Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: LxAiT22ok4rxFmDzCGeOfmdG8P5TcJgA7DQV65cBXIQ=
Subject key identifier: AE:2D:73:54:8C:70:8A:26:A3:92:F4:0E:98:43:A1:BA:6F:60:65:37
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 0199FBEB66C882CB6A45B8BE759BB2561641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 05F3
Signing time: Sun 19 Oct 2025 10:02:12 +0000
Manifest this update: Sun 19 Oct 2025 10:02:12 +0000
Manifest next update: Mon 20 Oct 2025 10:02:12 +0000
Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=)
2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: gppcwAxaCHMsNhISvvPni1PoNotCUrX8oILs+hxv5Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:66:c8:82:cb:6a:45:b8:be:75:9b:b2:56:16:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Oct 19 10:02:12 2025 GMT
Not After : Oct 20 10:02:12 2025 GMT
Subject: CN=ae2d73548c708a26a392f40e9843a1ba6f606537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:fe:76:5b:4e:ba:8d:a4:19:11:5d:a4:09:
ec:c7:d1:e7:e5:b9:fe:cd:fd:4c:26:88:58:8e:e7:
48:bb:75:53:33:9f:29:3d:53:43:fb:0d:71:94:91:
dd:4d:6c:d0:e3:89:2f:1d:da:bc:e4:26:06:4e:e4:
2f:24:8a:7a:3f:65:54:e0:11:fd:27:b2:20:8e:71:
38:b8:b5:c6:97:f9:be:6f:65:07:c7:f4:cb:ce:26:
28:42:2f:ab:55:76:1f:2b:d1:69:0d:05:d3:1f:3f:
9e:10:0b:7e:41:28:cb:55:fd:d3:f4:09:c2:59:f5:
e1:49:2c:6e:df:56:1f:ac:bd:7d:64:8c:e3:32:82:
d2:1d:64:d2:99:27:48:62:02:72:c4:9e:74:90:cb:
99:87:0f:fa:25:97:91:1e:76:84:e4:ac:be:ab:26:
87:3a:d1:48:75:80:a6:5f:09:3a:c2:27:1b:14:fe:
a1:69:5c:bb:37:ad:00:61:c3:77:0a:77:36:08:61:
20:26:fc:57:c8:52:80:08:da:2f:b3:1f:5d:63:02:
90:ec:5c:43:1b:34:42:57:82:ee:54:c4:ab:ac:86:
ea:17:da:e2:21:d0:00:a8:6b:19:ac:0e:9f:22:80:
80:99:b5:31:72:cd:b3:14:ed:90:7a:49:3b:47:8f:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2D:73:54:8C:70:8A:26:A3:92:F4:0E:98:43:A1:BA:6F:60:65:37
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:db:f7:15:79:69:c7:3e:a8:44:dc:00:18:3e:88:a6:bd:47:
72:1c:ce:60:9a:17:90:9c:1b:01:de:42:2d:05:60:8a:32:46:
3b:bb:aa:df:7b:0e:0f:d7:74:d5:eb:0e:a9:c5:d7:d1:4a:36:
25:53:12:7f:b9:f1:9f:78:d2:ff:06:20:a4:5e:d9:75:9e:e0:
1c:ff:34:49:65:b4:fd:d7:b7:c0:71:0c:5c:1f:df:bd:73:64:
f7:f8:34:31:c7:e4:c4:a2:74:77:05:09:ff:05:7e:36:22:79:
87:4f:b5:3a:68:58:0c:b8:c0:24:54:58:09:3d:4d:8b:c7:df:
a1:63:ee:58:80:f8:21:76:e0:6a:95:66:81:8b:84:6d:b3:39:
91:2c:cf:b3:a5:50:c4:d0:63:d2:b8:d6:d9:26:28:84:03:0c:
8a:d4:65:06:dd:f3:f1:46:55:60:d4:88:8e:ec:18:a1:2a:92:
d4:5f:d4:28:61:db:48:9b:63:b2:70:e9:e7:da:34:75:45:7c:
a6:94:8f:68:ec:9a:57:fa:da:f7:9c:2a:ee:6f:09:a3:ab:e5:
54:cc:31:99:6d:e6:7b:3f:91:c5:ff:7c:3d:0a:2e:2b:5e:36:
d4:42:c9:3d:1c:86:b5:0e:23:7b:3c:c3:74:3d:02:d0:a8:3c:
86:dc:7b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:30 2025 by rpki-client