Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
File: yniqfjFrIfhDz7lYEMaAzdv6bm8.mft (raw, json)
Hash identifier: k6t5XnCOfCIjiPwcPAVJwCQNpnRYyap9JZCTxwLPPLA=
Subject key identifier: 87:71:D3:6E:EB:50:54:49:9E:04:09:FE:12:DE:32:8D:90:AD:88:51
Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
Certificate issuer: /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Certificate serial: 0199FE46EE2510AF10D6714F311DA8778230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
Manifest number: 0434
Signing time: Sun 19 Oct 2025 21:01:25 +0000
Manifest this update: Sun 19 Oct 2025 21:01:25 +0000
Manifest next update: Mon 20 Oct 2025 21:01:25 +0000
Files and hashes: 1: KmT0zBeAxHbx64CqcJ4Kw-HSMGw.roa (hash: g294VQOsqRVKkLhlE8NKqam6KvGQ9H8e4fukJsFTk1Y=)
2: yniqfjFrIfhDz7lYEMaAzdv6bm8.crl (hash: mNl9gW8aWkRqdg04g4PedBMaMc8TqdwwrhWiAAiXX8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:ee:25:10:af:10:d6:71:4f:31:1d:a8:77:82:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Validity
Not Before: Oct 19 21:01:25 2025 GMT
Not After : Oct 20 21:01:25 2025 GMT
Subject: CN=8771d36eeb5054499e0409fe12de328d90ad8851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:83:54:8d:84:b2:02:d2:85:ee:9f:e7:8d:
ca:58:f7:87:6e:9f:a3:c9:ef:d8:37:00:ce:e9:22:
5c:81:8f:f9:f2:a0:f5:8e:73:ea:36:61:9f:28:41:
53:c3:57:89:79:61:10:36:46:e4:d9:be:c9:49:b9:
94:b5:bf:5e:23:f7:61:93:3d:ec:b2:77:8b:fb:bd:
25:9f:96:02:7a:34:97:7d:c5:0b:09:c1:bf:93:f4:
09:3a:bd:01:6d:d2:75:be:42:1e:9e:f8:b4:5e:ec:
b3:78:ae:f2:55:df:40:7e:dd:24:8d:d9:8b:fd:a0:
48:08:c6:b9:b3:ab:6a:4f:f9:9a:8c:0a:46:b6:60:
29:19:b3:b1:47:2e:14:29:b0:16:4f:14:ac:df:bd:
0a:2b:f1:b5:9f:5d:7d:d7:49:7b:71:ee:ca:cf:a6:
c0:16:4e:4b:01:76:80:c3:d1:f5:c7:a0:19:fd:51:
13:2d:d5:1e:c6:b6:c1:41:5d:b1:53:ec:fd:e9:12:
81:ab:76:87:57:f8:58:0e:36:fe:7b:4b:df:bb:a5:
5d:33:65:a7:31:15:0e:53:b9:ff:1c:51:23:ce:76:
48:5b:4f:3e:3c:d6:d9:a2:0b:0f:e6:f1:6c:58:89:
3c:3d:51:c7:cc:8f:f4:12:5d:ad:f6:2b:e1:39:40:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:D3:6E:EB:50:54:49:9E:04:09:FE:12:DE:32:8D:90:AD:88:51
X509v3 Authority Key Identifier:
keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:85:98:5b:27:76:95:8f:8d:eb:22:cc:0f:f4:96:7b:2b:d7:
b6:0f:04:c6:d1:4a:b4:76:ab:34:12:79:9f:84:b7:ac:d8:76:
43:b4:b8:85:c7:bd:06:77:27:32:ae:1f:93:e1:fb:f2:a2:e1:
93:26:d8:08:07:d1:ae:34:a3:47:c1:69:a0:64:11:62:3a:66:
1c:97:56:26:02:27:5f:17:01:39:ca:ac:0a:2d:9e:b5:ce:e7:
bc:e6:cb:4c:bb:84:4e:2a:42:a4:f9:60:5f:ec:ee:64:8c:72:
c1:2f:a7:a3:8c:e3:9f:93:ff:53:af:c8:e0:4a:1a:e0:6f:07:
5c:3c:ec:1a:ab:5a:33:ca:3e:9b:28:af:6c:c6:5f:1f:1d:19:
12:8d:24:f0:0d:f6:e1:79:d4:ab:e4:76:6a:b8:f9:2f:11:ad:
cd:53:95:c9:05:fd:6b:a8:5a:78:c1:91:24:70:20:d5:2d:00:
df:ca:12:c7:e6:cc:e1:c4:18:ec:62:9a:85:8c:33:ab:58:ce:
32:90:aa:fa:1a:6f:2e:f8:68:8f:a2:a6:29:54:67:c2:e5:9d:
f4:c7:5c:f0:dc:79:86:69:10:4b:7f:33:95:b9:db:6f:59:ca:
b2:e3:09:24:36:08:37:d0:65:62:e0:bc:3f:32:6d:ca:34:89:
3e:3d:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:40 2025 by rpki-client