Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier: 7oNTCzvVFEHonNrbigY0/jT50/M2HaVVeILNxu4LPCE=
Subject key identifier: 78:50:D0:A8:B2:ED:9E:8F:6C:D8:93:FB:08:2C:DB:11:C8:59:3E:7E
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 0199FC58D7DEB89D60611BA344DD0010CB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa (hash: yAyZKCviC/wjO248iuIwgpoUtsrF9JNp+X9B5Xdnj9A=)
2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: 1KtRyUvKpG+Mg0BpaIXn9+SZF6s+IoLeDe3SBrgvD2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d7:de:b8:9d:60:61:1b:a3:44:dd:00:10:cb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=7850d0a8b2ed9e8f6cd893fb082cdb11c8593e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:0d:b1:ae:69:5b:17:f2:7b:df:c8:20:b7:
74:ea:2e:13:f9:41:c0:27:65:15:94:e2:db:e4:d3:
b8:9f:56:ce:9d:50:c8:e4:9d:98:8a:24:e3:80:5d:
c2:20:a7:98:28:d5:47:0e:0f:4b:d9:df:86:d3:64:
12:85:d0:12:6e:f5:22:1b:a6:3d:50:01:c8:42:91:
65:c7:de:0f:f0:60:84:6c:9f:f7:15:45:84:60:86:
48:1f:08:a1:90:08:a2:0f:e5:84:34:29:6a:9a:d4:
ba:aa:3d:5d:4e:d2:8f:0c:bd:18:54:c5:da:c3:68:
cb:cd:20:7a:7b:8f:99:c8:34:a2:c6:a6:06:8d:4e:
ec:23:e5:90:45:15:08:2e:f8:8f:c8:24:71:f4:e3:
96:e7:86:43:72:c2:31:1d:b9:31:09:34:08:d3:22:
8a:f3:c8:ac:67:15:cf:5e:56:e4:61:0e:18:65:f0:
c6:f1:bf:cc:c2:22:b7:ca:1e:e4:e2:f4:c1:32:2c:
36:9b:9a:14:f1:61:c9:a9:f8:3b:4e:13:41:12:12:
12:12:67:07:55:2d:b0:d7:ff:65:d7:92:b0:9e:81:
30:82:e9:68:14:69:9d:44:f1:55:b2:e3:58:d8:4a:
65:e7:94:5e:96:b0:44:61:d5:a6:c8:98:86:7e:33:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:50:D0:A8:B2:ED:9E:8F:6C:D8:93:FB:08:2C:DB:11:C8:59:3E:7E
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4b:1e:79:1f:5e:b3:3c:8b:75:76:7a:9c:b2:12:7b:0d:66:
32:e3:4e:7c:e2:10:9a:88:78:77:6a:8e:3c:be:6d:63:9b:9e:
3a:32:ee:6b:fa:d7:51:dd:80:f4:01:2b:83:cd:00:cb:9a:a7:
2d:4c:1d:34:cf:0c:ff:9e:a8:bf:8f:28:d6:62:95:8a:1c:d5:
ee:71:0e:ed:17:ba:3d:d9:06:08:c7:a8:c6:57:6c:1a:dd:ec:
77:b6:cf:d1:f2:7e:2e:fa:36:1c:b5:89:9a:6b:08:fd:be:0b:
81:0b:c6:05:e3:e1:c6:a5:6d:6b:c5:d7:e7:66:2a:6a:26:da:
21:16:2b:3d:42:ae:e5:07:7d:9a:c4:3f:91:d0:9f:31:93:b1:
74:52:d5:81:29:00:70:3a:0b:94:8f:ff:4e:0b:a8:5b:1f:c6:
3a:c8:8d:24:b4:f7:d0:26:80:45:2a:87:e5:99:af:71:b5:e6:
b0:2d:1b:b2:2c:02:bd:ec:15:53:3f:e6:c3:b7:4f:47:76:97:
3f:bc:05:19:5e:1b:63:5c:0a:42:06:82:89:e6:6e:4e:d2:33:
9b:dc:69:2f:d4:b1:b6:c0:01:d4:4f:17:e3:b7:c1:a5:5d:21:
c6:74:c9:ab:c6:68:3d:65:07:72:b8:08:5c:d6:df:63:73:db:
70:d7:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:18 2025 by rpki-client