
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File: YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier: 3KTIpIDwFGLfx/52XPFyqKbQEeMjR4IZBdDRiDBeJQ8=
Subject key identifier: B9:F8:90:B5:78:B6:1B:7A:C5:3C:D9:C6:5D:3D:87:04:8A:F0:7E:C3
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer: /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial: 0198D5F17B7463AA752DE47A012ACAE78B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number: 04FA
Signing time: Sat 23 Aug 2025 08:00:29 +0000
Manifest this update: Sat 23 Aug 2025 08:00:29 +0000
Manifest next update: Sun 24 Aug 2025 08:00:29 +0000
Files and hashes: 1: 2zI93eWS4MAq1q_HzWCmHMK0vvc.roa (hash: OPrS0FrS6pSekQT7FXidaqihz4eIxPAHQ00wl3WWNU8=)
2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: 8KWzyvzcFYI8NJ9A3ashBFkxG6pHWVrqRWuRxmfpVRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7b:74:63:aa:75:2d:e4:7a:01:2a:ca:e7:8b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
Validity
Not Before: Aug 23 08:00:29 2025 GMT
Not After : Aug 24 08:00:29 2025 GMT
Subject: CN=b9f890b578b61b7ac53cd9c65d3d87048af07ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:63:d6:44:e0:ed:e9:c4:5a:e9:7f:6b:46:dc:
35:4f:25:1d:a9:fe:f5:4e:83:47:12:71:92:8f:8d:
0e:87:b4:f2:97:91:69:ed:99:bf:13:e5:f7:b2:56:
f7:63:0b:1d:5f:d6:ad:d5:09:88:c5:b4:d6:47:3f:
21:34:40:cd:42:60:92:08:96:6e:27:65:78:89:f5:
a1:cf:3e:7d:75:f7:dc:80:ef:d4:7e:cd:c4:82:16:
a7:ce:74:33:c8:aa:ab:04:96:5a:ae:39:d4:78:01:
55:81:ce:f5:1e:cf:9b:4f:38:ca:e6:b2:f6:a4:ff:
49:4e:b4:c7:8f:4e:3f:e8:2c:ad:c0:35:e4:f2:f6:
ab:f4:91:99:e9:c3:31:9f:9a:01:29:30:52:72:dc:
e0:ee:28:56:a6:95:6e:7d:41:07:9e:57:7b:63:46:
25:6f:0d:1f:8a:02:dd:ed:0a:45:08:ae:f3:d4:73:
13:dc:d8:b8:23:d4:bc:46:e7:e0:15:41:1a:68:8b:
e9:f7:6d:00:88:bd:93:c6:25:64:2f:00:5b:d1:87:
bd:6c:d4:91:d3:0e:58:6f:0e:7a:11:1f:d4:1a:21:
fd:d0:31:0e:b1:b5:8b:cb:6d:a0:1a:87:fb:da:b4:
e3:d7:ea:d9:50:d4:c7:64:4e:9f:98:69:4f:da:63:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F8:90:B5:78:B6:1B:7A:C5:3C:D9:C6:5D:3D:87:04:8A:F0:7E:C3
X509v3 Authority Key Identifier:
keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:89:58:a8:73:a7:ba:a6:5a:43:65:64:23:36:22:ab:9e:01:
f5:28:1f:f1:ac:43:4c:70:3f:94:64:6a:c8:96:d6:e0:b5:ec:
d5:9b:1d:8c:8b:a3:97:ff:b4:64:52:48:d0:05:89:68:99:0e:
4f:a8:9f:b7:47:7f:99:d9:62:cb:e3:13:75:ed:fe:2f:25:26:
dd:c1:13:2b:aa:fd:6b:e5:f5:72:10:82:6e:22:b1:9b:91:34:
2f:a2:97:a7:42:44:71:ca:61:99:94:79:38:8d:22:7f:0a:66:
82:a4:be:a8:f7:bc:b4:f0:8a:1d:3b:06:42:44:9d:2e:dd:69:
cc:b2:3e:1b:bf:c4:ac:de:83:9f:06:4b:df:91:e1:fd:ee:5e:
70:8c:62:b0:d8:72:34:50:5d:32:0b:b1:4e:fb:f2:4a:78:71:
ea:98:10:b0:b8:cd:e5:55:aa:e9:73:63:3a:f5:a0:58:ba:88:
de:6e:19:68:24:0e:66:96:69:c2:58:bb:cf:b7:dc:7a:c9:07:
0a:72:92:17:cb:98:20:7c:4b:9e:d6:64:e6:cc:56:7b:3d:32:
ce:03:dd:c1:29:d8:5f:33:da:71:6e:24:d2:d0:ef:52:7c:32:
d4:15:1a:a7:bb:d5:8b:68:92:2f:1e:04:8c:34:d3:9b:aa:32:
b9:c1:d7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:22 2025 by rpki-client