Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File: yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier: l4SDz3HJWdWuahPaDq3GFouyOw72Op02XQiyr4HhGXQ=
Subject key identifier: A6:8A:DB:28:2E:61:E1:E9:B8:0D:F4:BB:86:6D:DE:79:89:10:31:FD
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer: /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial: 0198D583BA25B7D54AC52535493A28D38BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number: 039D
Signing time: Sat 23 Aug 2025 06:00:36 +0000
Manifest this update: Sat 23 Aug 2025 06:00:36 +0000
Manifest next update: Sun 24 Aug 2025 06:00:36 +0000
Files and hashes: 1: DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa (hash: wBdx6PRDwqiRs1k8IOdYm4GWe7EZE4vtyKYESIsAUKo=)
2: ItPmNdTjNgHqBxANMhUVH1DC5UU.roa (hash: QPQB5rA9kwVStlIhdq0li1+Di1amgsoq6BbyBsFXRrc=)
3: xKKq4SF6-ObtvfC7jpcnypKexwg.roa (hash: qw4y1FHQavkl3C0h/hnsN3/lIOTC2hyOIzm3AanVe3c=)
4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: nCSFmAt+MTkEkKfR+mqf5DEbUgYqAaZGPDLBhEmfolE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ba:25:b7:d5:4a:c5:25:35:49:3a:28:d3:8b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Validity
Not Before: Aug 23 06:00:36 2025 GMT
Not After : Aug 24 06:00:36 2025 GMT
Subject: CN=a68adb282e61e1e9b80df4bb866dde79891031fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:12:d3:03:2a:4b:ba:93:3e:0a:b5:dc:ef:
59:d6:54:59:f2:ec:bc:c2:e8:45:cc:62:2a:2c:9c:
c3:ab:ca:c0:b0:79:bc:0b:31:de:87:ad:56:78:62:
b9:41:21:a9:96:28:26:6f:83:fd:be:d1:3a:16:43:
40:54:53:b9:9c:9a:55:2d:16:2d:01:b2:cf:c2:fe:
d9:61:77:c3:a9:fb:6a:9d:b4:c8:5a:7d:f6:31:67:
5c:2b:68:5c:cb:d3:48:cf:fc:6c:59:b1:17:73:44:
92:6a:21:6b:56:1c:36:23:f6:40:a9:4e:d8:75:f9:
a1:8c:33:9d:c6:5e:93:6b:1d:ba:d1:07:8d:0c:07:
a6:32:7d:b7:99:a5:73:96:9e:84:44:38:66:bf:62:
27:c3:da:70:46:ba:ed:3c:5c:2b:38:d2:f1:6a:e7:
a9:dc:4b:b8:10:8b:b5:b4:04:50:88:06:65:21:25:
24:53:26:0c:bc:fc:3c:a5:4f:f3:eb:d3:39:15:04:
44:c1:4c:f0:34:5f:9f:69:36:f4:49:00:19:f1:20:
17:6f:7a:ee:e3:3a:82:b1:f2:ec:4d:91:d9:1c:83:
be:03:89:45:9f:6c:85:58:80:52:73:e3:67:31:d4:
47:b9:55:ac:87:e6:a7:41:5e:e2:c0:90:0c:1f:20:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8A:DB:28:2E:61:E1:E9:B8:0D:F4:BB:86:6D:DE:79:89:10:31:FD
X509v3 Authority Key Identifier:
keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c5:a7:dc:d1:75:fa:6f:3d:6c:22:99:d7:b3:85:61:9f:0c:
39:7a:47:ae:9a:82:bb:2c:3a:e1:a9:57:f4:4c:13:8f:bc:6b:
55:49:a9:38:1d:bc:e5:4e:32:34:e6:55:57:9f:2b:f5:b1:fe:
db:9a:c2:f0:fd:52:95:bd:db:54:4d:be:3f:2b:9d:ab:8c:e7:
88:b1:1d:e4:77:f1:13:c3:43:87:01:5d:bf:1b:5f:f3:44:b4:
61:a2:59:93:94:8b:bc:fc:39:49:b1:6a:34:9f:0c:cd:9b:f0:
eb:f3:dd:17:1a:6f:a9:e4:ee:dc:7f:fc:05:8a:2a:19:1e:e9:
ce:92:4c:29:96:4d:c7:a1:09:b2:d5:17:e4:21:10:45:65:7e:
4b:04:29:7a:2b:f1:ca:8e:af:cc:84:82:b1:80:7e:d9:95:bc:
b3:c6:48:f2:63:4f:93:ec:79:53:5d:c4:22:a8:3e:64:1a:e7:
43:d5:9a:4b:45:84:99:ae:18:b7:37:46:5a:ec:8e:f9:b4:64:
18:14:fc:c2:bc:ba:72:24:a3:b7:f3:3d:10:90:81:15:46:7e:
f9:89:c0:ab:7c:b3:f4:57:0f:3b:e9:5d:9b:49:b3:05:51:a9:
f0:8b:b0:21:6d:45:b2:e7:36:6c:e0:c0:53:53:fb:65:71:6a:
9f:c0:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:23 2025 by rpki-client