Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: B9V6LHGAJfxw3ij/Mc/9ggFSvw+vZBS8BUAI5b/gJMQ=
Subject key identifier: 31:68:0C:40:EB:09:BD:60:AD:AB:F2:80:9C:1F:79:2C:8A:28:6C:D0
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 0199FA69DD4291C213A91911B9055E7DC166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 0CDA
Signing time: Sun 19 Oct 2025 03:01:05 +0000
Manifest this update: Sun 19 Oct 2025 03:01:05 +0000
Manifest next update: Mon 20 Oct 2025 03:01:05 +0000
Files and hashes: 1: IUu38IEhp9FcGXHXO7VwuMNYV6E.roa (hash: 0chzG77l4zUiIxP7svJWJ4YTzi1qnItTODpt8dd9BKQ=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: 3EtWxYVbbsKnDTB1CTDiprs6Gepe9qqPva07N9TQtAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:dd:42:91:c2:13:a9:19:11:b9:05:5e:7d:c1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Oct 19 03:01:05 2025 GMT
Not After : Oct 20 03:01:05 2025 GMT
Subject: CN=31680c40eb09bd60adabf2809c1f792c8a286cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:ec:11:4f:48:ae:5f:a4:8e:3b:dc:15:d0:
b7:4e:fb:8f:d1:9c:ec:be:0b:c2:de:de:cc:3f:17:
6a:15:d3:71:24:b3:08:f4:f3:6f:f3:d4:43:4a:26:
05:95:36:ac:fd:7f:e7:3d:2e:d0:cb:a2:ad:41:36:
f9:65:5d:cb:d8:5f:7e:da:a1:6f:54:f7:3a:0e:2c:
0b:47:92:b7:b6:b3:b1:24:48:14:22:6b:3f:23:c3:
2e:77:bf:a8:50:bb:f5:69:56:dd:8c:2d:49:4b:43:
96:3c:3a:4e:74:7f:17:df:2d:71:bd:fe:46:f1:41:
01:3f:0b:36:4c:2f:2b:d7:7f:57:ea:08:28:1a:10:
5a:77:0b:36:d6:1c:95:83:c9:bb:74:be:df:d2:2d:
5d:de:81:1d:27:aa:29:0b:91:ef:b1:49:c1:41:ce:
39:e2:71:5e:53:c1:cc:57:10:c8:4e:27:9d:a3:db:
00:47:8b:46:e6:99:ca:f0:66:de:c0:66:e6:c2:c4:
a1:16:13:36:80:f9:2e:48:3a:0c:0c:76:86:e5:3b:
dc:59:e7:65:ef:54:75:b6:a3:03:ea:22:64:ad:cf:
12:b6:86:84:12:2f:81:ea:f7:62:f3:02:ff:d5:70:
47:f9:d8:8b:52:85:e5:8b:79:76:5e:61:db:36:e6:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:68:0C:40:EB:09:BD:60:AD:AB:F2:80:9C:1F:79:2C:8A:28:6C:D0
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:00:c9:81:dc:d7:6d:d8:f4:75:9c:cd:ca:32:34:3b:98:34:
a7:23:a9:da:51:4a:e6:6f:e7:cc:ba:88:e2:3a:ee:30:3e:41:
62:68:1c:82:c1:16:10:02:67:9b:b3:25:95:40:bd:1e:9a:1a:
64:a9:d7:0d:20:70:f7:1b:6a:e4:34:eb:35:fe:bb:36:87:a8:
0e:aa:89:d8:94:86:1b:7d:47:01:df:27:4b:ca:eb:cf:74:c5:
df:2d:e0:c0:9a:f0:cb:29:3d:df:04:54:6a:b6:86:70:c3:25:
d9:c6:97:8c:64:b5:b8:6f:e4:6a:53:ba:f2:de:3f:83:6a:f5:
93:93:3f:5f:b4:39:16:8c:76:92:cb:0a:a8:2c:df:90:7b:70:
ba:28:59:11:cc:73:22:3f:14:e1:99:60:4b:32:fa:7d:45:cd:
08:cd:e3:2e:c3:ea:21:0c:0f:db:90:4a:1d:58:3e:0b:b4:38:
e7:41:18:16:65:ba:ab:08:eb:64:1c:03:77:ec:cc:53:66:fc:
f7:9b:2b:1d:01:8c:3d:6b:2f:62:92:f8:47:d9:19:31:40:96:
4d:f6:d9:4c:14:4c:0f:1e:05:92:d5:09:3b:95:22:18:ff:2c:
cf:4e:98:5b:c3:8b:58:c2:db:dd:92:1d:4d:d6:da:55:f3:86:
2d:c5:d0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:36 2025 by rpki-client