Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: JMFuou3xmkUaHY/6Y9RYw6v0e8xk6gYBP3pUtb7ps0Y=
Subject key identifier: 39:13:52:CE:F3:18:33:3F:55:3E:BC:5B:1F:BA:74:7A:4D:80:A0:7E
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 0199FCC6BB953F3974AFFCA8274D96F0521E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 0518
Signing time: Sun 19 Oct 2025 14:01:46 +0000
Manifest this update: Sun 19 Oct 2025 14:01:46 +0000
Manifest next update: Mon 20 Oct 2025 14:01:46 +0000
Files and hashes: 1: de76rG8nL4tZzOssRD1ykxkBwJQ.roa (hash: PZ6Gs/7Ric8QzvgdkQxDNgPGEbYADwXFDmxjygY8QME=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: TGwBhFah/NZBBgT8VMD328A7wk4TOUce22hvOVFFfso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:bb:95:3f:39:74:af:fc:a8:27:4d:96:f0:52:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Oct 19 14:01:46 2025 GMT
Not After : Oct 20 14:01:46 2025 GMT
Subject: CN=391352cef318333f553ebc5b1fba747a4d80a07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:da:6a:17:e4:fa:bc:73:07:17:09:3b:12:
73:bf:91:c4:1e:e2:e9:41:36:f6:5d:c3:b5:ff:0e:
d6:a6:3d:59:58:25:1c:c0:8a:9a:37:c4:27:51:18:
f7:ce:1a:f8:53:6b:cf:48:93:13:2d:d2:ac:cb:52:
e8:a2:54:b8:9b:c1:0a:6f:b3:7a:d0:6e:eb:01:64:
8e:98:9f:41:f2:34:f5:5f:2a:98:15:43:7a:50:c3:
17:4e:e7:38:c9:90:db:07:01:33:16:2a:01:92:3c:
64:11:0c:39:b6:ac:0f:5d:b6:8b:e5:70:f2:4a:89:
5c:74:00:59:74:af:a6:c9:39:7b:cd:d8:85:a5:6d:
59:b8:ea:93:ce:65:c7:07:13:1c:3a:c9:c9:d3:f6:
df:8b:6b:4a:fb:ff:ca:b6:36:80:88:c0:8f:bd:fe:
75:04:39:3a:3f:f0:bc:11:44:83:5e:43:5b:fd:ea:
fb:c6:3a:59:ca:63:6b:d7:4e:8a:8f:82:c5:fd:32:
10:e7:8d:a2:16:99:22:c0:90:d6:d8:0b:77:f3:0f:
d8:35:32:cd:fc:1f:0a:52:7a:9e:6d:80:07:14:07:
1d:56:b6:16:7b:15:ce:83:39:90:b6:5b:b8:c2:75:
57:a4:4c:9f:a3:db:9b:bd:be:24:77:d6:25:83:19:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:13:52:CE:F3:18:33:3F:55:3E:BC:5B:1F:BA:74:7A:4D:80:A0:7E
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c1:9a:30:c0:25:e0:54:f5:ef:42:c3:da:ea:b7:6c:80:47:
56:67:e4:8d:55:92:b9:f9:59:e1:7c:1b:ef:9c:4e:53:fa:ed:
9e:45:13:eb:11:37:e2:ab:07:b7:d8:de:0d:31:43:16:e1:9e:
17:f8:78:11:37:d4:91:78:4a:4b:7e:0a:bf:04:f4:dd:11:cb:
10:b2:b2:e6:4c:15:cb:4d:6d:6f:60:71:94:7e:a5:b1:c5:32:
45:f3:08:a1:05:49:27:67:83:39:ba:46:73:9b:ba:cc:68:c2:
08:b1:51:7c:0d:1b:40:5e:35:35:b4:92:e7:e1:19:f7:6a:7f:
07:d3:96:86:58:84:3f:29:36:bc:4e:67:dc:73:d8:3e:35:7e:
d6:0a:6e:94:a8:5e:e3:ea:2a:49:a7:65:c7:4b:2c:e3:3c:34:
19:e6:2b:cf:95:5a:d7:a9:61:cf:70:59:20:14:30:b2:6f:46:
45:01:25:a8:f4:f8:76:a5:56:ed:5d:1b:bb:9e:35:82:ec:76:
7b:3f:a0:35:a7:e0:6a:36:03:38:da:aa:53:4f:6e:ab:3e:ca:
c9:8e:6f:33:68:4d:99:76:d1:89:9a:c7:01:c2:2c:35:cf:e9:
48:9b:d2:16:f8:96:de:68:b2:75:01:ab:0f:e7:b2:17:10:5f:
52:5b:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:16 2025 by rpki-client