Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: tvhhLb8BufnVUHtMhQOIXxVtyw+lKLfztdHMdvpYWT8=
Subject key identifier: B0:83:7C:40:F1:F9:30:B6:09:A4:0F:7A:71:4E:B6:2E:4A:4F:81:B4
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 0199FBEB6AC7160ECBE5A0616C5CA2A94FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 0EA7
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: PnmEnQHPR4CaNkb/ii4PtXrfMe8IOXlS5tASx8SP5Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6a:c7:16:0e:cb:e5:a0:61:6c:5c:a2:a9:4f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=b0837c40f1f930b609a40f7a714eb62e4a4f81b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:7f:27:1b:8b:49:ed:4e:19:aa:29:1b:fa:
99:0f:95:56:18:de:62:1b:06:72:ee:98:96:3f:11:
5b:3e:3a:8a:0d:72:c2:54:81:c7:5f:77:37:ff:7c:
ec:c9:4c:3a:ba:a0:8a:43:28:c8:52:3c:a7:a8:2b:
c2:7a:7c:6b:7c:5a:61:89:7a:fc:87:6e:b7:12:f1:
23:21:72:2b:2d:9b:1d:42:0e:a5:5d:5a:53:54:1f:
65:e8:f9:63:49:84:09:98:07:c7:db:75:49:cf:fd:
76:f6:6e:fa:f9:85:5b:47:a0:1d:44:1a:85:29:a5:
3f:e7:3b:2b:e9:e6:ba:1c:17:2f:0e:b8:27:8d:33:
a6:f3:a3:fe:56:6e:78:bf:49:f6:97:57:54:3e:17:
19:a7:08:8c:24:6a:ce:d0:69:0a:25:ab:4a:da:98:
65:cc:56:2c:5f:69:22:08:ae:f2:a5:b3:7e:5f:6a:
ce:50:41:fe:c2:7c:89:6c:b6:32:3c:9b:85:b9:aa:
e5:fb:8d:4b:4a:c4:b2:87:2a:32:81:c5:56:5b:29:
d8:38:7c:f1:29:9f:fa:e8:0e:85:53:63:f4:91:9a:
0d:a3:ea:ff:45:95:41:c7:c0:61:a0:ce:93:35:7b:
8a:d8:31:81:4e:4e:bb:b9:b1:45:cf:6f:90:cc:66:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:7C:40:F1:F9:30:B6:09:A4:0F:7A:71:4E:B6:2E:4A:4F:81:B4
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:80:9a:5b:70:2f:06:04:a6:8b:2d:0c:ef:d1:bb:ff:c1:07:
3f:75:e6:5c:35:89:dc:98:4f:b6:25:94:5f:60:6a:8e:29:49:
f6:57:43:ee:cf:6d:0b:fb:51:7e:9f:80:15:2e:40:8f:f7:70:
82:5b:81:2c:78:48:87:e0:5f:52:05:8c:b5:5f:9b:e3:e7:0a:
43:37:87:03:f0:9d:b6:c8:b5:18:0a:31:08:a6:90:7d:e4:14:
ab:5e:ea:4f:33:a6:be:8d:ae:71:cc:bd:e2:db:cc:de:43:25:
5e:9c:99:04:82:68:03:db:c5:5c:05:7b:37:6d:e0:51:66:30:
8b:85:23:41:e9:1d:d9:37:7c:88:5a:5e:1b:60:ca:73:5a:a4:
c9:fa:6c:0b:ec:a8:61:c7:c4:06:16:a2:99:a2:1f:8c:72:38:
98:8d:2e:a2:2c:5e:3c:b6:6b:fd:30:ac:41:c6:e3:2d:49:70:
2b:44:01:0e:3a:ae:32:89:dd:c8:a9:89:a0:5c:61:f5:54:58:
14:00:3e:d1:73:d4:71:ae:08:47:fa:6f:16:fd:87:c2:f1:5d:
c5:80:6e:bc:16:66:b0:18:b3:84:bc:0c:01:d2:e7:de:59:22:
3e:8d:31:19:46:36:42:af:75:aa:84:9f:b5:f5:1e:f2:92:cc:
0b:5f:b1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:37 2025 by rpki-client