Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier: S6zs+0RRlCaqW9NJtGfgBr1RLs82lppNrB/8QvqInpo=
Subject key identifier: 11:44:52:F4:22:28:03:62:D5:72:D3:78:47:07:51:BD:B0:08:A6:8D
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial: 0199FC8F9458721D5F0AD66A30CB8C69929A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number: 1627
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: iv4w_q_Q0lB1UAUD7TgMR_xxyYA.roa (hash: fMZ0QGK6B5sX/J++IQoulADhQ3kbWhx95qL8TpCZZ84=)
2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: O1pdU+yM9eoHVVkEmsJsj9U8lNbEo+R97UkQ5j1KCK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:94:58:72:1d:5f:0a:d6:6a:30:cb:8c:69:92:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=114452f422280362d572d378470751bdb008a68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:fb:59:7a:5a:4a:b7:27:68:26:a0:42:24:
03:f9:90:9b:04:35:96:14:32:08:2b:5e:6c:54:a5:
44:36:1f:55:f7:c7:44:6c:86:c6:20:b7:2c:30:6f:
e4:be:db:5f:81:25:2f:0f:3e:6e:ba:e9:45:86:96:
2a:cb:cb:d1:45:12:bd:90:6e:d7:6d:81:6b:bc:67:
f9:50:3c:7d:a0:b1:be:d2:1d:6e:65:9f:f1:7c:b0:
bb:a1:36:51:00:33:bf:ce:24:f8:a5:4d:fd:8c:8b:
d5:71:ae:3b:9d:19:ef:50:d0:f9:5b:4c:2c:34:1b:
64:bf:79:ec:97:94:3f:4f:6a:d8:f6:f8:d9:c0:32:
8e:b1:81:e9:26:16:a8:f3:50:63:b3:fe:28:a3:74:
8e:74:a9:f1:a2:df:ee:b2:4a:e3:7e:5c:a1:77:99:
cf:b5:04:2c:e7:5d:c1:2c:4d:cd:a3:4e:a6:19:7d:
9f:c2:a4:3a:73:3b:31:3e:f5:33:aa:27:0b:2a:d8:
e1:92:a2:68:7f:bd:1b:ad:dc:d6:89:49:f8:45:41:
4c:59:1b:9e:79:26:24:c5:e4:0a:97:70:21:e7:10:
c0:9f:b1:22:34:84:00:b3:d0:cf:94:3d:84:89:76:
5c:55:10:fe:42:17:08:32:2f:1c:9f:8e:11:27:6a:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:44:52:F4:22:28:03:62:D5:72:D3:78:47:07:51:BD:B0:08:A6:8D
X509v3 Authority Key Identifier:
keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9a:32:52:c6:42:70:ad:59:6f:24:9e:78:c6:07:64:5f:9e:
32:4d:07:c4:31:a3:0b:68:6b:99:25:4b:57:cd:6e:06:a5:df:
7c:30:5f:7a:fb:46:60:95:f9:83:61:a8:56:0d:74:a7:40:30:
4f:cc:6c:e6:7b:9d:d8:66:2e:f7:13:fc:8c:b1:9e:44:63:d7:
0e:7a:0f:e2:84:da:30:63:e3:57:6c:a0:ae:d1:ee:34:95:53:
64:fa:f0:21:0e:fd:b0:52:f6:ad:a9:69:74:cc:19:35:42:e9:
40:dd:55:0e:b6:cf:91:0e:b5:5f:35:79:91:61:a1:ce:da:d4:
57:7c:4b:75:3f:95:c2:e1:90:f3:96:06:aa:74:5b:5b:b3:5d:
d5:01:87:84:1f:b2:b6:7d:dc:c6:66:04:45:22:7f:a1:15:54:
9c:0f:c2:6d:69:aa:c8:9c:35:dd:72:52:42:6c:8a:9f:b1:53:
a5:c7:cd:f6:b4:ea:dd:3b:23:c0:53:25:d0:91:7a:7e:ba:3a:
4e:45:70:90:ee:df:83:bb:d2:0d:1d:6d:d6:03:c7:b6:77:6d:
40:fe:c2:ea:99:d1:5b:af:45:5d:92:35:12:c2:3e:60:0a:00:
6c:29:db:15:7b:7b:eb:46:77:0c:41:8a:cb:dd:0c:66:61:4d:
f3:73:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:37 2025 by rpki-client