Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: gVU6LIxVc0an4lGHTHJjqDuWJFSZA52iFxQUVYNA8p8=
Subject key identifier: D2:06:70:94:02:19:76:42:E5:7C:6C:42:CF:5C:13:45:CA:E6:76:2B
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 0199FC8F9DC27C8CC2F7E8231852E21B6F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0E17
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: 9XygBSryOBJw30MacpuexIprMhOlDkj6fDQ07wHfGlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9d:c2:7c:8c:c2:f7:e8:23:18:52:e2:1b:6f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=d206709402197642e57c6c42cf5c1345cae6762b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:21:b8:d4:77:50:be:92:87:96:ae:ce:72:
f7:bf:f2:1f:1c:89:cd:34:65:a7:20:4f:7b:43:cd:
b0:57:6c:41:fe:f5:48:83:29:db:b3:a0:6e:ac:56:
93:f1:57:d9:07:46:11:6d:30:18:8b:4e:d6:40:68:
d4:d6:33:9b:e4:a2:1b:4a:0b:42:15:3d:25:34:0e:
41:df:bb:f7:3a:7c:b5:e5:55:ac:d1:c5:60:d7:13:
38:83:51:23:45:0f:75:11:80:d9:4b:c7:03:82:25:
b4:f5:7c:5d:ab:53:7e:16:ab:cd:33:07:71:9f:ea:
b0:6e:55:31:8e:06:8f:83:21:73:8b:e5:7c:a3:c6:
14:9e:4b:fe:00:22:ce:a9:2f:bb:0c:d4:c1:d4:bb:
68:6d:b5:da:df:20:a3:bb:48:07:c4:69:0d:2d:89:
fd:3e:81:88:a8:13:a5:80:1e:39:36:60:4d:a9:7c:
bd:0c:48:34:8d:4c:18:e7:28:bc:36:2f:72:c4:7b:
cf:5b:c2:f9:c9:3b:81:1b:db:58:9b:c3:08:50:a5:
42:79:e8:04:b6:38:14:10:d1:db:37:98:b1:c5:8e:
a8:b2:1e:ee:59:8f:19:ef:0e:61:ea:e5:bd:eb:8b:
4f:a5:48:60:ed:52:d0:ae:fb:37:da:2d:ec:c0:e0:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:70:94:02:19:76:42:E5:7C:6C:42:CF:5C:13:45:CA:E6:76:2B
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0e:e8:4f:55:2b:33:f8:ba:b0:05:56:57:4f:65:df:2b:e0:
9b:29:3e:51:7f:e8:b4:14:6e:4d:9c:98:b1:b1:c3:16:46:6b:
b3:ba:40:bf:51:60:a5:d0:c7:76:1d:d1:67:7e:fb:68:b5:2b:
d8:32:aa:ba:03:26:92:98:ab:c3:c0:84:de:8c:52:5d:63:99:
69:23:cc:70:d4:c0:fe:24:0e:4a:d1:77:9e:2a:de:56:fe:64:
8a:87:22:c2:91:48:92:db:e6:36:8b:ce:f0:4d:60:16:18:1c:
cc:0e:4a:96:bb:f4:08:28:31:a1:1a:34:e4:21:1c:71:f6:31:
75:38:8c:5f:f1:ce:75:70:7f:86:b3:c5:f6:0b:64:c7:fa:d5:
c3:06:da:5f:b6:06:c4:2d:4b:20:18:0c:2a:61:5b:62:1c:24:
b5:db:35:9d:6e:a9:02:95:ea:00:97:8d:cd:77:0f:b7:49:ec:
4e:ce:f5:2f:de:9d:24:a0:01:05:19:4c:b1:5d:21:17:31:0f:
db:23:2c:3f:04:7c:35:50:01:f8:b5:37:6b:cd:44:05:60:f5:
9a:5c:7f:68:65:9c:bb:6d:93:aa:9f:25:40:51:ed:34:db:93:
8e:41:33:c7:bb:cb:b9:57:93:af:af:62:1e:1d:43:2b:44:13:
b2:3c:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:05 2025 by rpki-client