Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: 36GUz1yXMo4shgzRlxla+8AbeL3uTL4xeRaDxU2vUFY=
Subject key identifier: 44:06:F1:5A:CA:43:F0:D8:01:A2:01:C6:CE:9C:62:72:15:18:6C:13
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 0198D6298D4EDD94036E4EC24FBE7DDF0F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 09DD
Signing time: Sat 23 Aug 2025 09:01:43 +0000
Manifest this update: Sat 23 Aug 2025 09:01:43 +0000
Manifest next update: Sun 24 Aug 2025 09:01:43 +0000
Files and hashes: 1: 9-Jf83x4olz8Hfew1s_UNi3V90k.roa (hash: IKeSXJFCHy882FUnOTCs1ATh13Yeq7epWPgTRQh0CZE=)
2: ECPnWkDMI2_nTmbCZhDYVWDmDx4.roa (hash: Lpl7m/eZhYRN7DnJNG4Sw0QJsO8hvbMn/hQYBg/ViaI=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: BQe137YiQ7XvAYcMM/+DTSiTtgm3+fdth2VoV14DmSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8d:4e:dd:94:03:6e:4e:c2:4f:be:7d:df:0f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Aug 23 09:01:43 2025 GMT
Not After : Aug 24 09:01:43 2025 GMT
Subject: CN=4406f15aca43f0d801a201c6ce9c627215186c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5d:16:81:2e:df:df:e5:94:da:54:2b:6a:63:
a2:fd:f1:24:2d:5e:a6:8e:71:ba:34:4e:f4:76:95:
92:da:b3:16:c0:d0:e5:90:49:46:20:28:24:ec:02:
6e:07:af:f7:d5:62:15:ab:99:b2:24:dc:2d:a5:7f:
c4:9e:cf:84:58:88:f4:26:bf:31:69:bd:c5:14:37:
4e:2e:94:f0:d0:8d:e0:fd:44:ed:fe:73:d3:db:9f:
3a:e5:99:48:63:f7:a2:e9:66:3c:0b:d1:83:ab:77:
3e:92:3f:f6:74:4c:7d:bc:f6:c9:80:37:32:91:89:
51:b6:a5:20:68:a4:2c:11:02:07:0d:77:db:37:02:
b8:c2:ad:d8:6b:15:a3:74:a3:65:d0:9d:12:4f:14:
f3:95:bb:cb:c3:9d:5a:9e:68:2f:4a:0e:2b:04:ae:
0f:de:4c:e2:c2:04:fa:31:f1:1f:8c:43:88:a0:96:
3e:94:b6:6e:20:03:2e:2f:d1:a0:36:35:37:42:cb:
ad:98:32:74:ea:88:69:02:f5:21:6c:b8:ee:08:3f:
bb:58:7b:d1:5e:1d:6d:36:86:75:be:c3:5e:38:7f:
99:89:4c:a0:90:18:c2:29:29:99:59:8f:b6:57:13:
f6:b1:ae:d0:bf:b2:68:15:da:2b:0c:af:47:9d:8e:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:06:F1:5A:CA:43:F0:D8:01:A2:01:C6:CE:9C:62:72:15:18:6C:13
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bf:d2:43:58:e1:9b:54:1d:a1:1b:9d:64:a4:92:98:55:28:
6f:0e:c9:40:07:3a:36:8c:24:2a:95:5b:77:ce:55:67:62:80:
aa:d6:bd:71:f3:53:1d:66:da:c5:1b:e8:90:c7:4d:9e:b0:7a:
58:6d:d6:91:77:b9:52:68:3c:90:d1:ec:8e:1d:d9:6d:fd:51:
dd:9e:26:29:25:38:46:89:7a:50:8e:fd:d6:7a:8f:ab:ce:ad:
a5:8b:df:19:2f:dd:a6:48:b6:14:20:d7:4b:b5:d1:fc:9f:38:
70:17:2d:16:e9:55:4b:9b:48:fe:9b:6d:de:7a:55:64:75:6f:
00:47:35:9d:8a:36:98:03:1a:5d:70:88:b1:98:53:37:07:ef:
04:86:3b:f8:14:4a:82:25:70:97:56:1d:80:4f:09:03:31:02:
ac:a9:30:d0:cf:18:bf:de:9f:cb:e5:3f:9f:05:53:e2:c5:64:
30:fc:db:96:6d:61:7b:5c:8b:1c:ab:82:8d:95:c4:d2:bc:91:
9a:84:66:ce:16:c5:1a:b8:61:37:2c:0d:f1:7d:c6:8c:7f:51:
e9:40:4d:32:18:97:65:9b:8d:74:14:d1:69:2c:20:6d:0d:b9:
2e:b0:be:a1:b6:26:fe:db:a1:52:03:cd:56:de:82:c3:2c:ff:
69:96:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:40 2025 by rpki-client