Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: uZlyDe5EM62qihGlwUp0XrREBUnlH7T9sfyLdBGx0lM=
Subject key identifier: D4:D2:EE:3B:74:95:14:36:30:89:13:8C:35:07:16:21:EC:73:F8:6B
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 019951FA698AF49DEE3DD2E488ACA2E6680F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 168D
Signing time: Tue 16 Sep 2025 10:03:09 +0000
Manifest this update: Tue 16 Sep 2025 10:03:09 +0000
Manifest next update: Wed 17 Sep 2025 10:03:09 +0000
Files and hashes: 1: 6thBO5jod-S22ld5I7cCUqU9PPU.roa (hash: whhraWURnepuYYNpLNQlvK7It8S7aCrmfs8zXpfqsOc=)
2: bNZ4Q9wcD7yZAP2RwlbB4JNFkjQ.roa (hash: JZzkHPxKw9rE1eeiiSJfGm5FFzPkvIECAGzsNfZT2+0=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: Nv11HA0lheLDSdMG/kjqLfmkati9/XHu8AOLrFX5cNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:fa:69:8a:f4:9d:ee:3d:d2:e4:88:ac:a2:e6:68:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Sep 16 10:03:09 2025 GMT
Not After : Sep 17 10:03:09 2025 GMT
Subject: CN=d4d2ee3b749514363089138c35071621ec73f86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:ea:6a:98:69:e1:ba:46:9b:12:4d:6d:00:
3d:28:5f:a0:99:9c:f1:d5:6e:b9:fd:88:f3:c7:2f:
e6:86:11:a3:ef:db:60:72:86:cc:84:e6:1f:36:10:
68:f3:a8:11:68:3b:e9:5b:7d:36:20:92:11:e6:b2:
51:83:cd:bc:6d:f1:ee:f9:b9:fd:ea:20:7c:63:57:
60:98:7e:62:11:1b:2e:5c:25:8f:a6:82:20:cf:72:
ec:d2:ba:39:95:e0:ec:35:db:b9:3b:70:6f:d0:37:
e8:8b:53:66:3b:f0:ea:19:70:6a:b5:96:b9:a2:a3:
63:00:93:22:57:e9:20:59:ab:b0:9e:4b:0b:69:7f:
be:49:3d:d0:38:3b:16:2b:43:08:ae:71:c7:4d:c7:
7d:24:aa:3d:69:6d:51:da:e3:5b:8e:25:a9:14:8e:
e9:0c:6d:70:75:ad:b8:4c:b5:60:70:9b:c7:33:08:
4d:cd:94:57:99:b5:18:d3:c5:7d:f1:fc:1b:e9:c7:
7b:ef:db:2b:86:6b:1b:ff:a6:79:e2:52:b7:53:54:
84:b5:eb:9e:5f:bf:a5:47:7d:6c:14:ae:56:00:d5:
ce:d9:27:e0:a9:c7:88:a8:1c:69:69:39:92:5a:06:
cd:4e:04:ad:b1:6e:df:9e:af:45:d5:34:30:d3:97:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:EE:3B:74:95:14:36:30:89:13:8C:35:07:16:21:EC:73:F8:6B
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:88:2e:4f:01:b4:e8:d9:20:dc:d6:68:44:d1:68:ab:a8:87:
28:9b:80:d3:b6:a5:0d:4d:56:76:0a:82:07:4f:73:82:0a:e2:
bc:19:b8:65:5c:1b:de:0f:1c:5a:8c:02:7e:87:1e:a5:e9:d9:
b8:db:3c:e5:6e:19:91:91:2c:4b:13:fa:07:af:ce:45:d4:35:
89:fc:8d:b3:e0:14:dd:4a:2d:a3:51:42:fa:ed:30:77:00:47:
1f:d3:ea:98:31:7f:48:12:41:b2:12:30:39:18:fa:ac:d3:b1:
11:87:2d:8d:7e:51:dc:b0:a6:71:7a:55:f1:79:e5:a3:ec:e4:
e4:1f:75:71:cd:e1:9b:d6:3e:7e:da:62:20:74:4c:a3:04:83:
c3:7b:c2:3f:82:f7:7d:82:a2:a0:e1:02:6f:67:b7:e2:9e:43:
3d:e7:ce:e2:c2:01:8e:36:e8:45:b5:e1:f4:7b:f2:c0:58:61:
57:97:52:df:29:e8:b9:6e:e4:72:32:4a:3e:3d:ff:46:f8:9b:
be:3d:42:1a:f4:ab:b0:6d:25:ca:5b:09:bf:31:8f:41:b9:02:
57:27:42:0d:36:e4:17:e1:dc:36:5e:6a:03:91:78:db:25:af:
31:d9:29:bc:a4:98:e6:a1:e6:d5:60:5d:50:1f:0a:db:b9:22:
18:e5:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:00:05 2025 by rpki-client