Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: sSHipfs072JVF3MZCRJwDSf/U5oW15vfQXLMJl5Hxn4=
Subject key identifier: 47:60:87:F4:6E:4F:CF:7B:75:CC:14:81:0A:03:96:B9:33:54:F7:62
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 0199FDD9027581A961493A48B6A2728B7EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 1356
Signing time: Sun 19 Oct 2025 19:01:21 +0000
Manifest this update: Sun 19 Oct 2025 19:01:21 +0000
Manifest next update: Mon 20 Oct 2025 19:01:21 +0000
Files and hashes: 1: APe792PPzgn2UcG2RsKnM9NZvXY.roa (hash: P5YJH0mHT12JV4knVxcd215g8BRGbGqkMZPdkHPu8r8=)
2: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
3: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: 1Bsv3GjMz8cW6xZMNAvg5eNrCaEVaKkeRy/f8aLyiMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:02:75:81:a9:61:49:3a:48:b6:a2:72:8b:7e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Oct 19 19:01:21 2025 GMT
Not After : Oct 20 19:01:21 2025 GMT
Subject: CN=476087f46e4fcf7b75cc14810a0396b93354f762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:5b:5b:f8:5e:1b:15:b8:06:36:2b:86:3f:
3e:29:08:4a:1f:c4:ab:3e:cf:3e:51:2a:e8:ad:7f:
2e:40:19:5a:94:b6:4a:55:00:41:28:53:90:80:91:
87:90:67:23:89:c2:66:47:4d:27:87:05:5e:dc:a0:
c8:33:77:04:15:2b:34:3d:e6:f0:de:08:d6:20:ce:
13:81:b7:10:f3:3d:c3:7d:9d:59:bc:08:e8:81:d8:
26:28:c2:72:5e:75:c9:d6:09:f9:0f:cb:37:3d:f1:
a9:f6:37:e2:bd:5a:0e:6f:40:92:8f:6d:62:c0:f8:
7e:0b:33:2c:27:5c:81:ec:de:3c:f0:07:63:8e:95:
fd:1c:b2:c6:9e:dd:05:f2:ff:85:11:24:58:1b:72:
5e:d8:db:02:50:fb:36:be:c1:8e:3a:91:6e:26:10:
cb:2e:ae:e5:8d:38:98:89:80:f9:7d:6e:37:74:4e:
10:70:72:b5:75:c6:de:c3:5f:a2:f4:06:bd:0a:eb:
b3:64:1d:38:47:57:42:48:c0:f1:cf:37:34:4b:9c:
ac:c6:9f:d2:46:40:91:86:80:49:e3:64:ac:5a:e5:
af:9d:8a:b6:96:fd:3d:bb:d3:5a:66:c2:d4:6d:36:
30:f5:63:a9:b6:a9:1c:68:bc:b7:91:4d:6a:1f:e8:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:87:F4:6E:4F:CF:7B:75:CC:14:81:0A:03:96:B9:33:54:F7:62
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4d:af:30:85:3a:dd:97:80:55:2c:12:11:8f:8f:a0:2b:d9:
31:2e:37:5f:b0:21:d7:e7:92:cd:ec:6f:be:4f:97:92:e6:2a:
bd:9f:64:30:a1:46:7a:ee:c7:f0:3c:cf:5c:6f:dd:b9:ee:e7:
8f:25:b8:b5:d8:c3:9c:74:e6:50:a3:2d:1e:1c:64:eb:5c:96:
89:9c:02:c5:bc:2d:a3:84:86:35:13:31:3e:af:cc:f0:c4:f8:
80:14:0c:a6:ab:5a:1f:5c:57:d7:a7:c9:42:d1:29:89:d1:13:
13:15:96:d0:9a:c1:39:b6:c0:89:9a:7e:0a:ca:1e:2c:da:b2:
04:48:62:f6:b6:01:82:f8:87:3d:03:be:02:1a:7d:8d:f7:db:
00:db:0f:13:63:a8:5d:e1:3b:0c:90:96:b5:6d:33:b1:d2:6e:
00:fa:c3:48:92:9a:75:d9:c4:4e:43:03:00:ef:a8:91:b0:09:
49:92:9d:86:9d:2f:fa:f6:db:02:e5:bd:86:1f:d9:df:17:9e:
68:ed:26:ab:47:ae:76:c0:de:98:8e:ed:7d:ad:91:67:73:91:
57:b6:05:c3:c2:86:6c:d9:06:4e:ba:a6:1c:8f:8f:0b:e7:4c:
93:de:4f:a7:4b:22:33:bb:b9:e9:54:9a:c9:9e:3a:cd:26:d5:
21:af:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:02 2025 by rpki-client