Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
File: yjuG5lRw-ZTfptb-6OJk22LiSvk.mft (raw, json)
Hash identifier: yOhB+Mo8UbuJW5ycCkymR6rwtNxgFbMEU/A5lWWsYmI=
Subject key identifier: DF:C3:24:EF:B2:6B:97:0E:D7:87:64:6B:11:F4:A1:62:C1:B2:4B:55
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 0199FBEA730991F0D07C598E15DE9B7C68E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 10:01:09 +0000
Manifest this update: Sun 19 Oct 2025 10:01:09 +0000
Manifest next update: Mon 20 Oct 2025 10:01:09 +0000
Files and hashes: 1: Db8DTjUYkYFq1VL2utnrt9ZhoOQ.roa (hash: d9GgydKG9uk/HAxIswAdFFBoSDorEX71FTaOERwLhzg=)
2: RfiogXB75ZZcw60YgsMcLXMGreQ.roa (hash: CxagJfgQ+HRjqYYAQUHG4nzSSm5GU9hHUNpe0/HqHLA=)
3: Vsvw7zSK2cjlfLBPzsEjNibepw0.roa (hash: fMTdJF0J/U/sST/3YzLYOWjYa8T84ONedHLdQ86kfmA=)
4: WTl9wt0Rp1_SP8V72BWndXzvVXk.roa (hash: BI9xuqlMchALIUZfnOAm1MAIdvbV4MZUCOFrf3rfZgA=)
5: yjuG5lRw-ZTfptb-6OJk22LiSvk.crl (hash: AjAQdDEitS6lYmgN370Ox2ZXtgFPja/kbfBxaww8sXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:73:09:91:f0:d0:7c:59:8e:15:de:9b:7c:68:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Oct 19 10:01:09 2025 GMT
Not After : Oct 20 10:01:09 2025 GMT
Subject: CN=dfc324efb26b970ed787646b11f4a162c1b24b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:45:d4:c8:3f:f4:74:e7:02:3c:de:72:80:
e2:65:20:b8:78:a8:5c:5f:d5:4b:4c:4c:da:2e:61:
a7:cb:79:ec:1a:aa:4e:92:1e:f4:dd:00:74:5f:b6:
ba:82:57:f0:20:a6:61:11:31:cf:f4:fb:a4:d3:68:
ca:48:12:75:51:b0:48:d9:bb:e4:f7:16:31:14:6b:
63:20:7f:2a:f0:dd:76:47:c3:c6:8e:1f:7e:06:0d:
72:03:ad:21:e6:b2:06:b1:7e:86:da:5f:f2:b9:85:
82:96:43:96:ee:0f:d0:05:b2:f9:6a:75:d5:c8:65:
73:33:29:6c:4b:9e:be:49:d6:d8:9d:5b:ec:19:34:
34:ef:9d:9d:4f:d9:cd:a5:35:03:28:47:53:b8:1d:
0e:00:6f:6e:7e:e0:7b:ee:cb:3a:11:68:0a:ea:b0:
2c:0f:0e:8b:cb:50:c3:b9:53:8e:29:2c:15:88:a1:
8d:19:ff:78:13:76:06:32:48:7d:51:09:e3:a9:18:
84:9c:73:90:16:60:32:c4:da:b4:0b:60:1a:36:88:
f1:97:ff:34:c0:b5:84:c6:04:f4:ac:26:8e:85:b4:
42:a9:0a:09:0f:e6:f7:da:38:52:33:c2:d9:a6:0a:
6a:d6:d4:fb:e2:a3:41:15:6b:45:2e:e6:7d:3f:bd:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C3:24:EF:B2:6B:97:0E:D7:87:64:6B:11:F4:A1:62:C1:B2:4B:55
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a1:d2:3e:bb:bb:04:2b:79:41:9d:13:f8:d4:f0:7c:03:40:
56:84:92:0a:4a:05:64:33:3a:9d:dd:d4:a3:db:42:21:a2:5f:
17:f8:c7:f5:dc:c0:10:55:c8:25:6a:ae:43:3f:fc:09:06:d5:
9a:a7:29:67:12:42:cb:33:c0:77:95:3e:a6:7c:74:27:ad:c0:
d8:4c:52:70:44:90:d3:64:45:f0:15:5a:13:b2:88:85:67:72:
10:ed:1f:e9:b9:12:10:37:1c:7a:cf:c4:a0:42:e4:e5:0f:5e:
58:b2:61:59:4e:0f:ab:e9:43:42:43:6b:10:7c:21:30:00:1d:
8c:3d:c8:b1:51:16:1c:5e:52:8e:ba:24:62:bc:f1:5e:66:12:
ec:d0:17:29:3a:4e:b1:c1:78:32:88:af:c2:6a:0e:e2:5f:80:
8a:b0:14:f0:4a:46:66:34:45:87:c5:42:87:16:de:33:0c:a2:
9e:14:c8:20:29:4e:af:96:2c:6b:b5:14:b5:ac:d4:b8:16:75:
40:04:04:cb:56:a0:4c:f6:be:22:54:37:43:66:b7:f6:fa:c8:
d9:16:42:11:0a:14:c7:70:8e:7c:40:d3:53:eb:56:7c:c0:5b:
09:a6:31:78:bf:c0:a6:84:f3:08:97:9c:a8:c0:c8:50:69:c7:
6c:1a:b5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:52 2025 by rpki-client