Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier: 9lsHun3wtdchuu3y6NlQFhnAuHRIga5TStNDR9cZAAA=
Subject key identifier: F4:73:81:C3:59:0D:89:B6:5F:3A:15:22:1A:E9:9A:CE:7F:C1:19:F3
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 0199FD6B3928672CE47E601449EF4C5B39AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number: 09B0
Signing time: Sun 19 Oct 2025 17:01:26 +0000
Manifest this update: Sun 19 Oct 2025 17:01:26 +0000
Manifest next update: Mon 20 Oct 2025 17:01:26 +0000
Files and hashes: 1: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (hash: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=)
2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: TrN1iWtqsruipARLGBHiehxAGxk+x+DMAJdSgTcZjrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:39:28:67:2c:e4:7e:60:14:49:ef:4c:5b:39:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Oct 19 17:01:26 2025 GMT
Not After : Oct 20 17:01:26 2025 GMT
Subject: CN=f47381c3590d89b65f3a15221ae99ace7fc119f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:dc:6d:49:77:a4:93:01:82:3e:bd:49:19:
ed:bb:46:4f:c8:97:ae:01:3d:de:1e:f4:76:42:d0:
e4:f7:af:cb:73:a8:c9:21:75:57:1e:86:30:56:34:
2c:f8:b4:71:1d:4c:7e:60:4d:b3:03:cd:68:12:95:
33:ac:b6:f3:76:f9:9f:c0:79:77:19:f2:0d:03:3b:
41:b9:1d:fc:d0:c1:92:b7:7f:61:bb:c2:5d:da:49:
49:0a:ff:1f:5b:90:8f:0c:08:e7:83:e4:ef:5d:a3:
be:91:67:b4:03:6c:47:f6:87:ff:11:c8:f5:c3:8c:
8c:1b:a0:f2:39:3d:5f:da:57:c3:99:a2:9a:d6:98:
53:47:1d:1f:23:d3:b9:dd:30:6d:85:0b:f8:db:23:
eb:d0:47:ab:7d:fc:90:65:6f:c6:16:92:a2:56:7a:
f7:be:89:bf:e4:4e:ba:37:32:99:06:7b:45:ec:d3:
e5:30:aa:34:c1:8d:be:b3:d9:18:b8:e3:1f:7b:ee:
ce:aa:15:7a:95:98:0d:49:2e:ab:96:83:6f:b8:5c:
1b:67:02:dd:a1:12:0e:68:53:f2:0a:15:79:dd:6a:
47:d4:20:8f:ab:32:ad:57:94:4b:a6:67:64:3c:d0:
55:42:2d:fd:4b:ce:a3:a2:0a:a9:a0:91:07:46:3c:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:73:81:C3:59:0D:89:B6:5F:3A:15:22:1A:E9:9A:CE:7F:C1:19:F3
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:46:3a:57:46:97:95:46:be:04:c1:7b:5b:fc:f3:52:80:26:
e0:ad:14:29:27:56:de:bb:9c:bf:dc:d7:07:8c:76:a6:d8:35:
da:68:2e:c8:54:ab:cf:6e:21:69:2b:41:6e:25:7f:35:7b:37:
64:df:c9:b2:bd:2a:cb:df:05:49:1e:2b:8a:c0:6b:e8:a3:ad:
99:b5:a6:0b:fc:8b:2e:92:bc:db:16:ed:ad:e3:e8:4e:ca:37:
16:c9:ca:02:0a:37:49:c0:47:86:40:7e:8b:ec:09:b8:82:62:
6b:07:f2:32:9e:83:ec:3d:11:69:03:eb:84:f3:0d:9a:b8:de:
9f:93:a1:fb:2c:96:5f:00:11:f6:d8:e8:a6:f3:c5:63:0e:da:
ef:76:4a:f3:60:40:86:15:dc:11:25:07:da:5c:21:f2:db:1e:
3a:58:0c:7c:66:06:da:7e:3b:43:df:34:89:f9:c9:19:eb:b2:
98:a3:66:ab:59:3f:68:75:07:27:48:de:98:a1:7d:23:7b:34:
27:77:1f:03:63:8c:aa:26:a2:4f:d4:38:54:9a:42:7f:c5:dc:
92:dd:f9:8c:24:9d:3d:96:8e:99:75:b6:46:0f:eb:03:0e:62:
7a:13:78:b5:c5:55:d8:82:07:64:8c:a1:d4:c0:d8:1e:19:fd:
6d:eb:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:18 2025 by rpki-client