Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: 8A2YhLyVb79KO+2gq2XEWND1RGVPVpx+py43vtloLvA=
Subject key identifier: 2F:B9:D8:F8:D3:2D:9B:26:E0:7C:E4:C5:AD:A2:9E:E7:72:49:40:24
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 019A0147D938864FD3111FCD225B12D1A11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 11:01:16 +0000
Manifest this update: Mon 20 Oct 2025 11:01:16 +0000
Manifest next update: Tue 21 Oct 2025 11:01:16 +0000
Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: AVXNLaAmmmkN3CI6hogPrl1M/BijAElKa9TK6g1mpow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:d9:38:86:4f:d3:11:1f:cd:22:5b:12:d1:a1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Oct 20 11:01:16 2025 GMT
Not After : Oct 21 11:01:16 2025 GMT
Subject: CN=2fb9d8f8d32d9b26e07ce4c5ada29ee772494024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:08:93:78:f3:ac:5a:e8:04:2d:60:5e:ad:
55:1c:8c:e0:f3:c6:ef:1e:09:97:09:27:c6:74:25:
47:f8:ed:70:d3:4e:3b:9b:a6:64:b0:a8:b6:26:5a:
31:43:d2:d9:ad:7a:f1:d9:47:71:c3:56:34:c3:57:
fd:89:2d:48:66:50:92:69:7d:40:6a:e4:40:e1:5e:
6f:f4:4b:45:a7:9a:bc:fe:89:ce:23:25:16:87:fd:
c1:ea:71:48:2b:a3:49:4c:ef:11:f2:60:94:31:d7:
e0:44:8d:dc:cd:7e:d3:67:45:84:8c:bf:d2:f8:2d:
80:b8:07:d0:52:d1:e5:24:ba:32:f8:6e:a2:a8:7e:
b7:c0:64:75:4c:8b:e4:1a:20:39:6c:77:d4:75:bf:
af:e2:69:2c:97:0c:21:00:ea:69:1d:8a:4f:ad:44:
83:a5:14:51:d4:d2:9d:b5:56:2e:ac:fe:b3:2f:32:
2d:5c:63:87:ae:b1:79:e7:22:34:ac:a4:05:a3:de:
0a:a7:a7:99:23:4c:0f:9e:68:87:fd:53:d5:07:08:
b3:35:4d:61:1d:e3:4a:6f:5a:0d:7a:dd:e4:91:ef:
bc:75:ee:57:2b:92:65:32:c4:17:bf:29:7b:43:23:
c0:6e:49:14:bf:96:f2:07:60:bd:5e:26:ad:50:ba:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B9:D8:F8:D3:2D:9B:26:E0:7C:E4:C5:AD:A2:9E:E7:72:49:40:24
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b6:3e:e9:9b:e5:cf:0e:bf:34:0d:ce:f0:82:b9:fb:97:5b:
a5:25:4c:85:cc:ce:91:66:20:8e:e8:c1:19:f4:91:ce:57:65:
63:4b:7f:7d:8d:c0:79:c7:9e:72:ae:38:dd:99:4d:10:af:e8:
e1:0f:55:3a:33:93:ad:d9:46:65:3a:e3:52:03:1f:ee:72:ee:
f0:eb:b8:ab:67:b4:74:5a:56:60:31:55:91:82:88:27:3a:d7:
f1:c3:82:f7:23:81:4f:e4:44:3a:ab:61:e6:49:20:28:10:94:
fa:67:36:b3:05:e1:14:a0:9c:ff:cd:40:20:4a:ee:b8:d0:af:
78:3a:d9:d0:f7:59:44:e0:90:75:61:53:75:45:c0:88:18:cc:
7e:26:4c:19:ab:6a:8d:03:d1:47:c6:ce:18:13:01:24:4d:41:
72:a3:15:05:85:9d:58:13:34:8c:8b:1d:ec:a2:33:54:d4:f3:
1c:1a:ac:17:a5:7c:a9:00:1a:c0:d4:f3:71:86:74:b2:71:22:
bc:2e:af:cf:c1:31:8f:1d:a7:e8:56:ec:af:50:bf:ed:e6:eb:
f2:fd:2d:9f:e3:76:58:ef:fb:7f:fe:5e:72:4d:4b:6a:4f:7e:
58:68:f9:16:ef:dc:33:03:6e:12:59:4c:ac:58:cd:fa:bc:a5:
16:e3:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:29 2025 by rpki-client