Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: GoQvU/jOHG39J0/inJIb68P2q+7nkb6c324IXPLLNCg=
Subject key identifier: DF:54:30:42:37:19:10:87:28:BB:B1:55:1E:F5:70:5C:A6:47:B0:5F
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 0199FD6B0786E2809274CCD61E838845F46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0BE8
Signing time: Sun 19 Oct 2025 17:01:13 +0000
Manifest this update: Sun 19 Oct 2025 17:01:13 +0000
Manifest next update: Mon 20 Oct 2025 17:01:13 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: NV/YFiW7/dadGCA0xZ3Rnl3rJ6Vm1CtB/UdCLa/PfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:07:86:e2:80:92:74:cc:d6:1e:83:88:45:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Oct 19 17:01:13 2025 GMT
Not After : Oct 20 17:01:13 2025 GMT
Subject: CN=df5430423719108728bbb1551ef5705ca647b05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:e1:fb:0d:75:6d:e6:83:d5:17:a3:0c:12:
95:84:fb:04:89:c8:52:23:17:58:79:51:8d:85:5c:
f6:27:dd:7f:9e:d5:f8:9a:b7:c3:ba:14:d7:b9:c7:
43:2b:b3:24:9f:17:66:22:4a:40:c8:96:16:bf:f6:
46:ff:96:c1:aa:1f:f6:a8:ad:87:0c:f6:8e:30:60:
d0:f0:ad:a7:29:17:01:af:51:e5:58:fc:94:7a:6d:
e8:ae:11:ce:c2:4e:cd:8d:92:a2:26:c5:98:9a:3a:
bb:a8:06:57:55:90:fb:a8:4e:7a:cd:36:d9:4c:95:
74:a6:ac:87:b1:8b:84:fe:a6:08:49:1b:2f:54:8d:
50:e1:12:9e:e8:5e:e2:d4:99:51:36:23:5a:6a:12:
79:64:6e:38:24:a9:c4:ad:01:13:5f:94:74:16:6b:
a2:07:7b:37:8a:8b:d2:e0:7d:fb:27:64:e2:2d:50:
b3:ec:48:b9:ec:2b:7a:e4:f3:ac:de:2a:3f:2b:f3:
43:aa:44:80:53:f8:6f:4a:05:91:4a:72:80:86:5c:
5a:4c:e8:25:54:ec:35:e6:78:d3:94:f3:af:55:93:
fe:72:4c:ed:cb:07:df:4a:97:9e:e4:a5:49:72:dc:
ce:84:e5:e4:b4:e8:a1:9e:26:14:bd:ec:31:d3:73:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:54:30:42:37:19:10:87:28:BB:B1:55:1E:F5:70:5C:A6:47:B0:5F
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:11:3e:6e:32:e7:ce:78:88:24:a1:4d:84:52:8c:40:87:10:
71:44:b6:54:c8:70:b4:da:07:da:2f:cb:e4:89:10:23:16:d5:
1a:97:a2:b8:0c:4a:26:08:91:8a:d6:b3:de:d0:17:26:b4:19:
17:27:2f:82:1a:a9:51:bd:78:2a:23:a8:4e:44:bc:99:9c:9f:
c4:4a:c8:3e:2f:88:12:45:80:73:e1:51:d9:e7:ce:37:fc:7c:
c7:9a:d4:6c:f0:75:d5:55:be:8c:4a:db:39:f8:9c:2c:1b:1e:
17:84:dc:73:eb:51:1b:74:51:1e:51:97:aa:a6:8d:15:24:42:
73:84:76:2d:54:1c:c3:bc:e6:fa:07:29:87:12:45:b7:f9:d5:
a2:87:db:ab:dd:04:6f:cb:f4:62:57:7a:15:93:d1:7e:00:73:
a4:e2:66:05:92:99:16:a5:60:63:0d:a4:5a:5d:3f:a9:31:c6:
96:6b:58:03:8b:fe:78:b6:82:58:ee:e9:a7:39:5b:52:a6:32:
a0:ed:42:a9:14:0c:34:3b:40:a5:cc:0b:df:c9:f3:64:92:61:
e5:92:91:22:6c:16:78:ee:ed:e7:e8:74:48:4f:94:f0:b0:57:
2c:ba:8a:36:cf:b4:5e:02:ee:ff:38:e2:07:bf:b8:c1:03:4f:
8f:0f:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:37 2025 by rpki-client