Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: h+lW81S1/fO+aTN8rSlPrdxkIQtnGGuRPx7XwPKGiZk=
Subject key identifier: 42:1F:C0:C6:FC:EA:87:67:4E:C7:EB:5C:3F:0E:76:A0:E6:E0:42:17
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 0199FDD91F0102D107B83F259BF38325C1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0C04
Signing time: Sun 19 Oct 2025 19:01:28 +0000
Manifest this update: Sun 19 Oct 2025 19:01:28 +0000
Manifest next update: Mon 20 Oct 2025 19:01:28 +0000
Files and hashes: 1: 1-xE0-vSES3q7X24C7bA8kScsYVE.roa (hash: AMR+YDswQHGejlMnTq+0urVDztOvK2YpsO5lA8H1zXk=)
2: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (hash: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=)
3: KwFiVQgCHTlXMY_TYL_laU7APsg.roa (hash: qfYaVhKwplFB9wdvFF2eG+ZvwUUFbi4aeim7C9EVTCM=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: zdEhXXKKFAb8/vf1CP/WFDrBi0OR92Ylfgukbmy36eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1f:01:02:d1:07:b8:3f:25:9b:f3:83:25:c1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Oct 19 19:01:28 2025 GMT
Not After : Oct 20 19:01:28 2025 GMT
Subject: CN=421fc0c6fcea87674ec7eb5c3f0e76a0e6e04217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:37:46:d7:78:d5:55:b8:d3:d0:a8:bc:29:c6:
2e:c7:50:c1:9d:92:87:59:5a:1b:d4:2a:f9:b9:78:
2c:da:14:fd:a8:27:ad:bc:da:2a:c6:f5:a9:14:71:
4b:a6:29:0b:1e:02:5e:f7:bc:2c:48:1a:3d:ac:c2:
a2:32:46:fa:1e:ee:0b:83:fe:c4:7d:15:03:d7:a6:
7a:35:49:22:71:eb:ee:f0:e1:b8:1c:30:24:ad:4e:
f4:5e:7b:ae:fa:2e:79:19:a2:69:3f:23:65:aa:b0:
00:8a:e5:32:a5:2f:6c:fb:80:25:62:65:1e:f1:55:
db:2b:32:2a:09:1d:32:f3:53:29:3c:fa:51:ec:63:
34:ad:f1:25:99:c2:e5:d3:d0:88:4e:b0:40:3f:dc:
2c:c4:62:53:69:9d:6a:e4:bf:f1:7a:3a:c2:58:34:
0d:80:01:cb:0b:04:bc:00:55:2a:d7:cc:4d:5f:11:
d4:85:f0:18:6e:c8:69:54:48:ad:3c:0f:53:a5:75:
d6:15:a5:82:7d:53:c9:a7:9e:85:fb:f7:68:a0:99:
32:15:81:6b:84:96:4d:1a:bf:cc:70:ae:78:dd:41:
dd:bd:87:a4:92:a3:4e:b3:2c:86:20:b3:31:c6:ad:
50:45:ac:3c:52:45:77:88:61:f4:49:ad:9c:18:78:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:C0:C6:FC:EA:87:67:4E:C7:EB:5C:3F:0E:76:A0:E6:E0:42:17
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d0:25:ef:f7:99:b6:d5:72:aa:2f:c5:95:93:85:00:78:e6:
04:8b:a3:b4:b0:36:fb:60:02:c0:4e:6c:3e:99:16:a9:bd:ab:
b3:18:87:e5:d8:61:47:3e:34:d5:f4:b8:ad:49:9e:84:2a:f7:
85:8c:c7:9a:c0:89:72:4f:97:47:60:4a:a9:36:f4:01:09:7e:
64:1c:f2:b7:f5:ef:12:cc:ea:bc:15:9e:15:de:4a:67:aa:60:
81:14:5f:ae:64:14:f2:12:6a:a7:1c:69:a3:b5:7e:43:6b:74:
92:cf:e1:76:fe:5d:44:01:c7:b7:51:0c:7f:43:26:22:62:97:
7b:36:db:ef:4c:45:13:e0:a0:09:2e:8a:a3:83:3b:54:86:b1:
6d:11:f4:47:6e:80:6e:f8:29:58:a0:6d:75:49:cb:6f:19:70:
d2:8f:25:0b:36:62:38:24:33:f7:2a:9d:24:e4:4e:30:05:d4:
d2:71:7b:cf:b7:9e:3c:6e:e9:8c:9d:2f:51:c5:74:b5:fb:47:
f9:41:02:cd:87:54:02:e8:a5:eb:94:2b:1a:a8:5d:1d:59:19:
c4:28:d0:54:7d:ba:cb:cc:bf:2b:31:8e:cc:4b:a8:7a:5f:56:
48:8b:85:98:7f:fc:d9:c3:3f:d5:c8:62:b9:c0:58:bc:ff:8e:
58:3b:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:56 2025 by rpki-client