Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
File: YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json)
Hash identifier: LAnBqRCK+VCZszAO7xmy91b4BLHEw1zvn8ueF8p7/Bk=
Subject key identifier: 0D:46:AF:79:EC:C9:B8:81:91:C2:EF:1F:48:0A:E9:53:61:DA:48:D1
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial: 019922FAD73F426A122BDFB34127645E4CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:28 +0000
Manifest this update: Sun 07 Sep 2025 07:01:28 +0000
Manifest next update: Mon 08 Sep 2025 07:01:28 +0000
Files and hashes: 1: 28tlQOScTYbuODS8bt-3134oQ2Y.roa (hash: ApQAF8/smS+nlVeOZQ4fBnuRp2Hs4aD0ZCJCSWvoUVo=)
2: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: sXtD5nrjcDiymIMevKQWF/3WHa7FP/ftiCX6C2cgx7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d7:3f:42:6a:12:2b:df:b3:41:27:64:5e:4c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Validity
Not Before: Sep 7 07:01:28 2025 GMT
Not After : Sep 8 07:01:28 2025 GMT
Subject: CN=0d46af79ecc9b88191c2ef1f480ae95361da48d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:4b:32:ae:58:79:48:1c:40:f8:48:ba:4c:
90:a2:8d:12:5c:6c:ea:7f:df:df:ff:21:a2:b9:ab:
a0:3e:d9:50:0d:2b:c2:1b:76:97:49:fc:43:b6:38:
30:eb:5c:6d:24:d6:9b:b5:05:6c:89:77:3d:bc:cd:
9d:3e:5d:73:d5:86:d6:e4:d8:43:79:88:d2:f0:da:
b6:0b:c8:9a:71:b0:0f:22:ee:fc:e9:c2:5f:34:93:
d8:a9:e4:ba:2d:f2:46:03:c6:4e:7e:52:97:f9:89:
de:65:c2:96:10:64:3b:ea:5e:e8:d7:cf:35:37:8a:
c2:12:77:43:8b:f3:83:22:57:39:6a:10:78:79:58:
82:d7:1c:68:82:c1:cd:61:dc:b0:b0:18:d3:80:a8:
b3:81:32:69:8b:04:ba:89:bb:99:c8:60:4b:51:52:
65:4f:d7:b7:53:34:c6:d1:ad:ce:1a:00:ac:b8:ec:
cf:3c:6e:3a:93:1a:57:f4:81:a9:74:b3:c6:4d:2f:
98:5e:71:52:c1:0d:78:51:37:a9:b1:d1:77:31:63:
c3:b0:5e:6c:07:12:a3:2b:e0:64:b8:53:cb:4c:fd:
a9:d1:a9:33:c9:c0:0b:13:e6:9b:fd:71:66:2f:14:
fb:96:77:ee:bc:82:1c:27:a6:70:69:a3:3b:4f:92:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:46:AF:79:EC:C9:B8:81:91:C2:EF:1F:48:0A:E9:53:61:DA:48:D1
X509v3 Authority Key Identifier:
keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e1:b0:32:ae:70:25:7d:8c:92:86:ae:02:d2:1c:eb:10:07:
1e:56:96:8f:2c:47:32:47:e8:ae:1a:72:26:2e:5b:46:ea:18:
fb:7f:c6:df:a5:ba:d6:7c:95:d8:8f:b6:dc:15:30:84:54:22:
74:ca:30:a9:73:40:40:cb:da:ee:65:3e:c1:a0:c2:3c:aa:cd:
37:60:11:65:76:bd:3b:36:79:e0:ad:1b:de:a6:ef:da:64:1f:
69:03:c9:77:28:3d:6b:6e:45:c4:8d:03:00:5f:a7:e9:62:87:
d0:27:07:66:02:81:05:0c:19:63:69:79:ae:34:9f:00:d7:6e:
da:a8:8c:99:e3:02:6f:8a:22:09:a1:5a:e7:bf:1f:a2:fd:46:
79:8b:c5:9b:73:7f:07:92:c5:c8:02:8f:6f:a7:80:9a:3f:f1:
de:be:30:6c:bd:70:97:14:f2:61:13:37:a2:6e:e1:48:07:7c:
79:3e:e4:c4:73:37:7e:32:4c:6e:06:56:79:fd:cc:a7:8c:d5:
6b:0f:ba:69:45:90:a8:13:40:9c:24:db:2e:c3:5d:1b:b5:6e:
d6:85:b2:05:21:45:dd:e0:7f:c4:38:33:d1:ef:4e:7a:05:05:
3e:09:1e:f4:50:54:96:21:94:e8:b2:43:fa:43:5b:81:d3:af:
62:c7:64:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:37:38 2025 by rpki-client