Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: RFZwE+0miK28MixIDAMh4cVlcxe9utPkJJs3N/Tfa6s=
Subject key identifier: 99:0B:B7:A5:F3:42:F2:14:F1:11:3F:31:8C:64:3B:41:6A:C2:35:DD
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 0199575536FC96687363BAD4647307A8A0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0738
Signing time: Wed 17 Sep 2025 11:00:26 +0000
Manifest this update: Wed 17 Sep 2025 11:00:26 +0000
Manifest next update: Thu 18 Sep 2025 11:00:26 +0000
Files and hashes: 1: S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa (hash: Wj6L5jF5/gTOwMGZzw/KKTZV7RAbfIUF0qejcJRN4Ao=)
2: nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa (hash: jaTBLGxMAzmUNw1xz6jc+rhc56U1GYTnqK8npgQkUZU=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: hpVQQvfr/AkUb1owbaMJqXx9OYS3PKxl3vCtAgat9pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:55:36:fc:96:68:73:63:ba:d4:64:73:07:a8:a0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Sep 17 11:00:26 2025 GMT
Not After : Sep 18 11:00:26 2025 GMT
Subject: CN=990bb7a5f342f214f1113f318c643b416ac235dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:2c:3d:fb:36:f6:9c:65:07:0b:49:fb:60:
46:9a:c8:5e:fa:2d:ff:41:72:d9:10:8a:c4:0b:89:
97:d8:e9:6b:5d:fb:06:a9:60:1f:4a:c3:20:95:ea:
c7:17:54:0e:3d:c3:7f:88:ce:c5:0f:9a:5f:ff:3a:
1a:70:42:20:c5:64:d0:ab:2b:91:b1:1e:b8:6d:6c:
7a:ac:cf:47:a4:9e:c9:90:2f:6f:6d:d8:15:94:2d:
13:15:de:01:03:14:58:64:56:06:1c:a4:fb:ea:33:
97:4c:84:c8:1e:5b:62:57:5c:36:48:9c:bb:90:93:
f5:ed:8c:31:f7:c1:bb:15:e6:65:96:c0:40:6c:4f:
ba:ea:d6:f3:aa:e7:3a:88:4b:e6:22:29:ed:67:53:
fc:8c:31:bb:6b:bb:75:55:bd:64:74:10:e1:01:64:
27:2c:4d:66:4b:d9:fa:c3:99:42:82:9b:a3:bd:3a:
c3:40:ea:9d:82:82:a3:7a:e6:4e:88:de:61:95:c5:
2b:b1:d2:1a:4f:50:4d:28:91:e3:8b:55:4d:01:3e:
94:de:0e:ec:b5:80:1f:69:3c:29:b1:fd:d7:33:be:
a4:3b:28:cd:dd:28:0e:c9:41:a5:a1:be:df:a6:90:
bc:0a:63:89:f1:f9:ff:7c:b3:0e:82:c7:53:e7:60:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0B:B7:A5:F3:42:F2:14:F1:11:3F:31:8C:64:3B:41:6A:C2:35:DD
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:68:93:0c:24:92:77:86:c2:ea:38:05:70:b1:ad:63:82:47:
6b:da:89:9f:f5:6a:04:6d:d2:e7:bb:4b:be:74:17:7e:9b:c7:
05:c9:eb:de:a7:81:ff:cc:62:88:8b:26:d7:e9:20:a6:d2:c3:
f5:09:72:b0:dc:d1:2f:9c:9a:d1:85:1f:73:71:ef:dd:eb:4d:
8d:9b:0a:e9:7d:30:3d:52:c4:b8:fb:8f:f5:9a:26:a3:bd:e0:
be:6e:09:c1:f0:4a:57:ee:aa:2f:f6:7e:ac:35:d2:5f:37:cd:
c0:07:89:d7:e8:c2:44:83:68:af:ca:72:a7:62:1f:79:4a:cf:
a3:37:80:de:34:16:03:0f:8e:44:b2:f2:a9:56:04:55:34:13:
b5:5e:a4:cf:e1:a5:48:cd:75:a2:ec:1e:e2:3d:05:7d:42:ec:
f2:1e:c8:5f:32:72:a2:62:ff:f1:d9:39:39:7e:21:90:c7:e5:
b7:9b:ed:f6:91:35:c0:ad:82:7e:6e:51:f8:68:dd:23:be:ec:
93:36:e9:6e:9a:cf:a6:ad:ee:b5:fb:ce:27:c3:f8:93:11:7e:
6e:31:19:e8:59:d6:8d:9d:aa:56:32:66:7d:ff:4f:7d:2f:62:
dc:1e:71:b5:78:a7:95:85:78:b0:ca:ff:a4:44:88:f5:e2:8e:
19:8d:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 20:03:46 2025 by rpki-client