Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: ostOQI9lpMnLoq4g6x0Wsz4cAn6mzRsW4gN4123Vpy8=
Subject key identifier: CA:4F:44:67:99:6E:B8:8D:FF:CA:63:FB:EB:94:C7:A2:D9:EF:91:03
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 0199FCC63EBB227B9C616F9AF5E6EC1BC767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 0E71
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: bvkXj7ORJ+Z9+ZtyBtENrhbvxFTk5VV/hzdFSRi73zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3e:bb:22:7b:9c:61:6f:9a:f5:e6:ec:1b:c7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=ca4f4467996eb88dffca63fbeb94c7a2d9ef9103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:e4:a4:ae:84:8d:a1:cd:14:f2:15:49:13:
69:3d:c5:ac:94:c8:b2:2f:10:83:3e:e6:c1:b9:f3:
bf:d4:51:e6:05:4b:3d:cd:20:6c:c9:77:5f:92:8b:
ce:9c:1d:66:68:e3:e8:ea:16:70:63:38:10:eb:f4:
7f:db:21:b4:8c:0f:b2:f0:23:68:ec:4e:29:bd:d9:
4b:83:a4:7c:59:3d:16:66:10:8c:f3:23:09:ab:7d:
0a:a6:c0:6a:03:49:ff:f4:1e:ca:0d:4d:a1:21:02:
31:01:7d:ff:26:ba:9a:e4:8c:97:a4:e5:ab:41:13:
6a:df:7a:f7:50:59:30:af:68:61:6e:55:cc:32:2b:
4a:79:2d:0a:1d:36:e5:77:6e:45:5e:bb:99:11:ac:
20:2d:55:86:09:2a:c3:91:97:76:d8:66:71:ae:bb:
b0:65:d9:6e:5b:11:97:06:52:68:16:b3:d5:79:ce:
35:79:65:65:96:09:de:00:50:7c:5b:b2:48:0b:26:
f8:44:29:2e:18:db:84:36:2b:a3:2a:c3:75:9d:1c:
96:fa:d2:c9:6d:86:e0:a6:47:f8:67:b2:9f:ff:3a:
8e:c8:32:cf:86:6b:41:7f:bb:ea:8a:75:fe:a7:dc:
c0:6d:a6:ca:e1:17:f9:44:e8:9f:f5:26:5e:d7:11:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:44:67:99:6E:B8:8D:FF:CA:63:FB:EB:94:C7:A2:D9:EF:91:03
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:23:10:ef:e5:cf:92:d4:c9:2a:ee:08:3b:47:84:f2:7b:b0:
db:2d:56:eb:fe:53:22:ef:ad:af:99:d6:53:35:73:8a:d5:28:
49:9c:ff:20:8a:33:d6:f5:16:8d:ff:32:85:90:92:ca:62:8e:
49:fc:89:10:72:ff:be:50:b5:8d:f5:44:b9:49:21:b6:5d:c0:
f9:7f:9b:ea:5a:a0:68:4c:fa:b9:26:e4:5e:e5:8b:d8:20:9d:
56:ca:f3:09:87:a4:3b:35:66:13:85:56:c8:11:1e:03:59:1f:
95:70:b9:83:62:a4:3d:08:25:b1:4a:7d:f3:0b:c0:96:11:3a:
7e:54:61:ac:1a:9e:80:d9:89:3b:5c:26:3d:e1:e5:df:b2:70:
d2:84:63:5f:c8:fc:52:c6:4b:1a:a6:60:cf:ce:98:5b:2b:6b:
71:ff:d7:52:60:a3:b6:79:f5:87:9a:42:86:28:3e:00:89:dc:
30:19:cb:8b:69:91:ef:8c:40:1e:a6:a9:e5:25:4b:b1:20:32:
40:a3:25:bf:cd:0f:46:ee:6b:86:df:b5:1b:27:30:fd:54:43:
2d:b8:5f:37:fb:a3:e0:1c:b2:a0:82:62:23:61:4b:d8:5a:19:
b6:77:5a:14:10:00:26:e9:29:8a:58:5f:f0:61:f1:0f:4d:48:
ba:3c:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:57 2025 by rpki-client