Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
File: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft (raw, json)
Hash identifier: 8AQR1+Dz+YSUG2nAmKmf2W4blXxn1Lo5vhWeV98n8Jc=
Subject key identifier: 8A:1E:44:31:0D:0B:C2:44:C1:3F:22:87:5E:EB:D1:D1:F3:C9:B0:5D
Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
Certificate issuer: /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Certificate serial: 0199FE100A78ECA9ECE95F83E011C1C72AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
Manifest number: 025E
Signing time: Sun 19 Oct 2025 20:01:28 +0000
Manifest this update: Sun 19 Oct 2025 20:01:28 +0000
Manifest next update: Mon 20 Oct 2025 20:01:28 +0000
Files and hashes: 1: hGnhNt09WVSvAvlRb80VOz0njRw.roa (hash: reYotro4wzpVN+aJarCV//yL8yhlq3gQQiQttC9Xbrk=)
2: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl (hash: yltfGeILYLVLXjbFKu2fqKFoPAa33qoi/bhyv5sz1dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:0a:78:ec:a9:ec:e9:5f:83:e0:11:c1:c7:2a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Validity
Not Before: Oct 19 20:01:28 2025 GMT
Not After : Oct 20 20:01:28 2025 GMT
Subject: CN=8a1e44310d0bc244c13f22875eebd1d1f3c9b05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:12:99:e9:27:90:58:a4:ca:a3:c1:ad:65:
b4:fe:da:e1:81:22:34:e0:85:b8:fe:97:93:5c:52:
42:03:43:50:4d:df:b4:71:1d:33:12:15:34:eb:a9:
eb:74:09:0d:67:49:07:5c:ce:6d:66:87:98:ad:62:
2a:29:94:43:3a:fc:4d:7f:a4:ba:b1:ad:01:cb:79:
3c:66:41:3e:bc:83:5e:9f:f9:b2:70:c3:9c:b3:33:
c1:1f:39:e6:d4:f3:44:2f:92:73:cb:45:b5:37:3e:
3e:c0:a6:e0:41:59:6e:93:2d:65:95:a2:90:1a:3a:
e8:40:c2:77:58:5d:22:d5:0c:9e:59:1c:bc:4d:d8:
e6:50:5a:f4:99:c9:c9:2e:bc:6d:18:e6:25:27:1c:
01:cd:d8:57:c6:db:46:ac:5f:60:bb:55:6e:4b:04:
eb:8f:5d:3e:64:d6:18:a6:d0:1c:17:22:04:d6:6d:
0f:54:55:99:9a:11:64:b1:7f:b1:7a:b3:67:f8:bb:
79:33:38:9f:11:c7:a0:2c:a3:01:a3:39:31:67:50:
18:fc:aa:ad:78:14:6e:2a:ba:c6:ca:98:db:a1:8c:
7c:00:22:a9:19:25:d5:ff:43:b4:23:94:0d:47:39:
7d:ee:93:fe:6c:fd:33:dd:ef:a1:5f:63:1b:a0:a2:
54:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:44:31:0D:0B:C2:44:C1:3F:22:87:5E:EB:D1:D1:F3:C9:B0:5D
X509v3 Authority Key Identifier:
keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1b:30:bb:fa:d1:e3:86:3c:d1:6f:b6:1a:23:6b:0f:f4:b7:
df:31:61:2e:6b:5c:95:0d:da:7b:8d:86:0f:e2:f9:a5:45:4e:
5e:77:cf:b5:7e:db:61:a3:60:15:3c:a8:e0:d9:68:c6:11:77:
b5:e5:d1:fc:d8:0d:22:52:6a:3c:f0:7d:72:7d:06:4f:71:11:
3c:ee:f2:01:2d:9e:46:7f:70:52:b2:21:3a:fe:56:9c:2d:7d:
5e:da:ef:4a:d0:bc:df:e0:fa:9a:0b:39:b5:d2:c4:70:d5:c2:
2c:ca:19:1b:b8:ca:92:46:33:41:0c:ab:e8:7f:e1:4e:37:e7:
06:96:10:50:8d:3b:bc:5e:46:d0:38:5a:c2:e8:32:14:58:e5:
51:d4:93:be:13:cd:47:6f:8f:df:48:c4:82:6f:ce:50:ee:49:
6e:12:33:23:8a:17:84:05:d7:1c:f2:e2:1e:95:89:3f:6e:d1:
7d:29:dd:e0:82:6f:7b:ec:c7:6a:9d:5f:0b:59:45:d4:f3:fc:
08:24:69:52:44:1b:e8:64:cb:91:d4:f7:05:29:85:e1:e7:e6:
c3:71:05:61:76:a6:d5:17:d7:3d:eb:8e:a7:d6:16:3a:b8:c5:
1d:3e:8c:b1:f3:5b:c7:6d:54:4d:4e:9d:a2:26:3a:35:9d:9d:
50:78:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:58 2025 by rpki-client