
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: nNg8T1S41pam2cwIPoVS+B7agOVh9HOr4aE4HHAoycU=
Subject key identifier: 34:DB:32:A6:7C:69:E8:D3:55:2A:5A:0B:2D:F5:C5:64:1D:3C:96:1D
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 0199FDD91F65783A0AA5D8E810F4EDD99CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 0255
Signing time: Sun 19 Oct 2025 19:01:28 +0000
Manifest this update: Sun 19 Oct 2025 19:01:28 +0000
Manifest next update: Mon 20 Oct 2025 19:01:28 +0000
Files and hashes: 1: Ef8_zrRgEL0CLqM-IuSA3dX-ctc.roa (hash: xDWi6ors7AjB8a/zdFVsFoCBfh3PoH6v4N9RTJZoFCo=)
2: wvSIKLseDCti9NDqb3hBoHBh3tM.roa (hash: JuhvfPP6PYd4BnfxxERmMrnoz56rmfAtM3i5xnGfuRs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: Nj8XTCup1KE6DW1hvqlB8c1zwyIqb7v7F7tuQwxtoRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1f:65:78:3a:0a:a5:d8:e8:10:f4:ed:d9:9c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Oct 19 19:01:28 2025 GMT
Not After : Oct 20 19:01:28 2025 GMT
Subject: CN=34db32a67c69e8d3552a5a0b2df5c5641d3c961d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:40:28:bb:c5:78:a1:3a:8a:c2:c5:1e:9d:21:
aa:3f:7e:e7:c3:cc:12:49:16:9d:0a:02:7c:00:f2:
db:c9:5e:fc:83:14:ca:98:84:cd:29:fc:53:7c:c4:
78:cf:9e:3e:b9:78:97:88:c3:13:0e:db:22:d7:6d:
1b:90:f2:58:7c:48:fa:ea:dd:5e:be:df:e1:2d:8b:
c0:f1:b8:c3:b1:60:9e:b0:40:d3:40:81:34:5e:ea:
cb:ad:f0:ff:da:6e:d0:cf:d1:d8:bc:44:53:60:f9:
bb:12:b3:db:a0:ed:98:68:63:7b:66:07:84:ee:cf:
52:38:6f:ff:55:4f:58:82:5b:75:fb:a2:08:27:1f:
02:b3:91:ab:59:c0:20:4f:39:e8:e0:43:9c:b4:5b:
ca:a3:d9:e3:87:b5:7c:b6:d8:07:2e:d9:5a:ff:50:
04:41:3d:34:73:9a:02:0e:09:ab:e7:7f:3f:3c:e9:
72:e9:96:e7:c7:e6:ad:4c:da:75:b0:24:9d:75:41:
0a:96:77:e6:81:eb:52:ef:da:66:53:8d:43:2f:36:
0d:98:43:45:13:7d:3c:6c:b1:18:ff:5b:2d:12:66:
a8:9d:6f:6c:b2:4a:c8:20:9f:bc:0c:45:46:dc:26:
47:68:28:67:c8:58:28:13:25:8d:0f:4a:e5:37:15:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DB:32:A6:7C:69:E8:D3:55:2A:5A:0B:2D:F5:C5:64:1D:3C:96:1D
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:fe:63:b9:3b:37:ec:6e:81:5e:3f:11:2b:4f:57:a8:b5:b5:
8b:22:a9:d2:fc:f3:b8:e0:f7:8c:ab:ad:60:b9:eb:89:7a:98:
46:b8:b0:dc:52:f5:7a:0b:c1:a3:99:18:98:4a:17:62:1d:c2:
05:3f:a7:ed:ea:cd:91:ad:f9:75:d5:ab:58:1f:73:0e:ac:1d:
2a:c2:d5:59:4e:21:01:52:d7:5f:f3:c1:04:65:dc:cf:89:08:
fc:2b:b7:f5:e0:7a:93:7b:87:d2:64:1a:08:42:45:67:75:d4:
38:bb:ec:82:65:b2:08:4a:e2:50:38:af:fa:d1:43:e3:33:d0:
da:d2:17:06:f8:07:60:28:ef:9c:dd:03:22:2d:29:9e:f8:83:
5d:02:c2:9f:83:b1:b6:bf:61:31:f8:7f:7b:0b:23:cc:bf:78:
03:87:b4:6e:ce:41:55:c4:cf:06:15:54:3a:4b:74:b8:f9:ce:
ae:c2:7e:aa:fe:70:1d:61:09:df:29:fc:bb:4b:0c:43:66:22:
b7:b1:9b:c2:6a:2b:f5:06:4b:4a:92:b2:b3:50:ed:1b:b2:db:
6d:f5:cf:bf:2d:5e:bb:32:9b:25:2b:ea:5e:58:a8:a6:9d:32:
12:d9:c6:18:de:f6:ca:94:31:f3:fe:ac:e3:1e:e4:98:35:b1:
19:8b:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:01 2025 by rpki-client