Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier: sQz3pKzxzlaRaGLQQJ0+H/XKCPrdc6xPX72WcuKr6Fw=
Subject key identifier: F0:16:FC:C0:54:E6:6D:30:78:C2:13:FB:19:63:FA:0D:7C:88:54:42
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial: 01987306C99CEB8C4B3C75D54851E58C5451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number: 0692
Signing time: Mon 04 Aug 2025 03:01:21 +0000
Manifest this update: Mon 04 Aug 2025 03:01:21 +0000
Manifest next update: Tue 05 Aug 2025 03:01:21 +0000
Files and hashes: 1: yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa (hash: /0wnIB5zXFdR7lKXtpV7vbYLWJWmyCiIhUGInpg7xqg=)
2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: FMfJGo4FcTCyEAH6oCLNFXVwJ17iKaMaHfFzFoG8Anw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:c9:9c:eb:8c:4b:3c:75:d5:48:51:e5:8c:54:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Validity
Not Before: Aug 4 03:01:21 2025 GMT
Not After : Aug 5 03:01:21 2025 GMT
Subject: CN=f016fcc054e66d3078c213fb1963fa0d7c885442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:4b:d9:8b:da:02:ca:fb:01:b2:7b:5f:f2:
1a:69:a1:06:38:a3:7e:cd:a5:da:2c:7b:5f:ce:0b:
bb:6d:fe:a3:41:91:48:9d:5b:6c:04:9b:5d:95:e2:
a7:00:fc:65:90:68:ad:85:95:e0:fe:5f:6a:48:7c:
5e:b1:5b:5a:76:df:69:c3:0e:08:d5:17:23:e4:ea:
8c:1e:d9:b8:b9:59:98:89:b0:b6:fd:e8:c4:fe:bd:
ae:ae:50:83:a5:40:c4:b7:bc:33:e6:c7:88:a5:2c:
a4:03:9a:db:fb:f3:f5:bc:58:d0:00:ca:b6:74:0b:
44:84:74:c8:b2:f2:44:f3:78:11:3a:bf:69:43:69:
f1:f1:4f:04:fc:41:c5:e6:43:d4:f9:42:64:6d:3f:
02:df:da:e2:a9:87:d9:31:3f:e9:04:f0:26:bc:ba:
df:a0:33:82:21:1d:38:ed:00:6a:04:7e:9d:99:cc:
72:69:1b:ee:51:07:29:98:a0:b7:79:bc:55:0d:4f:
24:09:db:92:a8:ea:ca:f2:19:cb:39:20:0d:c7:a2:
ca:86:08:1e:cd:24:19:81:52:2b:e4:14:88:de:aa:
5b:f6:7a:d7:0b:46:f8:cb:c4:03:07:c2:04:b8:be:
51:a7:b1:ca:53:c8:48:03:3e:ef:fe:4f:23:d2:97:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:16:FC:C0:54:E6:6D:30:78:C2:13:FB:19:63:FA:0D:7C:88:54:42
X509v3 Authority Key Identifier:
keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e2:8c:c1:81:54:5a:aa:57:85:ff:a8:3a:6a:94:10:3a:c8:
18:b7:f8:e7:2f:41:3f:9e:5c:0a:3a:b5:6d:e5:37:82:99:2e:
ab:fe:65:88:55:55:8d:74:a8:63:e1:c6:d9:d8:ed:59:4c:c9:
50:2b:e0:02:92:83:ee:df:8e:0f:0a:63:68:4a:f4:40:6e:c6:
4f:13:3b:69:f1:d5:e2:08:52:cc:a0:88:67:8b:a9:41:f2:4f:
d3:9f:cc:21:2e:d7:08:d1:f3:34:6b:62:66:ed:6b:f2:3c:d2:
6b:1e:fb:a7:f2:f2:a3:79:40:26:06:f9:57:6a:97:d7:5c:e5:
34:7e:d3:10:4f:f5:63:56:82:bf:b0:82:ce:ef:98:74:a0:05:
1a:c0:7b:8d:d3:76:30:1c:11:00:57:4a:ea:0f:07:3a:db:c2:
03:74:74:95:2b:63:50:e0:8e:93:3a:85:31:6a:ad:59:d7:e3:
99:a0:1f:34:7a:b8:dd:65:38:d6:37:b8:80:9f:2d:2e:91:5c:
0f:a6:3b:72:dd:2e:50:60:51:b2:93:da:92:c0:4a:b5:da:37:
52:3e:9e:22:eb:d3:59:fa:14:6a:c0:b5:5c:f9:ea:d1:94:6d:
45:fa:06:ec:fe:75:8d:ae:f3:f1:e3:d5:02:da:dd:9f:04:47:
0e:08:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:37 2025 by rpki-client