Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: nBmHAnbdzgAtJA9Y02VF76du5MWpgixs8M2TBtepDU8=
Subject key identifier: 81:80:D2:07:1F:BF:F4:44:D3:17:26:BA:F7:BB:E0:A9:6A:D4:7B:60
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 0199616C81A8E4B4A470F19BD759DC91170A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 0F40
Signing time: Fri 19 Sep 2025 10:02:04 +0000
Manifest this update: Fri 19 Sep 2025 10:02:04 +0000
Manifest next update: Sat 20 Sep 2025 10:02:04 +0000
Files and hashes: 1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: a4wf/fQ0NOQvl741Ra295EmW+9bDDNOV1LoAsDZDVeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6c:81:a8:e4:b4:a4:70:f1:9b:d7:59:dc:91:17:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Sep 19 10:02:04 2025 GMT
Not After : Sep 20 10:02:04 2025 GMT
Subject: CN=8180d2071fbff444d31726baf7bbe0a96ad47b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:22:65:92:a2:74:a8:2e:cc:e5:cf:64:a4:
da:11:16:ab:1e:cc:3e:1d:fe:f6:85:78:48:de:87:
96:3e:23:6b:cd:7c:fc:f0:fa:5c:58:f7:4c:3b:d9:
ed:ba:68:a3:a0:f1:1e:e4:ee:25:7b:c6:42:f3:7a:
3b:d0:af:ea:9b:d5:ec:45:df:15:96:f4:d5:79:5b:
0f:d2:85:35:ad:15:ba:74:56:4e:82:cb:da:22:dc:
d9:bb:35:86:59:44:fa:a7:db:77:29:b5:1d:30:58:
cf:ff:a5:2e:3a:f3:1f:7b:d0:aa:00:d9:1f:ef:db:
c3:c9:f4:37:34:d1:f0:60:a0:f7:ce:05:62:90:64:
ce:2b:2d:04:be:41:6e:75:8d:b0:c4:e2:6c:25:80:
c2:65:ef:e0:26:e4:ff:75:91:e5:6c:34:25:e0:57:
76:a4:97:c4:96:ee:bd:05:de:bd:97:4c:4b:59:13:
3b:c2:af:8f:79:c9:67:48:b9:0d:20:1d:30:e2:b2:
70:88:9d:0e:f6:b1:08:71:5d:7f:ce:7d:1d:3f:14:
99:15:09:1c:95:d0:b8:c9:87:d5:d5:9b:cb:44:35:
fe:be:ad:5b:fc:a0:6f:de:74:07:1e:b9:94:dc:34:
68:b9:b9:09:fd:44:f0:9d:c2:cb:97:68:70:23:5f:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:80:D2:07:1F:BF:F4:44:D3:17:26:BA:F7:BB:E0:A9:6A:D4:7B:60
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d9:53:65:19:ce:66:06:f5:84:2a:dd:54:54:07:91:1f:54:
d3:e4:9f:94:0f:96:9f:a4:3c:4b:f5:88:37:80:05:92:8d:af:
3b:2a:f0:60:d4:d0:83:ab:a1:04:62:8c:d7:52:73:b0:8a:81:
82:a8:a0:48:3c:14:61:b2:fc:12:46:b9:33:2f:6a:3d:d3:ca:
19:04:9d:7a:89:d2:0e:e3:39:20:a7:3c:b5:ff:59:d3:44:e7:
dd:d5:8c:c7:5b:28:aa:59:28:3c:47:b2:33:7b:41:6a:89:df:
86:12:b2:e5:36:56:83:f4:dd:78:6b:ea:da:4b:38:f8:d5:8e:
16:96:7a:7b:cb:6e:31:ac:a0:b9:16:11:d2:a4:42:ab:00:41:
f1:7f:d8:6a:1f:71:0c:64:41:43:54:75:d0:d2:4e:2c:47:96:
9b:90:80:6d:6e:9c:f0:fd:39:24:5f:ba:ae:a2:6d:e4:ad:b8:
88:5e:be:61:c7:83:40:6b:3c:15:63:93:93:8b:71:ab:c3:34:
01:34:b4:86:ac:10:2b:c4:c8:99:02:0a:90:17:59:80:05:9c:
10:87:ce:b5:65:2c:f1:a4:3b:1a:9b:ed:48:ac:d0:b7:dc:94:
db:e8:b9:70:0f:e4:42:77:57:5f:87:27:61:85:b5:72:52:21:
f6:23:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:03:20 2025 by rpki-client