
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier: +68VNeaUEKbCMMnMVI3obr3Dhz/OZJSjWsWiCMQhbZ8=
Subject key identifier: E3:2C:BA:E9:F5:61:57:ED:44:CF:07:73:E2:0E:BA:FD:18:B9:4B:25
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 0199FAD7FEC4E16312211C83995C7E79D5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number: 07A3
Signing time: Sun 19 Oct 2025 05:01:23 +0000
Manifest this update: Sun 19 Oct 2025 05:01:23 +0000
Manifest next update: Mon 20 Oct 2025 05:01:23 +0000
Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: sqdFLH4eeNrnlI0Yuhwr/1BKdUW4ALp0MHBenG9Z/Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:fe:c4:e1:63:12:21:1c:83:99:5c:7e:79:d5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Oct 19 05:01:23 2025 GMT
Not After : Oct 20 05:01:23 2025 GMT
Subject: CN=e32cbae9f56157ed44cf0773e20ebafd18b94b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:5a:5e:8f:35:ec:06:86:6b:86:07:b3:90:
a9:58:37:b9:2b:66:b5:49:f8:88:ce:1e:cb:0d:76:
ee:81:a7:46:e7:12:6f:bc:33:9a:41:40:ff:5c:56:
09:a7:ac:3e:85:e7:fe:98:54:c3:fc:c9:c8:e6:48:
7c:d2:e2:37:f3:bc:b7:37:22:5c:80:0a:a2:06:90:
a5:e0:03:d2:db:9f:a7:c7:80:3d:b6:6b:69:9f:c1:
8d:b1:62:42:1c:a6:f4:5b:2f:c6:02:fe:c1:86:af:
ae:d2:d3:1a:bb:dd:93:b5:1d:3f:fc:fe:22:e5:d1:
ff:48:ea:64:82:e6:7a:60:f4:4d:11:e9:3a:e7:8a:
2c:2b:71:6a:7e:da:a5:a9:b8:c6:58:b4:3b:cf:7f:
31:0a:5e:d9:00:98:7a:cf:55:5c:24:d5:62:c1:10:
9b:ef:48:ad:31:8a:6b:b9:8b:b6:6d:6c:75:65:68:
8c:4f:3b:93:65:72:62:6f:ed:7c:57:d8:88:9e:4e:
ea:b7:b0:36:57:d1:5a:d4:9e:60:82:25:03:0d:9d:
16:fd:26:1f:86:15:a3:58:da:b7:e5:95:10:aa:64:
63:17:90:9a:9d:1b:fb:2d:c2:43:6a:8d:d3:bf:fa:
f9:e5:59:49:ab:76:f8:3b:b0:de:20:f1:c2:1a:c4:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2C:BA:E9:F5:61:57:ED:44:CF:07:73:E2:0E:BA:FD:18:B9:4B:25
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d0:3a:82:87:85:6c:e1:15:c2:b8:12:b5:cf:31:ab:88:80:
49:93:bf:a1:93:34:c5:15:3e:e2:41:46:fc:28:e7:ee:00:43:
d2:1c:f0:68:8f:38:74:d0:38:c4:0a:e2:26:a7:ee:9f:d6:c5:
69:24:47:a0:ce:40:4c:a9:29:37:a7:8b:23:aa:34:0e:47:47:
fa:02:cd:2b:d2:0b:a4:7d:a3:fb:9b:90:a4:16:38:ec:79:fc:
b9:72:9e:c5:0c:30:37:aa:8a:4c:c6:ae:22:3c:73:d5:04:f0:
be:d3:c0:a0:ec:fe:b6:35:c2:cd:f7:98:53:22:56:74:36:e5:
80:19:5f:45:49:4b:af:93:94:82:ca:bd:0f:9d:cf:3c:a8:6e:
af:92:e5:ab:1a:c3:b0:23:68:cb:b7:53:9f:84:53:97:53:8f:
ed:53:c3:e4:57:5c:95:1d:06:9c:7c:bf:ff:0a:84:5f:19:c7:
2d:df:50:60:2d:78:6d:c2:57:75:00:6a:11:dd:47:68:f7:28:
8d:96:52:25:ba:c4:aa:35:67:fc:68:fd:e9:20:ca:69:ea:7a:
5d:99:44:0a:f0:95:62:c2:76:24:12:0a:81:f0:34:3c:2d:68:
46:c2:62:1f:b5:90:40:b8:fb:c5:a1:74:05:29:a0:ca:9b:4d:
ac:78:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:08 2025 by rpki-client