Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: k99owgGDrBRWAVi/2BT51rP//qlIsVeGzXzosgoMUKw=
Subject key identifier: 81:0A:38:44:E4:CE:29:32:31:C7:96:8A:F9:48:ED:3D:0F:22:EE:B7
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 01993649F8E2FE7724F3791809DE73F4319D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 167B
Signing time: Thu 11 Sep 2025 01:00:41 +0000
Manifest this update: Thu 11 Sep 2025 01:00:41 +0000
Manifest next update: Fri 12 Sep 2025 01:00:41 +0000
Files and hashes: 1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: 6+jH+TdpHxTVkthELapc9O5I75IAzRDv1+YfridL7cM=)
3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:49:f8:e2:fe:77:24:f3:79:18:09:de:73:f4:31:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Sep 11 01:00:41 2025 GMT
Not After : Sep 12 01:00:41 2025 GMT
Subject: CN=810a3844e4ce293231c7968af948ed3d0f22eeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:ca:a2:0b:a0:71:e5:3a:32:53:55:0e:5e:
21:69:09:58:92:8f:7d:f0:35:a8:0b:35:51:31:d8:
b5:c8:34:88:ee:f6:fa:10:3a:ae:3d:c2:64:68:23:
4a:28:d9:67:45:7f:f0:49:79:b3:06:b6:c9:4d:a9:
4b:a3:53:4c:a4:d6:b6:7a:bf:8d:47:bb:20:3d:7d:
b2:2e:b5:62:de:e6:ad:e7:48:cf:69:d0:97:7c:1f:
a8:45:ed:af:d9:4a:71:97:49:8a:a5:b3:42:dd:fa:
13:5a:bb:c8:7b:d0:0f:a7:4e:fa:ea:bb:ab:8a:9a:
52:24:75:cd:c8:4a:d0:13:9d:5d:ce:4c:54:94:94:
bc:2b:09:d6:7e:1c:40:48:5a:2a:62:2d:ab:cb:ce:
78:a3:2e:55:80:7c:69:4a:6a:86:02:56:51:d4:c1:
85:80:ee:3f:f4:85:39:e2:01:c8:d9:a5:82:b1:4b:
06:37:fa:14:e4:83:44:c0:6d:38:ba:4f:20:8d:e5:
52:70:8c:e4:61:8a:a5:61:ac:43:c5:a3:36:5c:3b:
c6:4b:95:26:a3:35:65:2f:30:6a:6f:12:4e:42:f4:
d4:5a:96:77:09:fd:36:23:e2:df:98:c2:6d:ad:ba:
56:e5:d7:d8:f2:a5:5b:40:f4:5d:d6:95:97:49:8c:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0A:38:44:E4:CE:29:32:31:C7:96:8A:F9:48:ED:3D:0F:22:EE:B7
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f4:32:35:87:ef:a1:a7:a5:0b:cd:7c:42:db:60:ec:a3:68:
e0:e1:27:31:a6:6c:5d:e3:22:1d:78:f5:73:69:a1:f9:53:52:
4e:88:53:93:13:c0:31:cf:f3:df:04:da:ca:0b:45:05:4d:cb:
41:35:b7:75:5d:9f:5e:4a:21:f0:52:02:a9:da:aa:ad:37:3c:
78:6a:a2:58:7e:52:e0:c7:94:a3:53:1e:94:e6:d2:6a:f7:82:
65:77:ba:14:76:c1:99:df:74:d1:02:a9:6f:06:44:93:e0:aa:
91:38:6b:43:cf:52:0a:e3:c4:3a:88:d8:3b:0d:00:8b:49:2f:
9d:e4:12:58:28:94:2f:c1:ff:af:1c:c2:50:16:3a:ed:64:a7:
1b:47:fe:0c:f1:05:4f:c2:b2:1d:56:ee:fa:30:5a:2f:64:9f:
cd:d1:4e:93:09:ec:7f:3a:ba:d9:c9:2d:0d:9d:f5:77:b9:9d:
08:e8:4d:b3:1a:ee:40:3a:33:85:ca:04:d7:2e:d7:23:8c:4a:
63:c1:91:15:68:22:15:fd:2c:6d:5c:67:85:34:b3:81:d4:27:
a5:35:4f:76:77:63:6d:8c:82:0c:9d:b4:de:bc:04:96:a9:93:
ad:a7:65:b6:69:dd:22:05:92:31:9b:04:6a:34:97:23:07:73:
1c:16:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:08:27 2025 by rpki-client