Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: 7hDWoVP2uNO7L9xWXpJrWiWWR1eBo2ckXdnq75lCGXM=
Subject key identifier: 78:A1:E0:4F:08:D4:5B:3E:55:BF:1E:FC:51:93:C3:C5:A3:57:28:39
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 0199FC2161439C7E13E92EB1D1B3AE74113D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 0738
Signing time: Sun 19 Oct 2025 11:01:09 +0000
Manifest this update: Sun 19 Oct 2025 11:01:09 +0000
Manifest next update: Mon 20 Oct 2025 11:01:09 +0000
Files and hashes: 1: d6sgkQbNQYkqYXcedUvxxcDi_RY.roa (hash: qNUbQpwyqYmbMOUJJoCyiXY3LQNxqUvVSzT1Kq6z0rI=)
2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: RVOtrPZjmpqDVbZAEJTfJCE5bLZ7sKrKWh6X8hgkDCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:61:43:9c:7e:13:e9:2e:b1:d1:b3:ae:74:11:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Oct 19 11:01:09 2025 GMT
Not After : Oct 20 11:01:09 2025 GMT
Subject: CN=78a1e04f08d45b3e55bf1efc5193c3c5a3572839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:aa:f7:9a:a4:e5:17:b6:ab:29:64:4a:a0:
24:d5:1a:e3:2d:9f:55:ed:0a:7c:c4:58:e1:43:fa:
7a:4a:d4:b4:a4:5c:ee:bb:57:94:26:11:35:18:a7:
15:f2:ad:a7:5d:7e:b5:16:23:e1:1a:ae:3b:f3:66:
2e:f9:fc:88:31:6e:68:b8:12:96:a2:c0:d7:8d:51:
48:69:30:07:ac:a9:a3:4d:e1:64:b8:a0:89:24:5f:
b1:04:3e:f9:25:4a:dc:aa:11:f4:2f:08:b8:d2:a5:
08:da:02:07:9f:a0:fd:30:a2:9b:6e:74:d7:34:e6:
d9:3f:99:35:9d:c3:70:0c:a3:c0:87:18:01:ab:a1:
c1:f1:33:94:5e:7e:af:f6:26:60:0a:3e:ea:ad:45:
2d:f2:74:87:8e:bf:38:b7:5e:e6:d8:9a:55:c1:2e:
9a:d4:45:81:f9:33:0d:6f:c5:71:84:48:d2:38:3b:
ab:df:0e:1a:01:56:28:5b:6c:78:8b:87:4f:5f:cf:
f0:a4:ac:eb:93:64:f8:fa:df:8b:a3:8d:ff:81:21:
37:2b:78:91:23:8f:65:af:f3:9b:ff:c6:ce:73:89:
29:ed:63:47:ab:58:f3:54:17:d8:c7:83:7a:a4:09:
19:a6:10:e0:e1:80:43:f2:09:ea:30:bd:53:6b:7f:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A1:E0:4F:08:D4:5B:3E:55:BF:1E:FC:51:93:C3:C5:A3:57:28:39
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:06:70:53:92:dc:8b:35:6e:60:d9:24:fb:50:75:9f:b8:fa:
36:88:b1:34:82:90:51:cc:c7:e9:0c:46:52:cd:50:38:5d:7a:
6e:d9:e0:6c:41:93:7f:24:cf:b0:1e:b8:bc:3f:59:8d:f6:54:
e4:17:52:09:a2:e8:e9:ee:83:6f:c3:25:ea:15:d3:f4:f1:6f:
79:21:b7:b3:ad:fd:dd:eb:b1:d1:cd:b0:1a:da:1b:fb:d7:90:
74:f5:4c:f5:14:16:e8:92:29:0e:ce:7a:07:cd:4b:3d:c3:b1:
9f:63:cc:70:ee:6f:fb:49:de:a3:3d:d3:4e:33:5c:7a:fa:51:
c6:63:6b:a0:32:ac:4e:d2:3a:58:02:01:77:a3:94:0d:65:b6:
c4:af:bc:71:c0:49:d0:cb:7d:0f:84:a8:e7:cd:b7:2e:f9:95:
09:db:11:75:4b:97:ce:d2:42:e6:7b:5c:14:0e:4f:aa:ac:64:
d8:0f:72:1c:f3:6e:a3:02:7d:c6:d5:7b:a8:c8:89:69:9e:49:
b0:09:fa:c1:0a:02:68:1e:b3:23:5d:f2:09:bf:87:09:46:8c:
4a:55:50:b9:3b:84:5b:92:88:da:bf:d3:36:cf:00:00:b5:08:
66:f7:ce:07:4b:41:97:3e:c5:49:d5:20:93:98:11:7c:bb:5b:
05:20:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:38:01 2025 by rpki-client