Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
File: yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft (raw, json)
Hash identifier: 9+XYGLJEBKByxTZaX+QnSRCdzYtwnulu9mm6GKm8o8I=
Subject key identifier: D6:82:2B:6D:8E:63:58:5C:EC:7B:EE:18:37:58:3A:0A:17:6A:BE:9D
Authority key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
Certificate issuer: /CN=caacc4febb487996d4ee01d53b11f84203ca8367
Certificate serial: 0199FC21A229A76F9B5B56E19E8B97F45158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
Manifest number: 023F
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: Dribm7v4eJGFRaCGtu-42niad5g.roa (hash: COADFM31Atbne40gqBHSktN8SaWdLigZF/t1VPBNlag=)
2: yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl (hash: 7n2JdidwYgjN+qnZw9kuBcHWn1wTTF9gsTHTLB3hR/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a2:29:a7:6f:9b:5b:56:e1:9e:8b:97:f4:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caacc4febb487996d4ee01d53b11f84203ca8367
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=d6822b6d8e63585cec7bee1837583a0a176abe9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:7c:0c:dc:87:a2:d0:f3:46:66:97:a9:8e:
f1:bd:72:72:66:df:0e:cb:8c:77:4d:06:a1:2c:75:
3a:c3:8b:f0:87:ab:31:77:ab:91:b8:ce:98:57:8c:
1b:70:87:eb:95:42:a1:8d:b0:95:71:e5:2d:55:ad:
3e:dd:9d:07:a3:f1:4f:e6:cf:29:82:a4:a6:a4:25:
7d:3d:22:94:be:fe:19:d0:14:2b:de:5d:3d:0a:35:
13:58:df:7e:20:af:e5:49:32:89:f9:1d:2e:32:1c:
c7:af:f5:ed:ac:01:90:3d:e7:da:93:c4:10:93:04:
e2:31:d5:d6:cc:9a:07:2b:1e:d5:aa:fe:f4:aa:12:
38:06:c9:b5:8a:17:ed:72:19:d1:59:97:e0:83:bc:
93:3e:b1:d5:63:d7:38:fd:96:dc:1d:82:29:3b:1b:
1b:0d:e6:21:ce:44:fa:e8:33:73:d7:68:be:a3:5a:
ca:b7:19:47:c7:a1:37:77:90:03:b9:55:01:01:97:
10:15:05:35:34:58:8f:41:41:a7:eb:67:55:02:de:
f7:a5:15:e1:5f:3a:bf:09:02:73:ee:40:24:23:99:
44:9e:02:7c:85:a3:04:ba:cf:9c:05:73:64:d5:c6:
4d:46:04:45:50:a1:5a:53:27:f4:95:ec:5d:7f:bf:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:82:2B:6D:8E:63:58:5C:EC:7B:EE:18:37:58:3A:0A:17:6A:BE:9D
X509v3 Authority Key Identifier:
keyid:CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4d:e3:69:2e:ff:18:d4:be:42:10:2a:ac:ac:36:32:56:c4:
b2:1a:b6:de:38:0e:b7:eb:04:bb:a8:86:2b:7d:10:78:9e:aa:
62:42:9f:46:ea:69:77:cf:9b:2b:c3:c1:7a:38:55:02:01:ba:
7a:95:fd:5d:5d:e2:5c:d3:1e:08:b5:af:aa:6e:76:63:4e:7b:
d6:d8:00:6d:4b:96:ed:65:96:4a:55:70:47:a1:7a:ec:de:93:
9b:4d:e3:19:b8:59:a6:5a:78:55:8f:f1:71:aa:92:c8:8e:2a:
c0:67:4a:98:7f:19:d7:da:2c:68:23:f4:12:dd:1f:a2:c4:96:
65:1d:83:a4:08:2a:6e:bc:3a:ff:b0:4a:6a:58:81:fc:18:6c:
45:d7:09:bd:d8:b9:b1:88:be:a7:34:a4:e9:57:5d:56:b8:5f:
a3:13:3e:3c:0a:17:7a:bf:55:83:98:c8:db:87:dd:7d:ee:ce:
9f:13:2b:e7:ef:4c:56:03:c3:f1:7f:a9:17:aa:f2:22:04:40:
94:cf:d2:45:f5:16:c7:96:2d:52:40:96:72:8d:31:94:0b:76:
f0:61:64:c0:7b:65:a2:4c:27:70:64:0b:1d:fe:78:9a:d3:18:
1b:c5:9b:cb:71:74:22:0f:87:a2:c1:fc:47:66:1b:1e:93:50:
9e:5c:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:08 2025 by rpki-client