 19:01:12 2025 GMT
Subject: CN=543d5852afdc8dced5b8f61523c7666fe7df9073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:3f:e0:d8:82:37:9f:e2:08:14:e5:62:95:
c1:4a:c6:3c:6b:54:34:33:c3:46:c1:30:31:72:c9:
25:17:48:c1:ae:99:c0:e0:f9:bb:db:a2:ab:b3:bd:
4a:d6:a8:78:35:51:16:74:8a:f8:1d:aa:b7:4e:2c:
28:81:70:29:a6:52:20:bd:6e:f2:ce:cc:28:91:e3:
80:7e:91:7e:01:c5:dc:5e:98:55:c8:f2:d6:5c:59:
e4:db:32:5c:09:86:b2:cc:dd:cf:9b:d9:07:a3:20:
84:9f:ab:b3:25:cf:dc:d7:58:ff:7c:02:51:53:a1:
e0:72:89:c9:18:7a:93:e3:dd:d2:c7:19:54:21:84:
41:ad:e5:b0:60:43:0d:02:e7:c7:3b:12:9d:28:72:
0a:dd:14:a2:6a:08:9d:92:29:fb:a0:f0:68:32:a8:
4c:cf:1a:6c:75:a4:2d:33:7b:bc:65:ec:eb:10:b4:
df:1e:41:e1:4f:1e:a3:35:56:f9:8b:bf:aa:d8:02:
f1:1c:90:a4:82:31:5d:06:33:41:96:27:2d:d1:df:
82:d4:8d:06:6d:2b:a3:2b:0d:49:a8:9e:f0:78:2a:
59:b5:30:3a:24:a1:cf:f0:95:09:ac:fd:37:be:30:
0c:12:b1:aa:d4:60:ab:9f:02:aa:a3:81:bb:84:e6:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3D:58:52:AF:DC:8D:CE:D5:B8:F6:15:23:C7:66:6F:E7:DF:90:73
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bd:ab:d1:03:8d:a8:bc:ea:5a:b5:84:fe:1e:30:62:2e:49:
a2:f0:c6:98:51:33:e2:70:b3:e2:ba:b0:48:67:04:ca:93:97:
d1:a4:34:21:6a:3c:ba:6d:39:0c:2e:63:63:b0:2e:40:ec:fe:
72:8f:e4:7f:8d:33:af:2d:ac:29:b0:b1:41:c2:34:16:e7:08:
45:37:22:89:13:36:bf:5e:ba:da:9d:c4:a4:e6:78:9e:87:7e:
49:71:e1:0a:98:8a:d8:5f:79:c0:08:fc:0b:cc:04:e1:0a:fd:
29:43:d0:eb:e5:18:6f:82:d4:c6:a2:fa:54:25:97:2e:5d:ab:
1f:a9:f6:0c:56:e0:1d:3c:04:16:b5:50:f3:65:81:3d:9d:31:
c9:ad:37:87:1c:f5:3d:04:dc:56:ea:81:a2:67:f8:f8:d2:c0:
09:df:6e:71:0d:4c:10:b6:af:70:1e:a0:b8:d7:02:21:08:c0:
6f:fc:42:b3:43:09:57:ef:af:2a:9a:df:c6:2a:41:37:80:15:
5d:45:24:26:aa:ce:d4:df:d7:1d:57:97:33:af:06:8a:fc:78:
83:e1:6b:cd:f7:d0:91:cf:c7:27:04:13:1f:bc:29:f0:95:7f:
ab:23:b4:87:fc:1b:5f:79:ac:bb:00:3a:45:e6:96:3e:0a:d1:
84:50:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:33:05 2025 by rpki-client