Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File: yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier: bVkU418/9iieph8YRUeg4mWs9H0Y3vTrmOVGwhSoCeM=
Subject key identifier: 3D:FA:24:5F:94:42:0A:A1:02:3B:0D:D8:22:C8:F0:E2:5B:CE:A7:6B
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 0199FF22578A58481BA668F1517D98133371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number: 12F3
Signing time: Mon 20 Oct 2025 01:01:04 +0000
Manifest this update: Mon 20 Oct 2025 01:01:04 +0000
Manifest next update: Tue 21 Oct 2025 01:01:04 +0000
Files and hashes: 1: 9fWXkacnWfLXH44Xb8HrXGzmknY.roa (hash: ueIT5017I7hv93aOprGzdVNSjT4YNhBA1fdwv5/AgdI=)
2: HRQ3zVG8fQhstKqXqVzvaQOYW-8.roa (hash: J4bA2yn+4d47gpldTm1th3QAEiyAys+UIYmTMp8Fvck=)
3: KW27n6S1v0MgxCxbh7E0buBfif8.roa (hash: toMOgZfSEbU3csqRPx4QZ9cAdliSmxp8YH9UOfmQEwM=)
4: f9hfmHvrY5AwY36q7MIQ4falWVM.roa (hash: poIPC46neVOYvv7bF8o92LK9XXWLEMpfpDFVMKy16AU=)
5: gu6tT7UFC6FmYiSvKO6wxYLbsHc.roa (hash: 33W9F+bpX2oF1GIOeMA/5dpyW1er0qfORrvZ4OzY3Zc=)
6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: 4xcT6iCKacJTX1+RrAf+i+trOueEyHcEEIyODxrtjLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:57:8a:58:48:1b:a6:68:f1:51:7d:98:13:33:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Oct 20 01:01:04 2025 GMT
Not After : Oct 21 01:01:04 2025 GMT
Subject: CN=3dfa245f94420aa1023b0dd822c8f0e25bcea76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f7:20:c3:de:89:82:0e:a5:e1:87:e2:99:b8:
c0:20:63:95:62:98:3f:e1:af:f9:c4:c9:13:ad:84:
02:65:e7:4f:e5:6d:70:b4:01:a1:0a:fd:ab:47:f4:
4b:c3:83:38:95:31:6b:be:d1:66:06:83:e6:c5:3d:
67:88:75:55:a1:1d:90:78:98:46:89:83:98:22:08:
02:ed:51:ae:62:de:48:df:cb:40:95:f5:ab:db:21:
c6:20:58:3b:8a:27:73:a1:7d:bc:14:b4:a3:86:b0:
f8:4f:8c:fe:2c:26:b7:f3:38:bb:23:94:28:77:2f:
39:7d:12:46:d5:54:f8:1f:bf:88:87:a0:37:f8:c7:
84:4d:fc:ef:13:ea:89:7e:b1:38:12:e9:de:a5:30:
52:a7:47:b8:83:1a:63:15:7c:c6:88:03:85:50:38:
a1:9d:00:40:69:75:47:e2:e4:56:0c:a9:1e:f5:7b:
f2:01:7b:22:f5:8b:cc:d1:6b:95:96:3b:e2:4f:b1:
03:78:e6:c9:5e:13:1a:d8:d1:b9:2d:92:dc:7f:a9:
71:e7:92:8a:3d:fa:62:7a:82:e9:13:4f:8b:ce:99:
45:dc:5b:c5:e6:bb:45:27:db:38:de:ad:81:10:e6:
92:29:a5:87:09:4e:dd:b7:bf:ad:2f:7a:b1:ad:e5:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FA:24:5F:94:42:0A:A1:02:3B:0D:D8:22:C8:F0:E2:5B:CE:A7:6B
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:38:74:8a:5b:76:cf:3b:66:6d:50:f3:86:b2:af:49:87:f2:
e8:a5:85:11:01:8f:7b:54:e2:b9:4a:f0:45:59:38:bd:d4:e4:
4b:83:69:3f:ec:a7:84:e3:37:9e:2a:2d:ff:2d:3b:ee:67:a4:
97:56:b0:35:cd:8a:50:70:a9:cb:d2:4a:98:8c:f7:ee:81:7c:
d8:d8:7f:5f:97:0b:ed:90:d8:7c:f9:55:5c:96:04:a2:ab:4f:
73:43:b9:12:e7:be:e1:d7:56:6c:af:3b:6e:f6:13:64:d1:de:
bb:cb:a5:11:cb:cc:c3:5b:b9:73:c3:5f:7d:10:2c:d5:40:c8:
71:8e:19:5e:d6:ea:69:7f:b9:84:a5:bc:02:6c:a0:9a:10:0b:
ba:ea:4a:8c:4c:9c:62:a5:2a:2d:cc:1e:dc:11:fc:1a:50:41:
d7:7b:ed:29:40:ce:c8:7e:d6:36:40:12:bb:a1:e9:5b:02:ca:
06:d4:f8:4b:bc:3a:5a:ce:c9:6e:2b:64:12:49:f8:1e:cd:70:
ab:5b:74:3d:07:50:79:98:c7:d1:da:fa:22:2c:a3:53:c9:d5:
9f:07:68:71:ae:27:06:70:ec:31:9b:c0:62:3d:dc:41:9b:bf:
2a:c4:54:38:ec:bd:ab:b3:9a:4f:6d:56:d1:50:9b:2a:cf:16:
3c:35:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:38:47 2025 by rpki-client