Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: eq05ap9629JVUFdMSytSUX620GUSxREx0dcfDaRrVis=
Subject key identifier: 3F:DF:DD:F9:BE:D9:0A:94:56:B5:21:64:FC:0E:FC:B4:0F:2C:3D:B7
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 0199FD6B17E054C0DC4B7A046A06FAE15345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 0FF4
Signing time: Sun 19 Oct 2025 17:01:18 +0000
Manifest this update: Sun 19 Oct 2025 17:01:18 +0000
Manifest next update: Mon 20 Oct 2025 17:01:18 +0000
Files and hashes: 1: mFdOLgpY75BCI6HwFdhbm64m2HU.roa (hash: dTVNpH8dt8wvAbtnwcqlrtySsedQZdW+bUyu+40b16A=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: q0fYPQOrPAF38Sf+lJH5owTSoREDfBaSax6WJ2rkoCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:17:e0:54:c0:dc:4b:7a:04:6a:06:fa:e1:53:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Oct 19 17:01:18 2025 GMT
Not After : Oct 20 17:01:18 2025 GMT
Subject: CN=3fdfddf9bed90a9456b52164fc0efcb40f2c3db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b2:da:cb:7f:d8:fe:4e:43:67:f0:d2:34:13:
21:ef:c1:af:fc:de:53:a3:e3:7a:6b:c3:69:8e:52:
c4:c5:e8:a8:71:5f:5c:80:a5:89:3f:32:dd:14:f7:
ec:fe:8d:3d:23:3b:e3:36:9f:d7:a5:2a:43:11:d4:
aa:41:77:0c:04:82:5f:30:8a:8e:74:a3:e8:c8:35:
71:3c:67:ae:d6:0d:be:3e:a3:1a:38:72:96:4c:e2:
15:8a:71:ee:b3:0d:52:e8:f8:ee:4a:76:c4:40:c1:
8d:a9:77:73:cf:8f:7d:07:b7:52:97:41:f7:3f:ad:
c6:f9:4e:ee:0f:06:c8:56:95:4f:3a:21:c3:79:fc:
41:6e:bd:5e:2c:fe:a7:1a:2d:09:bd:34:b6:9f:f6:
ba:cc:f8:b2:38:b6:44:cd:9a:11:de:57:e6:e8:5b:
f3:c2:21:5b:4a:32:ff:a2:fd:ed:ac:93:7a:7b:b5:
21:c7:47:a1:46:fb:ff:b8:b2:b7:f1:01:b2:37:57:
89:89:b9:5e:5c:26:30:97:65:b1:cd:b6:6b:b7:ae:
f6:9f:43:e7:e0:38:80:e4:24:ac:56:95:d6:51:e6:
a8:c2:be:4f:ff:8b:b9:5c:ec:f5:7d:c6:60:f9:68:
0d:7b:47:06:9f:09:40:de:c8:e4:33:bc:83:04:86:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:DD:F9:BE:D9:0A:94:56:B5:21:64:FC:0E:FC:B4:0F:2C:3D:B7
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d1:bf:8b:8b:f8:3b:2c:c8:29:47:53:33:92:10:81:be:66:
02:88:22:04:9d:9c:88:4d:98:96:07:49:38:9d:a2:c9:42:38:
0a:fe:d6:04:bf:40:7f:bf:30:6c:31:ab:8a:e7:51:d3:80:98:
56:7d:f7:d1:b7:ff:59:77:7d:f1:f3:a1:32:e8:5d:e5:c0:10:
e6:37:17:09:0b:d6:14:35:b3:0b:1a:74:f9:a3:58:44:b5:06:
f0:b1:41:6c:ee:eb:a0:cb:c9:38:c4:fa:f7:bb:22:c3:f1:44:
e8:18:83:5d:43:f0:99:c1:e7:3c:49:c3:6f:2c:bf:67:4e:64:
7e:47:c1:e1:4f:61:72:f3:3a:70:fd:95:84:1f:f1:45:b5:c8:
4e:05:c5:36:26:54:5d:c8:7d:7f:c1:09:58:4b:cd:6f:de:58:
ea:dd:ff:8e:b6:a7:40:07:f8:6f:75:7b:9e:95:ad:d3:24:90:
48:f5:ec:2d:84:b6:4e:0b:61:43:36:a3:3c:42:58:10:fd:34:
fa:43:db:32:ea:f2:a5:d9:c6:ce:b0:9a:d4:ad:6f:c0:52:62:
a8:0b:4e:50:39:2f:bd:4d:57:04:2d:a1:2a:cc:eb:b7:5d:fc:
81:67:e5:0e:c5:88:ae:0a:64:23:c0:40:75:99:8d:8f:99:f3:
39:d8:d2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:38 2025 by rpki-client