Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File: yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier: HIlAKDu2atIDAQcsknPLMPYOhPKLAaeKruZJeVH8MBE=
Subject key identifier: EE:34:1C:FD:A9:44:64:F5:2F:7B:EF:76:5E:60:11:1A:33:8D:E6:C0
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 0199FFC79271D29BEE5545E917E1A72C8734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number: 0B0E
Signing time: Mon 20 Oct 2025 04:01:33 +0000
Manifest this update: Mon 20 Oct 2025 04:01:33 +0000
Manifest next update: Tue 21 Oct 2025 04:01:33 +0000
Files and hashes: 1: 4hjeIW8185ZaECNggenf_uHhDOA.roa (hash: UoLjdkox8BXch3olGfF5NhOzyEQg7VA83kohLHFMIMk=)
2: Fw_kxU9y2ZFFUFhTyjj3cOM8HE0.roa (hash: RbilBDizHS14qZ4Da7c1uCTbplJrxj3lujK+7Ie1xww=)
3: IFrDv6Ls6n5V8fwzlZ-9RjYsC1A.roa (hash: /KA/Ir1BpmGewtvhuM2WTh9hgPTfLUu7FlDEzEKhle8=)
4: _6UZkqieR9kIkKZwwfKfkm35fd4.roa (hash: TAVIhSh9eMt1b6339NxSWJ46JPMbHN7C8v9n3qx3ibk=)
5: gqWeYouP3tCgtjbkj-l_gQg8hIo.roa (hash: /JDKYsMSdFrnBptTFdWQqSfzinHaa7LMqQq1Q4agYW8=)
6: iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa (hash: qX/Ce2Cu2rGWIQEWtxm8FeM0QBiPxiljZdApDi//miE=)
7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: eKKSsXMNfIoB2PcAm7ypB+NG7Ulf5cnKFEzBysFTMXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:92:71:d2:9b:ee:55:45:e9:17:e1:a7:2c:87:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Oct 20 04:01:33 2025 GMT
Not After : Oct 21 04:01:33 2025 GMT
Subject: CN=ee341cfda94464f52f7bef765e60111a338de6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:09:94:6b:d8:d8:0e:1a:05:f8:7e:4b:44:
92:cd:d5:38:54:7d:1c:cc:55:b7:f5:2d:8c:46:ab:
c3:bc:11:1c:a2:5e:73:c3:3e:c0:4d:9b:a3:46:6c:
82:8a:36:de:1f:ef:11:f6:fb:b5:d3:27:f3:a5:0a:
25:3d:1c:ac:05:f7:8a:75:30:31:a8:86:c6:1e:38:
0a:1b:6d:04:34:71:50:40:79:03:19:aa:1f:7c:f5:
6b:43:9b:ff:77:0f:99:9a:3a:60:39:c9:7c:b5:f2:
fc:a9:b9:d1:c4:4f:2e:e6:86:a6:c2:6c:a9:e6:98:
8b:a4:d3:15:21:42:c8:7e:89:b3:2c:5f:35:2a:e1:
c5:a4:ea:e2:c6:2c:2f:07:c9:07:80:52:ab:29:86:
c1:7d:90:40:68:9a:86:67:05:1a:a9:28:be:0a:39:
58:55:3e:a4:8d:ba:26:14:c6:23:fe:34:76:c7:f4:
0e:5e:a2:e1:0a:6b:c8:23:d3:e8:66:15:15:39:af:
fe:34:e4:08:ed:2e:5d:3b:2d:73:2e:99:ab:2f:1b:
16:4c:64:21:31:24:9e:dd:b1:18:01:3e:19:fe:d6:
91:a2:0e:72:08:a8:73:b3:76:7f:8a:36:b6:07:34:
20:66:bc:ff:11:c6:49:05:ef:ad:b1:6b:34:38:59:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:34:1C:FD:A9:44:64:F5:2F:7B:EF:76:5E:60:11:1A:33:8D:E6:C0
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:93:29:ef:03:ea:e9:8d:6a:b0:de:0f:20:b5:a6:74:0f:d5:
a2:0c:1b:19:fd:ec:19:33:a2:68:21:95:41:bd:21:3d:9e:24:
48:e8:96:ca:9e:f3:f1:df:1d:5e:51:f1:02:6f:43:43:b2:75:
47:bf:70:43:29:f7:57:4e:ae:63:c8:9d:bf:fd:96:bb:97:18:
65:3a:fc:f3:04:fd:83:55:b3:46:c3:c8:b2:6c:63:d0:de:db:
63:28:13:ea:47:4d:36:55:21:9a:bc:7f:9b:69:b4:9b:7e:04:
6e:47:4d:83:83:a9:67:49:c7:55:c1:6c:0f:bc:ca:61:83:4c:
fc:de:39:0a:9f:38:0c:4b:7a:67:d1:da:6e:d1:c1:87:fe:f1:
db:66:00:2c:6f:3f:7a:30:f1:ec:ec:a3:59:ec:c1:c9:4f:a3:
a2:bb:c5:6c:59:1b:0e:df:98:fd:dc:a7:e4:67:7e:bf:10:4c:
03:2e:e7:50:9e:15:03:94:e6:b9:af:0b:f6:67:dd:10:7c:8d:
d6:8c:76:03:35:b9:27:eb:a2:cb:be:12:9c:b3:a6:5c:a7:49:
68:38:74:0d:3a:d3:6b:8d:a3:58:22:2d:1e:e1:ff:16:b8:92:
10:8c:f8:82:fb:5c:1b:a5:17:90:ea:c7:ec:dd:b0:e3:d6:e3:
0b:92:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:38:55 2025 by rpki-client