Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: 8nTL8MU0GpQLT8X43DbSrmUMBPxD/h+L5X0VOFUfkWo=
Subject key identifier: 39:15:AA:FD:7B:14:F7:4A:F8:B8:6F:82:37:EB:EA:3F:69:22:10:41
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 0198C6B68C4A0ECCACD5A759C854967182AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 09D5
Signing time: Wed 20 Aug 2025 09:01:48 +0000
Manifest this update: Wed 20 Aug 2025 09:01:48 +0000
Manifest next update: Thu 21 Aug 2025 09:01:48 +0000
Files and hashes: 1: 9-Jf83x4olz8Hfew1s_UNi3V90k.roa (hash: IKeSXJFCHy882FUnOTCs1ATh13Yeq7epWPgTRQh0CZE=)
2: ECPnWkDMI2_nTmbCZhDYVWDmDx4.roa (hash: Lpl7m/eZhYRN7DnJNG4Sw0QJsO8hvbMn/hQYBg/ViaI=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: oCPEVjEGUV/mcoqwsGYz+Cl7GDIXxtATo9xGApX0iOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:b6:8c:4a:0e:cc:ac:d5:a7:59:c8:54:96:71:82:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Aug 20 09:01:48 2025 GMT
Not After : Aug 21 09:01:48 2025 GMT
Subject: CN=3915aafd7b14f74af8b86f8237ebea3f69221041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:c4:c8:d8:59:44:f7:8f:6b:61:70:e6:e4:
93:df:2d:d9:e0:f9:5a:36:5a:df:30:b4:ab:72:a6:
f6:41:1d:f7:bd:78:cc:e2:02:0f:f6:60:0f:2b:87:
62:9a:70:93:62:cc:31:06:6a:43:14:37:54:e2:04:
80:ff:a5:5e:7e:de:ba:d3:ba:9a:70:83:97:85:9c:
e1:d2:d4:c9:de:98:8d:e3:4b:9a:06:5d:6d:60:5f:
f3:87:b1:a1:4f:5c:9c:da:f6:97:1b:c8:06:7a:24:
5b:07:f0:77:f4:48:6e:af:ec:db:69:d8:48:49:e4:
c4:3a:89:1a:6b:3f:68:b0:03:9e:0f:11:9a:22:c1:
7c:b4:6b:d7:80:74:9e:b8:ea:79:24:4a:e4:31:52:
c6:f8:24:b8:25:0e:c4:db:bb:0f:15:a2:b1:10:0c:
b1:5d:df:60:20:a3:96:48:84:fc:5a:8a:09:dc:f2:
67:1e:22:90:2d:97:3d:33:4e:7e:a5:78:1d:3e:27:
10:9f:7d:e8:40:03:06:21:7f:ca:12:d1:cc:36:46:
5b:2a:52:ae:79:06:5a:c4:40:0c:cf:12:9a:9a:34:
60:c4:9a:9c:4a:bc:60:92:35:7f:8e:a2:f1:09:a4:
db:52:c0:91:12:1b:fc:1f:fc:23:a4:e2:d5:fb:d8:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:15:AA:FD:7B:14:F7:4A:F8:B8:6F:82:37:EB:EA:3F:69:22:10:41
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f1:74:e9:55:4a:e8:f3:ea:c4:3b:2f:7e:98:7d:94:00:95:
1c:e8:c4:90:80:e0:5e:3e:df:b7:59:01:9b:13:ab:43:fd:54:
ae:32:8a:19:6a:ec:21:7b:1c:37:20:a7:c2:81:f9:f3:eb:d2:
b4:c4:7e:7c:82:13:42:8f:00:88:db:4f:20:e4:20:de:2b:3c:
ad:36:95:01:61:e3:b4:11:cf:af:98:4a:26:79:5c:73:12:1c:
1d:f4:64:69:b7:93:46:eb:2c:19:b5:37:ee:e1:db:cf:81:71:
12:8f:d0:55:c9:84:f1:1b:1b:83:b6:1b:4e:66:a4:4c:b4:31:
d4:8d:55:4f:7d:7b:e4:66:93:0d:0e:07:ee:5e:1c:dc:00:3b:
d2:20:b4:88:54:b0:03:c9:c8:74:3b:4c:de:e4:94:10:fe:54:
34:1b:be:32:c4:69:b5:d2:1d:53:ed:bb:c4:5f:b1:07:31:bb:
ce:e4:58:6c:d0:1f:ee:53:ad:2c:3d:3e:67:8f:02:34:53:85:
78:18:85:97:24:92:87:dc:87:3a:8d:70:ad:41:de:63:fc:ac:
7d:6d:4e:df:b4:ee:97:ae:57:43:45:3d:c2:a9:6d:b2:b6:91:
75:94:ab:86:6f:ef:b3:f4:0c:e1:73:91:b8:9c:f6:00:f6:23:
dc:35:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:34:15 2025 by rpki-client