Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: HjH1sMiU6poqPEq1kk77mg6yr2HtnGUG/4QRrvWK0qg=
Subject key identifier: F4:E8:6A:E5:08:9D:F3:2A:9A:F6:EC:67:6C:C3:53:72:59:CC:DC:84
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 0199FBEADF5248C54B13753D589375CAF7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 1702
Signing time: Sun 19 Oct 2025 10:01:37 +0000
Manifest this update: Sun 19 Oct 2025 10:01:37 +0000
Manifest next update: Mon 20 Oct 2025 10:01:37 +0000
Files and hashes: 1: BiH4T1QItrDeKmbSQQD10MbyJM0.roa (hash: 1DccZm+wbtnRwvwFHLQW36Ec7g4Qt5rsBnmXwCd1CCk=)
2: lIzlzaB9MfYSOvJtbmvms4JbSXQ.roa (hash: 7pNuzEMq5SGi7oY7hUTVuLhRAftrVbTi7LJ5DaYy2Z4=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: bNOneZDPjCImwvsHtBynZf/+0Lzn1z0rcfqNn7Ww540=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:df:52:48:c5:4b:13:75:3d:58:93:75:ca:f7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Oct 19 10:01:37 2025 GMT
Not After : Oct 20 10:01:37 2025 GMT
Subject: CN=f4e86ae5089df32a9af6ec676cc3537259ccdc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:12:16:78:4a:57:b6:8f:52:30:22:7b:91:
de:d7:a4:3d:80:12:8f:41:a9:4b:e5:fc:77:6b:fe:
df:8f:ec:56:dd:c9:aa:c7:f9:0e:4f:d1:b2:a5:90:
91:01:ca:a2:c9:c8:a5:04:f3:63:ad:fa:a4:38:4f:
0f:64:46:f3:06:b2:e2:79:7a:b7:bc:e8:75:3c:35:
af:0f:9c:8f:39:03:e3:56:2a:cd:f0:0f:59:37:32:
46:a7:d7:d3:c1:29:75:46:43:03:e1:9f:ea:65:2f:
2b:04:1b:23:59:8d:9d:b8:06:26:84:7b:44:9c:63:
ea:ae:30:3f:9b:f2:2b:26:90:3e:b8:c5:85:d1:f0:
39:38:56:f4:0c:2a:76:24:3f:e4:0b:e1:06:c1:a1:
38:9e:26:11:93:8b:7e:fa:cb:82:69:b0:cb:c8:4b:
0e:5f:45:9a:1d:e8:65:22:e7:bf:a8:09:3c:1e:f5:
66:91:a2:b5:60:11:6a:8d:95:41:c8:f2:83:14:80:
58:19:2e:7c:81:de:87:4b:39:7c:15:af:a4:43:57:
85:8d:ef:02:04:a9:e8:e5:84:09:ef:b0:70:b8:68:
6e:ba:e0:55:38:34:63:ce:39:a1:2b:bc:f4:4f:8f:
f5:21:e9:7a:99:d9:1f:ed:0f:6b:33:a7:ad:34:dd:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:6A:E5:08:9D:F3:2A:9A:F6:EC:67:6C:C3:53:72:59:CC:DC:84
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d5:77:2c:c7:8a:c0:5a:ca:9c:f6:8b:5a:33:31:bf:d1:70:
0f:98:80:0c:9d:8d:ff:0d:98:8d:49:af:0a:6e:4d:ec:a2:85:
1c:75:10:50:8c:46:07:80:37:a3:8b:ce:d5:15:0a:e6:c6:21:
5d:0a:d2:8d:f5:6b:b0:3c:29:3c:5e:df:bf:09:09:51:34:6b:
7a:2a:b6:24:a4:f7:c3:30:3b:ab:9a:97:c7:fb:bd:d2:81:ee:
4b:b1:96:63:e6:e1:a2:f3:bd:45:6d:4a:85:55:e6:22:b3:5b:
6f:80:5b:ad:27:0a:9e:4c:32:79:fc:38:08:ed:92:a0:47:bf:
37:29:fe:29:b8:59:b1:61:e5:80:b2:6b:bd:20:07:d3:1a:c4:
a9:be:2f:e7:d4:a6:28:98:f5:85:c7:96:bd:74:d6:c7:99:54:
4c:1a:aa:f9:85:d0:28:22:32:70:f6:9b:e2:8a:28:d6:58:15:
65:7a:cf:f6:f5:27:94:9d:6b:c0:90:c1:c4:a5:a7:ca:00:43:
86:fb:52:2b:96:f7:e6:a5:46:42:d1:e7:2d:7a:eb:43:b1:fd:
79:0d:06:8a:43:49:0b:49:97:66:f7:4a:b8:1c:06:f2:22:1f:
16:e4:c0:37:dd:6c:aa:6d:bb:9f:a5:aa:5f:ad:79:d8:85:a0:
42:cd:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:19 2025 by rpki-client