Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File: yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier: u/HyRngTIrXB9ZsqCt43d30BwMpwn9rKfnwlcGQDBp8=
Subject key identifier: 1A:E7:9B:30:2C:16:9D:8B:5D:4D:E7:6B:39:66:A6:A9:59:4C:9D:62
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 0198D73B76CC2EDCC79BA829D8CE08BB297F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number: 0A73
Signing time: Sat 23 Aug 2025 14:00:55 +0000
Manifest this update: Sat 23 Aug 2025 14:00:55 +0000
Manifest next update: Sun 24 Aug 2025 14:00:55 +0000
Files and hashes: 1: 9ioUlNkUNYBcxyTxkX3rgt5A0s0.roa (hash: FAkZUvlkFTeURhyGPk/Cqy2vo8UntR2/HehcNI9EJVU=)
2: Fw_kxU9y2ZFFUFhTyjj3cOM8HE0.roa (hash: RbilBDizHS14qZ4Da7c1uCTbplJrxj3lujK+7Ie1xww=)
3: OmRK258WRmdVFaT1b4UKAJEmXF8.roa (hash: S9zpMDpc5tR1fodrfsOibu5FLjUO5h2bsiNgqTRPaIQ=)
4: _6UZkqieR9kIkKZwwfKfkm35fd4.roa (hash: TAVIhSh9eMt1b6339NxSWJ46JPMbHN7C8v9n3qx3ibk=)
5: gqWeYouP3tCgtjbkj-l_gQg8hIo.roa (hash: /JDKYsMSdFrnBptTFdWQqSfzinHaa7LMqQq1Q4agYW8=)
6: iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa (hash: qX/Ce2Cu2rGWIQEWtxm8FeM0QBiPxiljZdApDi//miE=)
7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: iGJW2MZfcq+gMUbsj9RjopvCuO8zT1mOEifiNmBT4sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:76:cc:2e:dc:c7:9b:a8:29:d8:ce:08:bb:29:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Aug 23 14:00:55 2025 GMT
Not After : Aug 24 14:00:55 2025 GMT
Subject: CN=1ae79b302c169d8b5d4de76b3966a6a9594c9d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:97:0e:82:89:6d:89:b3:f5:83:70:e9:04:
20:9b:09:93:e5:ed:cf:cd:85:60:7d:1b:a2:50:61:
93:9f:b4:96:34:e2:86:3a:11:bc:fd:bc:fa:7a:43:
24:fd:28:ab:4d:b9:49:78:e0:3a:71:62:6a:43:c2:
88:c3:97:a8:b7:d4:06:b0:a1:46:01:11:19:fe:fb:
05:86:35:17:80:79:7a:3e:49:5b:ce:ce:f7:10:8d:
15:00:e4:07:3a:e9:0c:30:f5:e0:84:be:13:8a:5b:
45:e1:94:cf:d8:59:cf:ed:79:af:05:6d:81:93:9f:
b2:98:40:af:4c:f2:13:29:d7:c8:6d:a6:f8:62:b5:
7a:e5:45:fb:9f:9c:fb:f2:2f:ce:11:d1:56:71:66:
90:29:30:5a:e3:79:ec:05:2d:86:8c:d7:b2:6e:2f:
15:b9:48:f4:6c:19:e7:79:e6:0b:d6:62:a7:72:dc:
25:a6:6f:a8:00:e1:d9:fa:9f:a9:e2:97:05:5e:35:
19:d5:cc:9b:44:e5:c1:2e:15:d5:48:d2:2d:18:02:
6b:7a:34:86:97:df:97:80:d4:ee:3b:b7:02:b3:55:
ab:a1:83:11:64:de:41:d9:3b:a6:59:5b:ad:da:fa:
4c:e2:65:e0:0c:f2:82:40:07:e5:71:96:29:8c:b3:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E7:9B:30:2C:16:9D:8B:5D:4D:E7:6B:39:66:A6:A9:59:4C:9D:62
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7a:02:67:55:9c:23:cf:02:9d:c9:07:04:75:1a:54:c1:c9:
8f:26:af:9e:6c:bf:b2:4b:cc:48:8f:fa:51:37:1f:25:44:7c:
c6:0d:aa:39:c9:ea:f0:fa:27:24:f7:31:3c:c2:0e:b3:1f:1d:
f6:f7:5f:b0:56:0a:cb:25:c0:05:49:33:eb:80:87:6f:2b:fc:
2a:b9:f2:e5:cb:98:8a:3b:52:e3:0a:f1:0a:10:5f:0f:36:02:
db:2e:dc:f1:57:e3:82:85:84:b2:03:eb:87:43:1a:98:03:dd:
ef:28:ad:15:03:a5:b4:dc:d4:23:a7:91:86:59:ee:df:3a:22:
f3:96:a4:51:5f:79:78:e2:89:fa:78:6f:81:46:91:88:f1:97:
76:1d:29:a9:64:8b:77:8e:f6:46:39:c3:d0:61:a6:de:87:db:
de:96:65:3a:61:1a:43:4d:5f:f3:0f:e7:39:47:76:ee:9b:54:
83:13:68:58:5a:e5:22:cc:80:f6:90:97:9c:ff:22:4d:d0:c4:
76:d2:ce:71:00:d8:3a:0f:86:93:4a:1b:d1:b8:c4:74:43:d5:
a5:1e:b6:e0:fa:2c:17:23:70:83:a6:e3:dd:d9:52:3a:66:0a:
c4:49:fc:94:fe:37:4a:a7:37:08:86:a6:e9:08:9d:40:8c:4b:
52:21:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:50 2025 by rpki-client