Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File: yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier: m7mK7MDeaDMyu3nvoplGN+DxMwptwG0MpTSRITa58bI=
Subject key identifier: 9A:41:D9:6A:19:98:3E:9C:D7:CB:62:55:77:AE:29:4E:12:FD:80:26
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial: 0199FC21BA8B54F1929403F4C57D9619A5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number: 030E
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa (hash: t72IL0Bu4xhSTiCzxaWI7CqqsPyLBuuMnaHiD42pbD4=)
2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: IzJG2NqlzdYDrd/lAJtcHFrJmiqxq8BwtyKRSpuZgJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ba:8b:54:f1:92:94:03:f4:c5:7d:96:19:a5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=9a41d96a19983e9cd7cb625577ae294e12fd8026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:30:03:1d:c9:ec:38:86:74:80:df:8e:30:
91:8b:26:79:75:30:8b:14:0c:00:df:5f:e3:0a:04:
bc:00:1e:75:61:16:7f:b5:a9:68:e4:ab:db:fe:e5:
35:ba:dc:38:bd:83:0a:38:a2:f7:56:dd:03:27:8c:
1b:88:05:c8:68:65:20:48:0e:05:30:9b:9b:5d:4d:
31:19:71:2c:35:45:e8:28:5f:49:3c:06:ae:a9:94:
0b:87:ed:75:97:2a:63:63:16:3a:32:d3:fe:4b:e3:
9d:80:78:06:c5:8d:bb:58:e7:c1:e8:64:b5:7e:b4:
f9:4c:5d:0f:b4:43:99:29:52:32:65:26:96:1e:75:
c8:3b:7b:15:de:86:8c:61:c9:3e:35:27:9b:c2:de:
b5:86:cf:1b:96:14:c6:bb:17:c1:34:9b:42:6f:16:
e2:fd:d0:a5:29:ce:d7:3c:b1:dd:a5:ce:39:5c:e2:
2f:7d:35:f1:d4:7b:4f:fa:0d:4b:67:8e:9d:fe:22:
e0:8d:87:28:f3:8e:c0:ee:cb:16:83:24:2f:ce:41:
72:79:d9:5f:25:e5:07:32:74:ee:e9:09:78:32:7f:
9e:ee:44:58:54:14:a6:48:8a:08:19:a8:92:d6:fe:
4e:6d:98:9d:b8:c1:5b:19:9a:8f:34:e2:2b:c3:7f:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:41:D9:6A:19:98:3E:9C:D7:CB:62:55:77:AE:29:4E:12:FD:80:26
X509v3 Authority Key Identifier:
keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:31:61:e8:42:b6:9b:01:ac:9b:0e:cf:ff:ea:90:3c:60:b5:
51:92:fe:55:e8:57:7e:57:69:7c:03:7b:93:d3:90:b8:b4:ff:
2a:08:c3:cf:f7:f6:05:a4:18:d3:ae:a2:d8:22:21:fe:5f:0f:
ef:9f:2f:09:f2:8c:bb:f3:14:f6:9c:0c:7d:29:77:19:7f:2c:
d0:f4:70:3a:1c:89:d5:c8:df:81:21:ce:98:fc:34:ae:fd:01:
d3:2c:ee:47:4f:07:37:74:83:2c:5d:ef:24:82:9e:4d:bd:59:
aa:cf:e5:00:8b:fe:1b:0e:3b:a5:af:cc:27:64:22:72:d7:3c:
d8:69:94:44:93:02:3b:83:16:21:07:c0:b3:fc:bc:85:8b:59:
e7:de:78:8b:0b:bc:89:b5:0b:dd:a1:59:00:ab:f6:24:e1:0a:
d4:b6:3d:f3:44:08:33:ee:eb:67:89:87:9d:d7:b7:27:02:9c:
f9:d2:fc:2e:52:fa:e2:d7:4c:80:97:4b:0b:28:f7:b6:96:02:
72:a0:b9:cf:a2:a9:df:70:72:90:ed:38:61:fe:ff:0f:49:69:
ee:db:26:34:05:85:b4:f8:60:7d:ab:04:9b:09:d0:65:d6:e4:
7f:1a:68:3e:97:20:de:0d:56:89:df:83:8d:c1:f7:8c:41:40:
c8:12:a2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:34 2025 by rpki-client