Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
File: YeENrB93PFWiRHUzRnGeiZ9NRDI.mft (raw, json)
Hash identifier: 2E55u23OQ/uKEmmwJ9eX6CcAitBZFIVqtwMeUwDrxUU=
Subject key identifier: 87:47:88:01:CC:EF:FF:90:55:66:B1:A3:6F:B1:7B:C1:F4:21:94:AE
Authority key identifier: 61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
Certificate issuer: /CN=61e10dac1f773c55a244753346719e899f4d4432
Certificate serial: 01989034A2972023D3687A2D96B2DD3DA601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 19:00:25 +0000
Manifest this update: Sat 09 Aug 2025 19:00:25 +0000
Manifest next update: Sun 10 Aug 2025 19:00:25 +0000
Files and hashes: 1: 2Pb_1CM0MkPudBUY3Q0_pYkoPc0.roa (hash: xADulynKw7d5uIvUb/iOH4gEDrZezt1Odl3vumrVJCo=)
2: YeENrB93PFWiRHUzRnGeiZ9NRDI.crl (hash: GJV/HY0I3m9eZmPuFMAyvtxMmKwjAefA1FDY4r4Uv4A=)
3: mWcMZUbVESCreyIMM1F2DvYaJHs.roa (hash: DDyp9xxUdtbm3SG6nGLtJGXjnrbdaA8Ifcbc14VxZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:a2:97:20:23:d3:68:7a:2d:96:b2:dd:3d:a6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e10dac1f773c55a244753346719e899f4d4432
Validity
Not Before: Aug 9 19:00:25 2025 GMT
Not After : Aug 10 19:00:25 2025 GMT
Subject: CN=87478801ccefff905566b1a36fb17bc1f42194ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:f8:1e:1c:b8:e1:19:24:01:bf:ba:62:51:
22:db:2b:e0:e2:2d:dc:0f:16:e7:48:17:e4:a7:a9:
87:55:a3:b5:54:af:97:19:55:d2:0f:d9:b1:5e:fd:
b6:c4:50:5e:e1:13:ce:53:54:58:70:c4:68:9f:0a:
0f:52:94:88:e0:ee:a6:3d:a1:49:d3:c7:c2:18:7c:
47:46:e8:1d:2a:7d:ad:c3:a2:be:83:58:91:4b:95:
6e:86:66:e4:96:09:22:61:8c:23:aa:e3:4d:bf:1b:
ff:f3:9e:44:e9:94:00:e8:50:21:ec:57:3d:bf:20:
8e:38:7b:6b:11:3d:2b:10:3c:50:74:64:ea:fb:09:
44:3d:18:44:e5:e6:04:d1:1f:9f:62:1c:ea:60:6f:
e6:9a:9b:a6:a3:64:75:c9:95:64:28:12:f7:9e:ed:
bb:18:b7:78:54:07:a4:e3:85:bc:15:f3:9a:9a:45:
21:f6:30:15:53:99:c3:47:68:d2:1a:45:92:d7:fa:
9d:43:a7:0c:83:62:a4:1c:d6:a7:f7:ce:5c:34:e1:
89:e5:fb:40:f0:ed:46:69:9d:68:c4:39:37:b8:de:
c8:7d:7e:c0:7b:9a:b7:d7:38:dc:2d:9c:99:6a:a5:
c6:8c:a2:93:6e:d4:75:da:20:ae:69:3e:8a:9d:13:
37:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:47:88:01:CC:EF:FF:90:55:66:B1:A3:6F:B1:7B:C1:F4:21:94:AE
X509v3 Authority Key Identifier:
keyid:61:E1:0D:AC:1F:77:3C:55:A2:44:75:33:46:71:9E:89:9F:4D:44:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeENrB93PFWiRHUzRnGeiZ9NRDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/85ef35-647a-4172-8c64-6db3caef73d9/1/YeENrB93PFWiRHUzRnGeiZ9NRDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c6:f2:07:49:0c:21:69:36:db:2b:0b:fb:9a:a4:31:2d:13:
27:0d:34:00:9b:a7:bd:1f:82:ae:ee:3f:23:08:ce:17:e8:30:
00:b7:2c:68:04:56:1f:3a:a1:f4:96:8f:61:0f:6b:ef:7e:04:
b1:3a:33:5a:87:b2:60:db:be:75:73:ae:eb:1c:91:c5:c6:04:
9a:4e:32:8b:86:80:d9:31:b5:c4:4e:5f:b8:f4:26:19:1c:5d:
8a:be:a1:3b:1f:4f:fd:e2:d3:df:73:8c:c5:6d:1f:55:54:58:
3f:99:a0:54:0e:b8:fa:9d:1c:d1:25:d3:bf:87:8b:99:09:e6:
f5:21:7e:a5:96:44:c1:dd:e4:39:c6:ac:93:89:83:4c:2a:25:
8b:61:28:14:6d:c5:65:25:3f:87:44:7b:ab:2c:6c:5a:cf:0f:
61:77:e1:26:cf:ee:b9:e3:4b:84:99:0a:46:16:ff:3c:30:31:
2a:a6:83:ea:0a:4b:05:fb:79:92:c5:61:3e:4f:41:ea:c5:06:
6c:2b:d4:ff:66:64:09:ae:43:38:4f:b1:f4:9b:c1:f1:61:bc:
b6:26:f8:9c:8f:89:a3:4a:b1:1c:ce:a7:b8:c8:47:24:70:17:
de:a6:34:63:aa:67:32:b0:9e:89:c3:b4:e3:d8:f6:ee:35:70:
df:04:97:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:44 2025 by rpki-client