Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: gqutkGF1BZWFd1YjHxjXj7OQcaIhtUxcKctbXRT+i6A=
Subject key identifier: E4:84:5C:0F:63:9A:1D:85:89:0F:38:95:55:DA:39:F0:A0:09:EF:68
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 0199511C23A4CDBFBB83059726D746AC2299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 168B
Signing time: Tue 16 Sep 2025 06:00:22 +0000
Manifest this update: Tue 16 Sep 2025 06:00:22 +0000
Manifest next update: Wed 17 Sep 2025 06:00:22 +0000
Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
2: ddzuJKDdfBfD05pd5AAViQoA2Pc.roa (hash: 2lQWzIDIqMXuR/qxqLFrOSTAaFdBjF2vdhRCL0julW4=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: C/y0KKdwbkSVXxPMhdjnWbg2kgaZFrTbWmf3n34H2OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:1c:23:a4:cd:bf:bb:83:05:97:26:d7:46:ac:22:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Sep 16 06:00:22 2025 GMT
Not After : Sep 17 06:00:22 2025 GMT
Subject: CN=e4845c0f639a1d85890f389555da39f0a009ef68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:be:73:30:b5:18:3e:23:89:29:c8:de:a9:
05:7f:e1:fb:4a:94:ab:bc:2b:44:96:2f:88:75:fa:
6b:51:54:d8:08:1d:40:af:21:f3:9c:75:23:e2:04:
86:2a:8e:35:0f:1c:af:49:63:48:62:a3:11:fb:1d:
1d:b3:96:d1:5b:8c:c5:6a:ad:77:6e:54:fb:22:15:
61:c4:bd:06:51:10:15:bb:63:99:e7:10:44:9e:88:
06:c8:07:04:22:28:f4:e0:62:7c:5d:47:6a:6b:45:
cb:41:17:13:71:88:cd:8a:53:0e:ea:1f:2d:e2:76:
61:a7:0d:7f:8a:cf:af:3d:1a:4a:4c:42:bc:78:ae:
5c:93:07:4f:05:cc:fe:94:a3:4b:9b:90:45:fe:10:
15:d6:00:d0:92:c8:69:08:c6:ce:df:b4:72:1c:0e:
ea:ff:08:7e:bf:c3:ad:8e:99:54:7a:af:15:e6:c1:
2a:71:01:6b:b3:37:b4:cc:04:c7:32:b5:cf:58:3c:
11:f4:4c:24:5e:31:15:86:6a:88:ae:b1:58:e6:62:
85:62:34:07:be:da:42:84:82:92:eb:02:e4:1a:c8:
19:57:82:42:f5:cb:e9:89:6f:32:c7:ee:13:8b:fc:
7d:2f:4b:4d:60:35:7c:bb:34:6b:59:99:5d:a6:a1:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:84:5C:0F:63:9A:1D:85:89:0F:38:95:55:DA:39:F0:A0:09:EF:68
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:88:65:77:5e:a3:a4:da:9a:b7:f1:41:ce:b3:9b:90:dd:13:
0c:3f:cb:6c:69:d6:52:e2:26:e0:37:7a:1e:c3:2a:35:52:58:
b8:16:86:6b:ea:0e:88:fa:74:dc:f8:5a:63:2b:a0:34:37:9f:
c8:09:ea:e1:23:59:23:cd:30:16:5c:87:74:ae:31:52:24:bc:
7a:99:be:84:ee:2c:94:c8:7e:60:af:67:b4:32:7f:f9:cb:c5:
6e:bb:43:71:d4:e3:25:c9:71:42:e3:a8:79:57:6e:93:9d:49:
d0:7b:28:5b:90:a5:29:8c:84:20:88:df:62:ac:c0:02:bf:bf:
d9:35:ee:83:d1:9d:53:48:11:79:68:5d:4f:7d:0b:ca:12:09:
07:c0:b1:54:15:eb:fb:7e:a0:2c:e7:58:69:3a:22:eb:b9:b9:
d1:00:36:66:3d:a8:50:d3:ce:80:2f:7c:12:a7:f3:f8:4a:b5:
93:e4:96:a3:99:e8:ed:cc:0b:a1:90:32:74:73:73:f0:41:23:
92:88:75:67:3a:50:0f:0a:98:57:4e:38:ba:58:73:b2:08:a5:
8b:3b:75:83:8b:1d:51:91:15:1c:f3:93:ea:7e:54:06:24:f6:
51:6c:0c:a6:cf:7d:5d:61:1b:fb:79:0d:d8:8b:3c:4d:b0:37:
78:5e:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:48:31 2025 by rpki-client