Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: ivabQ45TiFtz5SDhp3OqU7rMxNdU402IoUJ3hMYrJEg=
Subject key identifier: 63:77:D3:18:01:C4:C6:6E:B6:67:68:E4:C3:17:38:31:0F:DE:13:C1
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 0199180996E04D3CC56AEBC3C3001703E58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 0EF3
Signing time: Fri 05 Sep 2025 04:01:45 +0000
Manifest this update: Fri 05 Sep 2025 04:01:45 +0000
Manifest next update: Sat 06 Sep 2025 04:01:45 +0000
Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: 29wrQ1y95oP6iy+xt6cB3PEEQQmIm/5pf9Wl/sqsRfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:96:e0:4d:3c:c5:6a:eb:c3:c3:00:17:03:e5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Sep 5 04:01:45 2025 GMT
Not After : Sep 6 04:01:45 2025 GMT
Subject: CN=6377d31801c4c66eb66768e4c31738310fde13c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:03:a7:5d:75:ac:2d:12:32:14:10:de:92:
bc:16:0c:dd:df:6b:79:dc:68:dc:20:11:8c:45:c0:
91:5b:05:6a:40:1d:6d:36:5a:7d:a9:8f:68:6e:2b:
aa:ae:53:12:ba:d7:95:70:9e:75:51:8b:e7:1d:4a:
ff:be:e0:f3:e8:18:24:1a:46:d9:35:1a:7a:60:9b:
5f:b2:7a:14:57:35:ae:16:1b:b1:74:39:bc:17:13:
b3:36:d0:40:30:f1:96:d3:21:92:8d:74:6d:2f:f5:
7a:a7:33:65:c3:d2:9a:b7:eb:58:fd:b9:22:24:b5:
56:f3:14:ae:a1:e9:bd:76:21:c9:1f:b4:57:d4:51:
7c:7c:f0:c4:b4:e1:bd:f3:da:76:93:45:c5:fc:a0:
8b:10:4e:71:73:db:9a:ff:cd:ef:05:02:b1:f3:21:
e0:07:79:77:68:08:b6:46:9b:a8:37:b3:66:2f:33:
56:a9:30:c2:e2:a7:15:cf:7d:f4:0b:17:de:ec:15:
e5:e8:0a:75:78:c4:b9:1b:ad:d1:82:d6:f0:ab:80:
bf:95:2f:8d:cf:39:b8:50:69:52:34:16:75:c2:28:
b1:79:0a:a1:3e:6a:61:04:f2:26:1f:23:a4:4e:1c:
00:c3:88:c2:82:95:51:c9:14:d1:b5:2d:c2:d2:ee:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:77:D3:18:01:C4:C6:6E:B6:67:68:E4:C3:17:38:31:0F:DE:13:C1
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:74:8f:80:39:c1:08:ad:7e:34:86:b9:31:1f:de:ab:83:75:
bd:6e:f4:1a:f9:ef:a6:db:96:25:72:ef:5f:db:a2:fe:1c:df:
4d:68:17:56:12:0b:2a:79:02:63:86:e9:90:99:cf:52:e3:a8:
34:ee:7b:42:62:96:f1:fc:0a:c1:ca:1a:ab:92:11:a2:91:6c:
e5:2f:6e:2a:58:ee:31:a9:5f:79:32:c2:f0:d9:fa:29:5b:ee:
4e:ba:ef:8b:cf:f4:a6:75:4c:a1:17:c7:26:33:a0:a7:28:9b:
e6:94:c0:0c:5e:c8:98:9d:18:a3:7d:fc:59:bf:45:d4:e3:65:
3f:6f:f5:f1:48:0b:21:05:95:fe:4b:38:d6:ce:e7:a2:54:d5:
62:1b:ee:3b:0a:da:b9:49:89:4b:c2:4c:6c:31:88:87:6e:c8:
56:ed:51:54:c2:6d:4c:1c:bc:6a:71:a9:30:41:f7:09:4a:b8:
9a:48:17:ef:4c:ff:8f:97:a0:66:43:c8:f4:f3:44:e1:ba:e8:
d4:25:44:5c:c7:34:d1:2e:f4:44:72:86:e4:2b:7c:5f:c6:ae:
86:6d:b0:e2:f7:b3:be:6e:da:a5:27:bd:e5:c6:f7:55:0b:af:
86:de:a5:bd:b4:89:db:e1:3d:53:2b:fa:46:b5:b5:52:6d:e4:
9d:46:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:13 2025 by rpki-client