Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: /CMl9eTnKFbiWDzokx1/IZjmSGuxG6n5+Vz3GFUqiJM=
Subject key identifier: 09:D9:64:89:BC:87:EE:7C:C3:24:CB:3B:B2:BD:8F:23:6D:2C:E9:19
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 0199FC58D2F6388158CA9C5309319E67EAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 112A
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: UGQT/ufy3RxtNE5yNFdf8FTFLaa9Q1buRqXo4gVXJ84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d2:f6:38:81:58:ca:9c:53:09:31:9e:67:ea:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=09d96489bc87ee7cc324cb3bb2bd8f236d2ce919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:22:fb:23:3e:30:fe:79:29:a7:da:43:60:
88:ef:98:43:2b:5c:0e:4b:3f:9f:71:04:11:be:08:
1d:2f:f2:ac:34:5c:fa:23:da:de:45:6f:85:51:9e:
0f:ac:31:b3:7b:c8:11:17:57:db:07:7a:17:60:90:
b2:8b:07:ae:85:22:72:6e:53:2c:09:e0:a5:6c:cc:
f5:99:0e:99:bb:e3:9d:5e:9e:41:b6:6d:61:09:80:
e5:c1:3c:7c:1e:14:ed:5b:66:88:a7:96:fd:70:40:
aa:67:ee:9a:0a:dc:2f:2d:66:a4:69:72:99:e0:72:
74:a0:4f:b8:82:e6:9c:96:fa:32:ba:08:dc:93:ad:
7a:c4:f3:c9:28:f9:20:e2:a9:3a:2b:ca:51:16:c7:
ab:45:99:a0:17:ef:4b:ff:b6:c1:4e:c8:6b:60:b9:
47:66:bc:01:2a:33:93:95:7d:71:95:02:47:94:84:
90:e6:02:0a:76:37:00:c9:7b:55:26:02:a4:8c:96:
97:16:1e:e2:8c:f9:e4:c5:b5:66:e2:1b:ff:9f:14:
ad:15:a6:fe:c7:5c:c8:2d:96:33:fe:b8:13:f6:6b:
f6:15:1a:4e:f8:27:c7:d0:d5:a8:15:1f:13:11:1c:
c1:be:09:ce:d1:36:3f:8e:15:41:cf:97:69:a9:f3:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D9:64:89:BC:87:EE:7C:C3:24:CB:3B:B2:BD:8F:23:6D:2C:E9:19
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ad:2b:8d:f5:11:be:c4:5f:34:80:c6:e8:49:30:f4:a7:19:
d9:72:3b:33:ae:87:87:0a:87:ea:38:3a:fb:7d:50:d9:eb:83:
6d:55:8e:16:ed:ac:a5:f3:48:33:e9:80:00:40:c2:c9:6d:e7:
0e:30:92:ed:76:73:db:38:66:3c:a1:db:53:c0:82:1e:8b:84:
dc:88:03:ef:9b:16:aa:83:37:92:44:23:9b:da:21:2f:2a:62:
e4:05:5c:6c:96:04:87:aa:79:21:91:cf:45:1b:34:fe:b1:43:
73:f3:66:ce:92:dc:3b:36:6e:9a:8f:dc:9c:91:25:39:e5:7b:
0b:1a:04:35:dd:62:07:1f:12:5c:58:36:2e:a9:2e:55:c3:cc:
e0:39:2d:b1:e0:cd:11:ad:f7:d6:86:e9:9c:d6:eb:a8:02:64:
84:91:32:b4:53:db:c8:bf:c4:2b:a5:b5:69:c3:35:ba:68:3e:
e5:75:7e:44:4b:e2:0c:65:6f:63:10:ef:01:55:cc:a9:4d:cd:
03:3d:23:10:31:05:54:e8:9b:04:d6:65:fc:61:fd:71:f0:f7:
7e:80:aa:1a:ae:15:b2:aa:cb:9e:b1:a1:53:15:d9:58:00:c8:
dc:02:31:44:5c:e8:40:50:b7:6b:8f:9b:20:40:18:4c:6f:e3:
03:ee:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:38 2025 by rpki-client