Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: DJmIO500WVJvjBRX24wXJqQawulr+EvqYOY/8M0WZWU=
Subject key identifier: 68:E5:4C:50:92:E2:93:A7:AB:B5:C2:07:71:DF:B2:2D:F0:E1:B5:4E
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 019922FA31962023CB0D43EAA8E13D2B9449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 14B8
Signing time: Sun 07 Sep 2025 07:00:46 +0000
Manifest this update: Sun 07 Sep 2025 07:00:46 +0000
Manifest next update: Mon 08 Sep 2025 07:00:46 +0000
Files and hashes: 1: Iq8sBOoYl2FdEDuOs7ZjqubA0mo.roa (hash: cKH71Gw8ENbKfDC7hsHD0Ixm5ykhTLruun3w+xwHV3U=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: 0huZMqULaf6EL67HyylCDupU0VYJ0V+0rtsr7pXyLfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:31:96:20:23:cb:0d:43:ea:a8:e1:3d:2b:94:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Sep 7 07:00:46 2025 GMT
Not After : Sep 8 07:00:46 2025 GMT
Subject: CN=68e54c5092e293a7abb5c20771dfb22df0e1b54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:de:e5:1a:a1:a7:2a:9a:aa:2d:77:4b:d4:
f5:90:d6:43:46:f0:ee:24:58:cf:65:21:fe:c2:41:
52:c4:37:6a:1b:23:93:43:a9:e3:44:83:de:b3:9f:
0a:d8:29:51:c5:99:a7:40:3d:9b:96:21:10:fd:82:
30:98:1e:d9:e9:54:6c:f4:61:d8:87:8a:c4:b0:0a:
4a:3a:29:cd:d0:fa:01:09:eb:ae:95:7f:55:d3:56:
18:31:fb:ef:83:6e:02:17:a2:fe:d7:3f:c7:ce:f9:
e3:af:37:28:19:58:50:68:0c:4a:f7:08:7b:d6:4f:
69:c6:46:f8:49:e8:b7:0d:22:0e:bc:76:00:f0:2b:
ba:1b:48:26:26:58:b0:65:2c:dd:a6:8a:50:6e:32:
1b:5a:49:5a:26:ed:9d:04:32:3f:3c:14:e4:0e:26:
90:d0:ff:c6:b4:8c:47:be:3e:a5:99:f6:f8:a2:ca:
64:13:ea:6f:53:d6:53:c3:9c:6d:f2:c9:fc:26:8a:
d3:86:d0:ba:fa:c6:d2:4d:c6:97:47:41:db:24:fb:
57:2d:a9:79:ee:12:dc:33:31:17:33:bf:7b:31:d9:
4b:d9:c2:ec:02:63:49:02:9d:3e:c0:50:44:99:8a:
f4:10:b2:35:15:43:0b:6d:6a:23:99:77:ae:9e:f8:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E5:4C:50:92:E2:93:A7:AB:B5:C2:07:71:DF:B2:2D:F0:E1:B5:4E
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a4:10:df:fb:25:cb:a0:f2:46:40:22:c4:b9:c9:0b:b9:b6:
88:c2:9c:ea:66:6d:f3:fc:10:53:8e:d5:3a:ab:30:87:2a:4e:
db:b8:d8:54:81:5e:a4:13:e3:3b:61:84:91:47:ba:37:3b:6b:
e6:26:83:58:f7:14:f8:c0:89:07:79:83:17:0e:12:5a:63:14:
07:e6:0d:fd:72:0d:f7:03:d3:78:11:c3:85:7c:fc:b8:01:93:
08:e6:01:de:96:67:2e:c4:d5:9d:ff:6a:15:6d:c1:4e:e2:ca:
e4:e2:3b:0d:fd:b0:c0:f0:d1:88:0f:84:98:99:7e:73:07:3d:
ab:97:1a:3f:82:e8:1c:2b:61:43:fb:2a:70:e6:ba:c8:5a:75:
5a:d3:51:b6:a9:eb:3c:6e:56:2a:38:11:f7:ed:d8:4f:eb:fc:
96:05:52:27:af:3b:b1:69:73:33:76:ff:72:a1:dc:fa:d8:94:
7b:45:98:fb:43:c3:7c:bb:21:b4:b8:b1:7a:26:b8:4b:4f:c8:
c2:a4:dc:76:aa:a1:32:8f:6e:64:f3:af:2b:ad:19:3b:4c:16:
a0:44:fc:44:9b:bc:aa:03:e3:73:ff:de:c7:0a:09:ad:b7:46:
9f:a8:f1:8f:a6:78:c6:40:b9:56:d5:c1:e8:1e:2f:2c:80:de:
e8:64:7b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:58 2025 by rpki-client