Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: kEcxb5U2WkmsBaSV9uXubmi53/U33zqN/GKo4sMXHzM=
Subject key identifier: 7F:F0:88:7A:F2:29:61:F8:20:2F:B9:7C:A6:26:A4:57:91:D7:DE:DF
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 0199FD347A487BBED79692410ACD12C65818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 1034
Signing time: Sun 19 Oct 2025 16:01:38 +0000
Manifest this update: Sun 19 Oct 2025 16:01:38 +0000
Manifest next update: Mon 20 Oct 2025 16:01:38 +0000
Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: 57e7D9/OYudsIpYgliWXvGpusZ3wDmrPXBMTNCa5r7o=)
2: iUluP9dzGEFPZV1QT7qhxKlYtLc.roa (hash: dqFbgrXc+CPp5bc1uUsZ9NzSqOeylcrCuwJIJApbIDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:7a:48:7b:be:d7:96:92:41:0a:cd:12:c6:58:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Oct 19 16:01:38 2025 GMT
Not After : Oct 20 16:01:38 2025 GMT
Subject: CN=7ff0887af22961f8202fb97ca626a45791d7dedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8e:16:98:09:29:1f:3e:9f:04:70:86:50:a0:
be:b4:61:e0:5c:cc:d5:88:99:e6:75:85:a9:3e:19:
4a:2d:4e:82:ba:29:66:ed:3e:bd:79:d9:81:e4:94:
4d:c5:b9:9f:a9:cf:ac:4e:ed:8c:1e:2e:8f:76:f2:
51:25:6b:8b:c3:7e:e1:d2:da:00:19:14:fc:53:9f:
c2:0c:e6:48:05:34:1b:2c:3d:be:20:f3:18:96:d0:
64:7c:28:20:c5:3d:19:71:dd:6e:6f:18:35:40:85:
e6:76:d1:40:9b:68:03:a1:4d:85:1a:fc:98:d5:a5:
14:42:9e:3a:94:24:f8:30:a8:3a:f9:db:d8:81:2a:
e9:33:d6:5c:45:a6:48:21:b1:e8:87:85:9d:2b:67:
cf:dc:5e:38:69:2c:3a:54:b8:9c:13:7d:6d:7b:e2:
c6:37:54:31:52:83:28:89:57:3a:84:71:59:7a:81:
49:63:84:90:63:ef:66:e3:41:28:ab:22:52:34:35:
1b:05:6c:aa:cd:0e:84:92:3c:ea:c8:21:4c:cf:f3:
11:e6:6a:bf:9a:1c:2b:23:57:d9:38:08:d8:84:9a:
02:01:4f:df:6b:2d:20:95:1c:d5:36:37:9f:fe:fe:
21:b9:1d:e5:b1:fa:5a:72:0c:d4:bb:16:2c:3e:bd:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F0:88:7A:F2:29:61:F8:20:2F:B9:7C:A6:26:A4:57:91:D7:DE:DF
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:33:05:fd:33:a6:d4:bd:8d:dd:96:b3:e9:5a:cb:56:6c:a6:
4b:56:e4:5b:18:e8:57:7b:2c:24:21:31:36:3d:61:4f:b0:06:
e2:e2:23:12:10:b6:bd:d8:bc:5f:d5:b7:b8:ab:77:29:8d:9e:
01:ba:0d:06:60:3a:81:74:b4:66:2c:7d:23:09:19:f7:01:08:
83:47:08:b1:c2:57:de:8a:34:d9:58:39:c7:22:21:d9:ad:f2:
89:df:e0:88:08:4b:8b:53:98:cf:bd:b2:57:63:07:91:83:6b:
3f:00:30:e6:73:05:2c:fc:f7:02:3d:e0:cb:33:93:20:ed:e6:
fc:a2:58:bb:fe:48:f7:41:cc:d9:c7:71:69:4b:45:b2:26:28:
c3:2b:9c:42:fa:85:ac:0e:0b:a4:8a:1f:ec:36:90:cb:16:d4:
87:92:85:a3:60:e0:d1:79:c5:89:26:11:5f:56:7d:e4:cb:8b:
83:27:5d:ee:51:ec:2c:de:91:b2:c0:a3:1a:ba:3b:40:b8:42:
40:09:5c:32:72:0d:fd:a9:30:b6:c7:27:1d:bc:5e:39:42:02:
60:83:0d:68:06:c7:f4:3e:62:11:0d:f2:02:f7:32:de:33:a9:
49:4e:f7:74:d2:ab:91:0a:c1:ab:93:6f:ed:3d:a4:1c:26:30:
fa:ee:a0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:50 2025 by rpki-client