Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: OoH+2qOKpwuUGDE5r6YaViB4pwhJw5O4tk3Wx368HYA=
Subject key identifier: CC:2F:3C:B1:DE:65:42:7D:C8:0E:4E:6C:90:F0:24:FA:3B:AA:58:B7
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 0199FEEC00CB55FDBC9EA5359A5F4D4B6E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 0F3F
Signing time: Mon 20 Oct 2025 00:01:43 +0000
Manifest this update: Mon 20 Oct 2025 00:01:43 +0000
Manifest next update: Tue 21 Oct 2025 00:01:43 +0000
Files and hashes: 1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: rY6QnCP9GiYWC2ZOhVwJ8fbMucQZxn90TMUfhBm9nDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:00:cb:55:fd:bc:9e:a5:35:9a:5f:4d:4b:6e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Oct 20 00:01:43 2025 GMT
Not After : Oct 21 00:01:43 2025 GMT
Subject: CN=cc2f3cb1de65427dc80e4e6c90f024fa3baa58b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:86:62:f5:cf:e9:6c:b3:64:df:03:3f:8b:11:
ac:4e:9a:83:14:00:a5:5d:34:94:ec:1f:26:4f:b2:
1e:dc:63:b4:0f:67:63:fe:ec:51:01:8a:e1:ef:f8:
b8:52:f9:d2:65:ec:b6:e6:9f:9c:95:6d:97:10:fe:
d7:dd:85:01:dd:87:1e:da:dd:68:f7:a6:ae:9e:af:
3c:d8:86:a2:fa:81:8d:31:28:a0:bc:03:e0:d0:34:
d7:93:16:1a:c5:5d:aa:8b:de:bc:dc:23:da:2f:cd:
7c:28:98:30:f0:57:af:95:3c:5b:b9:c8:a0:b5:e2:
c7:43:f2:62:77:a2:ea:00:c1:4f:43:65:3b:eb:76:
37:e1:66:02:e3:52:d8:20:77:31:93:f8:20:3a:56:
67:aa:e5:08:a2:c1:b5:96:83:51:dd:98:ee:8d:93:
2a:06:4c:b5:2a:95:dd:51:03:b4:bb:6e:e7:a9:d3:
ec:5a:a2:02:3b:e7:7e:d3:3d:fe:9f:10:49:ec:9b:
70:6c:0f:91:01:97:d4:63:88:da:8f:36:7e:b9:5b:
c2:ad:e8:69:35:6c:d8:3c:a5:55:db:f2:97:af:3a:
3c:e8:61:1b:5d:ba:d3:9a:75:39:2b:29:40:c2:ac:
ac:33:f0:c8:02:eb:80:97:0b:c6:c3:62:ef:38:12:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2F:3C:B1:DE:65:42:7D:C8:0E:4E:6C:90:F0:24:FA:3B:AA:58:B7
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7b:a1:e9:39:23:51:a9:4f:00:4a:f8:e2:79:de:9e:5f:f2:
93:f9:14:2f:40:71:1e:67:c5:0a:80:9d:a3:b2:f5:68:2a:2e:
9a:a3:dd:bf:17:72:5c:63:5a:ee:5a:d2:0c:45:1c:22:c0:91:
b9:ea:93:47:d0:6e:19:dc:f5:f9:95:48:cc:93:7e:0d:1e:ad:
5e:77:39:bf:db:5c:af:69:7b:e9:a3:c4:50:ac:26:91:dd:3a:
eb:c1:2e:f4:7d:9f:f9:f6:6f:a0:4d:b5:47:c8:fe:70:1e:06:
70:b6:bc:df:65:2e:b6:05:95:57:6a:50:71:aa:63:f6:21:75:
9f:76:bc:6c:df:33:82:e8:e2:7f:70:16:90:8b:5b:0d:7a:40:
88:5d:e9:06:7f:b8:5f:c7:2b:2a:e0:50:bc:b4:73:9f:85:58:
d9:e1:1e:15:1e:b1:81:fd:03:f7:6a:1e:0c:63:e2:86:05:6a:
b9:9b:0a:48:04:42:ae:e7:51:65:63:47:25:47:44:00:14:b3:
86:86:f5:32:ca:10:e0:a8:76:a8:c1:b9:60:22:91:f5:ef:9a:
d1:f1:e6:84:89:2b:f3:fb:7c:49:55:07:e7:fe:46:d9:fd:78:
fc:bf:ac:27:bc:67:61:bf:b2:a6:b8:8a:94:9a:95:92:9c:bf:
23:e0:7f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:04 2025 by rpki-client