Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier: 5NGcdV1CBys51u96FsNxYcN2C/ESTfEg2n7jVMdpOl8=
Subject key identifier: 15:EF:23:D4:C2:6D:EF:47:A3:BA:5B:C2:C7:CC:DF:1D:17:56:72:71
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial: 0199FC215F8FCFD60065EFC06424795C30AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number: 0488
Signing time: Sun 19 Oct 2025 11:01:09 +0000
Manifest this update: Sun 19 Oct 2025 11:01:09 +0000
Manifest next update: Mon 20 Oct 2025 11:01:09 +0000
Files and hashes: 1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=)
2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: Xp1UaSzv19iKfJoRZT6HUBw7sCXI0VjzO7yY+YOi5OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5f:8f:cf:d6:00:65:ef:c0:64:24:79:5c:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Validity
Not Before: Oct 19 11:01:09 2025 GMT
Not After : Oct 20 11:01:09 2025 GMT
Subject: CN=15ef23d4c26def47a3ba5bc2c7ccdf1d17567271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:6b:b8:99:16:f3:33:e3:27:f1:5c:6b:4c:
dd:d9:42:65:27:e7:b2:b9:74:cb:15:45:2c:ea:68:
22:0e:ce:c9:78:06:8c:fc:da:03:ea:29:1e:91:fc:
cf:9a:eb:eb:8a:69:6f:42:3c:e6:22:3a:3e:67:c3:
11:37:d1:33:51:de:b4:ff:ba:1a:55:64:ef:94:81:
9f:61:29:b9:3d:e8:e2:9b:d4:58:d4:20:93:d5:58:
a0:db:83:01:87:9e:10:fa:97:2d:41:5e:a0:a4:62:
e7:15:f9:4e:ff:f0:43:bb:5b:6e:b0:f2:f1:3f:37:
00:d7:cd:9b:5d:13:2f:01:7a:73:38:d2:89:ab:54:
f2:e9:c0:c6:b3:b0:d1:e3:9e:0b:81:62:a6:14:66:
d2:e5:81:c5:8b:a4:13:6e:cd:a4:9e:f1:39:f4:63:
97:c8:a4:e7:7b:80:d4:c2:c7:19:b3:7f:1a:3f:15:
6b:cd:59:56:ed:6f:eb:38:44:c2:f4:73:50:78:a8:
a2:c9:b6:da:4d:c3:2b:68:fe:aa:01:9a:cc:35:59:
ca:3a:95:1d:07:2c:ff:13:9b:b1:b0:82:0e:c6:b0:
bc:25:b6:06:07:2d:44:f7:16:c7:38:5f:c2:22:78:
a6:4e:9b:f8:9b:e2:88:9c:51:fb:77:1f:17:f7:20:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:23:D4:C2:6D:EF:47:A3:BA:5B:C2:C7:CC:DF:1D:17:56:72:71
X509v3 Authority Key Identifier:
keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:35:c4:da:6c:28:f4:b8:48:aa:7a:8e:aa:89:82:a3:f8:b7:
3f:3f:f5:a6:b9:72:9b:2d:2f:39:99:b1:37:f0:65:f9:9d:ab:
6a:e0:a2:82:04:37:ee:ec:99:24:f8:cb:47:f8:e6:64:6e:d4:
d8:46:9c:96:a4:36:c4:24:b5:d0:41:9c:a0:d4:a6:df:06:c9:
51:53:f3:2c:b1:0c:08:93:20:f4:6f:b1:86:72:34:f7:29:a1:
1d:a9:93:b8:a4:52:b7:e2:f5:82:11:3d:c4:77:48:98:85:fb:
2a:1a:02:a3:94:6a:f9:37:11:7e:56:99:e8:46:51:ec:f1:2d:
6a:e2:39:ec:76:60:05:99:9a:53:9d:67:c7:85:e3:b4:3d:4a:
45:17:da:22:d8:4b:a9:b0:89:10:56:b6:3d:7b:8d:22:09:33:
d2:ce:f8:7d:d2:68:47:8f:d3:51:02:b5:bd:d3:a9:d8:b7:d3:
4d:82:0a:13:b9:05:3f:6c:d6:42:fc:75:8e:a0:f7:f8:75:8a:
9f:98:ba:59:b5:18:b3:f4:8a:00:44:1b:dd:1d:03:d5:47:18:
3e:a5:20:51:4c:11:9c:7f:c8:6e:4e:4d:91:70:52:cb:1e:b6:
14:26:4d:5a:13:39:58:90:e3:79:7e:61:fd:82:19:a5:04:dc:
08:87:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:48 2025 by rpki-client