Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier: FiLSi7jwAr6awbrRrgRhKJhSIzOhFq9WeN+wtK/OJh4=
Subject key identifier: F0:D9:F4:EE:C3:F7:E6:F1:09:73:1C:62:46:94:D9:0D:52:83:DF:91
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial: 0199228C759DEE8443C5F2BB9BF8475FD0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number: 0D3B
Signing time: Sun 07 Sep 2025 05:00:54 +0000
Manifest this update: Sun 07 Sep 2025 05:00:54 +0000
Manifest next update: Mon 08 Sep 2025 05:00:54 +0000
Files and hashes: 1: O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa (hash: +gEwwbOSwfP86nIPB3Wi8wpxpGPoq4z6Qo3YWsrmtuQ=)
2: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: Vj2/pAmg3xHbGdzxtpUtsKA7T/0X//MB55r3Q0jGj50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:75:9d:ee:84:43:c5:f2:bb:9b:f8:47:5f:d0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
Validity
Not Before: Sep 7 05:00:54 2025 GMT
Not After : Sep 8 05:00:54 2025 GMT
Subject: CN=f0d9f4eec3f7e6f109731c624694d90d5283df91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:5c:7f:e5:73:85:34:4a:33:52:82:94:96:
89:c3:71:23:5e:49:27:5a:01:8b:09:7f:4b:66:53:
f0:6e:86:4c:fb:95:2d:e9:64:f1:61:3f:34:85:08:
80:d4:7a:b2:ba:ee:e9:64:2e:f8:66:a0:c3:50:50:
d9:3a:a4:34:a1:d1:58:d1:d4:45:4e:03:6b:a7:eb:
15:69:bb:00:57:e8:f5:a3:ce:89:8a:6c:4e:00:a6:
b9:81:22:70:d7:43:44:43:e7:70:c7:61:bf:b3:c6:
60:f2:87:35:29:f8:b2:3e:5f:e9:b1:70:76:e7:61:
36:93:ab:17:09:b6:c3:4b:ac:31:eb:0d:d5:06:ec:
fe:c0:e4:d7:dc:8e:9d:b4:1a:69:ef:ef:85:78:26:
ee:d9:a5:20:59:3f:0e:cf:9b:22:ad:a1:46:21:32:
39:c3:e9:c3:90:58:94:37:48:99:ea:1d:79:90:35:
39:08:59:dd:f4:db:63:a0:95:a7:c5:5e:b6:d0:53:
9e:e9:47:27:25:8c:7b:f6:4d:6d:d2:d5:fd:4c:44:
26:72:2f:ae:ab:c8:f6:6a:21:08:7c:f2:f6:e3:73:
86:a9:9f:e5:00:28:92:1d:fa:c3:39:f0:50:46:61:
98:76:52:3b:4a:47:37:43:3f:e0:63:e4:5f:84:d1:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D9:F4:EE:C3:F7:E6:F1:09:73:1C:62:46:94:D9:0D:52:83:DF:91
X509v3 Authority Key Identifier:
keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:22:78:c4:25:80:5e:46:09:b1:07:de:91:4e:23:6a:02:5b:
cb:be:30:71:39:0c:9c:28:69:b9:84:df:fb:6c:88:3c:95:f6:
57:3a:63:ee:7d:aa:07:0a:c1:8a:46:fb:01:4a:08:fa:01:e0:
e7:1d:67:a4:59:df:fb:32:cd:e6:42:f4:75:08:b6:ae:fb:d8:
dd:40:cf:87:e1:8e:ca:a2:95:d2:bb:60:19:ca:47:51:64:8b:
4a:05:2c:a5:44:fb:75:09:f7:21:e5:58:99:fc:0d:f7:22:85:
8d:13:f6:4a:78:25:6a:31:62:95:f2:f2:2a:f7:ac:de:1a:71:
4f:c6:c8:1d:44:00:68:b2:9c:25:50:36:0c:11:8d:dd:69:d8:
ab:0b:07:df:5f:ec:98:97:05:03:38:03:0a:da:48:72:0d:c8:
9b:4e:ab:2e:0a:15:a5:64:e8:da:7c:ec:24:f8:a6:d7:fc:de:
6b:84:e9:d3:95:c2:29:19:de:dc:14:59:2d:7c:52:63:b7:97:
24:92:35:c4:e6:c0:cd:a7:58:f1:fb:31:ae:e9:aa:f6:d9:bc:
bd:08:1b:8e:c4:74:87:ac:0b:7d:dd:51:ca:cd:f7:4f:4c:81:
1e:dc:23:7a:ea:11:24:42:4f:2e:70:68:7a:29:4a:a7:de:2f:
f4:60:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:41 2025 by rpki-client