Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: LMyQ2M0DgM6K1+dEHcsFZ9rVX4fB6D3nHyNXMdQFvQ4=
Subject key identifier: 59:9E:65:47:11:13:60:B1:85:72:C3:37:41:93:BC:3B:9B:83:09:7F
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 01993BDE7472D22F7012338F222EE8D33139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 1335
Signing time: Fri 12 Sep 2025 03:00:58 +0000
Manifest this update: Fri 12 Sep 2025 03:00:58 +0000
Manifest next update: Sat 13 Sep 2025 03:00:58 +0000
Files and hashes: 1: XuX7uT8cb5cVhdOXna_jZRuc6JE.roa (hash: 6nSukjm2iQoWm9SssGRSJpva0KahTxgtp11M/o63UVs=)
2: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: 7r6F/AvANbUl7oUVJRrKA4f2+s8glB/yJzW7fCQ888I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:de:74:72:d2:2f:70:12:33:8f:22:2e:e8:d3:31:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Sep 12 03:00:58 2025 GMT
Not After : Sep 13 03:00:58 2025 GMT
Subject: CN=599e6547111360b18572c3374193bc3b9b83097f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:f3:86:a2:3c:5e:68:16:1d:ca:6b:b3:d2:
fa:fe:b0:68:85:23:8e:9f:ae:cc:b6:bb:5b:e6:a4:
f0:92:d5:4c:ca:c6:d9:5e:ec:c5:59:9d:8e:88:93:
4a:60:d8:09:5e:ee:f7:bc:13:ee:f6:fc:70:13:80:
6c:6b:f5:11:db:0d:19:31:39:3e:1e:e6:74:39:c7:
a0:2e:24:92:da:b1:38:16:78:3d:3a:ac:13:45:84:
c6:0f:76:8b:ae:72:3d:b1:e9:19:8c:61:cf:cf:cd:
27:13:e4:62:ba:d2:2d:b0:2a:05:83:1f:0b:c0:3d:
1e:3e:cf:7d:ec:ed:72:d7:49:c7:36:c5:38:a0:9c:
84:d3:b5:15:57:5d:0c:59:64:3a:e3:db:82:4b:48:
f3:20:8d:ee:2c:5c:7d:c8:1d:e1:9e:76:fd:ba:a9:
5f:ba:1a:53:62:64:a8:6a:b9:52:59:9a:01:7c:ed:
71:4a:c5:07:74:18:28:86:3b:e3:62:cf:48:ed:6c:
bf:6f:79:06:fb:06:ed:b1:c5:d7:a1:f8:89:98:0c:
3d:69:07:76:0f:51:2e:dc:e6:0a:5c:03:c9:14:86:
7a:9b:58:01:77:cb:26:98:72:d5:1b:ab:b2:f2:e9:
d1:fd:e8:47:40:98:da:5e:64:ce:ec:37:e4:d6:af:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9E:65:47:11:13:60:B1:85:72:C3:37:41:93:BC:3B:9B:83:09:7F
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1f:34:97:91:cc:30:87:80:fa:3f:91:63:ac:d1:f2:c6:0f:
c5:dc:86:9c:a3:9b:1a:00:32:4d:a8:2e:78:e2:9e:8b:b7:f0:
4c:c2:ab:b2:f3:b1:4b:58:09:2c:8e:80:42:fe:2e:49:ae:0c:
b1:a4:db:44:a5:1a:c0:c2:9e:a1:af:74:14:d6:51:d0:b1:ca:
01:52:7c:aa:ab:5c:f1:e3:c0:48:15:12:15:8b:44:d6:41:bb:
2e:0c:88:aa:e8:09:2a:fe:4f:06:4a:e1:8e:bb:75:69:99:86:
35:62:33:bf:0a:26:f5:4d:b3:a0:ae:44:3d:3c:c0:99:17:51:
e2:3e:cc:45:4f:33:59:8a:52:06:56:fb:2c:fd:05:db:e9:c0:
a7:48:72:e2:6d:92:95:71:c1:33:70:ac:a1:e4:0d:39:1a:f5:
a3:de:e2:49:f5:43:92:b4:36:dd:0f:89:c2:e5:c8:da:9a:df:
55:b6:da:b3:95:55:67:b5:67:56:5e:36:7c:9a:de:c8:7b:50:
a1:ad:4b:52:bd:34:eb:25:1d:fb:5c:30:5e:a0:22:e1:ac:f1:
5f:0c:82:5a:56:91:82:58:bc:81:9a:6d:f5:1d:ad:98:69:32:
9d:06:c7:d1:6e:36:52:02:5b:b7:72:cb:fb:8f:1b:16:8e:cc:
69:63:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 06:14:51 2025 by rpki-client