Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: vsEhzxKntfrG+1iSFnV8b26ZsjEh6cecnnV1fyUjnR4=
Subject key identifier: D8:EB:E7:ED:7B:13:7A:54:8F:F8:BB:18:5E:7A:39:E5:87:E6:98:52
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 0199FCC6B990DDD30FE2168A396DE460D7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 0733
Signing time: Sun 19 Oct 2025 14:01:46 +0000
Manifest this update: Sun 19 Oct 2025 14:01:46 +0000
Manifest next update: Mon 20 Oct 2025 14:01:46 +0000
Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=)
2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: T+DeGHQwrfusBfg34XqM8xj2Wlw0x8SCQQ88p0fzvsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b9:90:dd:d3:0f:e2:16:8a:39:6d:e4:60:d7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Oct 19 14:01:46 2025 GMT
Not After : Oct 20 14:01:46 2025 GMT
Subject: CN=d8ebe7ed7b137a548ff8bb185e7a39e587e69852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:e1:06:94:3b:b8:2b:9a:12:5c:03:51:b0:
00:51:c0:18:6e:96:5d:0e:f0:96:4a:d0:54:98:5e:
58:29:6e:16:3f:65:21:fb:22:71:bc:20:3d:2e:08:
63:bf:aa:8b:c9:65:8c:d6:9a:2f:05:77:25:a1:f8:
c1:69:d3:ab:9c:a9:39:21:5c:ef:1d:57:58:02:5f:
ca:3a:dc:b1:10:0c:3f:56:e9:62:6f:f5:80:4c:b9:
b0:65:4f:fa:e7:28:6b:e9:e4:c9:8c:98:3b:f2:5d:
2a:bb:09:8a:03:80:b6:be:b6:9f:84:b0:51:18:62:
6a:b5:76:13:b4:6a:8f:52:e7:f0:51:c0:49:e1:d6:
f7:1a:f6:63:32:68:f5:8f:93:00:b1:9b:97:b5:30:
ac:d4:9b:00:06:f5:9e:49:82:80:27:45:a3:b4:32:
7e:f4:ff:a5:14:dd:82:97:35:77:43:72:e7:1a:45:
67:8d:cd:71:24:55:e0:97:c3:a1:46:a1:18:8d:f7:
9d:8a:2f:e8:eb:5d:d4:fc:a4:34:45:d4:74:d1:1a:
f6:dd:92:c7:71:99:8c:85:1c:0c:34:37:37:d0:61:
b2:84:2a:3f:4a:96:d0:1f:b9:3c:1e:40:34:18:66:
e5:aa:f3:12:58:1a:ff:f5:dc:4d:af:02:8d:39:81:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EB:E7:ED:7B:13:7A:54:8F:F8:BB:18:5E:7A:39:E5:87:E6:98:52
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c2:34:ec:05:11:ef:8d:6c:38:13:13:da:c3:f4:b2:79:b8:
f8:a3:a4:a0:57:06:69:22:a8:d2:c8:48:28:05:f1:c3:5e:04:
de:bd:f8:37:7b:51:be:8c:06:82:54:93:d7:d8:eb:94:6c:a6:
d6:cc:0a:dc:e0:db:ed:e4:c0:3d:aa:ee:db:68:c7:40:96:b6:
bc:ac:04:8b:e6:df:29:43:a0:9a:67:a1:55:f3:a6:b9:c7:8e:
b2:63:08:0a:e7:12:40:0a:71:3e:8d:6a:74:23:66:d4:61:bb:
ca:20:b6:0d:77:ac:9c:35:3d:ea:66:b0:b5:d6:0e:9b:87:c1:
e5:07:71:c9:76:5a:2f:b9:3a:24:66:5d:dc:9c:2d:45:60:50:
b3:7b:24:6d:18:66:d2:81:f7:20:fc:0c:8b:be:47:04:ea:b6:
1e:fa:51:b6:39:03:88:cd:0f:d9:0d:1a:b9:d9:a3:e7:70:4e:
68:66:6c:1b:0d:c3:ac:1a:ce:37:1e:c6:31:c4:46:bc:c4:e6:
a1:d3:05:08:db:e5:93:00:8b:63:49:21:c3:7d:b0:90:30:a7:
fe:53:39:f8:f4:7e:bb:ff:9c:ed:49:b7:e8:17:56:b1:6f:4a:
08:29:0d:47:37:a0:51:5a:35:eb:01:32:06:ce:e5:4e:84:b4:
32:88:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:20 2025 by rpki-client