Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File: yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier: AVWogHI+5/T7+aas+KnK+kOSJuntNMoM6siGd1u0OHo=
Subject key identifier: 48:0C:75:CA:F2:79:9E:90:03:A4:D7:5D:98:E6:52:ED:A5:2B:C5:38
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 0199FDD9595A88F30AD9278714555068D19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 19:01:43 +0000
Manifest this update: Sun 19 Oct 2025 19:01:43 +0000
Manifest next update: Mon 20 Oct 2025 19:01:43 +0000
Files and hashes: 1: 6thBO5jod-S22ld5I7cCUqU9PPU.roa (hash: whhraWURnepuYYNpLNQlvK7It8S7aCrmfs8zXpfqsOc=)
2: bNZ4Q9wcD7yZAP2RwlbB4JNFkjQ.roa (hash: JZzkHPxKw9rE1eeiiSJfGm5FFzPkvIECAGzsNfZT2+0=)
3: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: GVAsO3gwlJ9DJp1WzHpYNU1Fh6CevkaypLFd9CKu/KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:59:5a:88:f3:0a:d9:27:87:14:55:50:68:d1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Oct 19 19:01:43 2025 GMT
Not After : Oct 20 19:01:43 2025 GMT
Subject: CN=480c75caf2799e9003a4d75d98e652eda52bc538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:15:8a:7f:c5:55:c3:83:b4:74:d6:23:b5:
3c:62:5a:2c:35:10:66:2f:34:06:c3:41:c1:0f:14:
2c:56:7e:3a:9e:68:0a:a5:66:7f:b3:6b:cb:f4:c7:
84:0f:f3:37:37:e1:7c:98:4d:48:30:5a:c9:54:7c:
54:2f:44:dd:7a:bf:d0:56:f0:6b:0e:b3:56:c7:7e:
90:88:f2:ba:83:ce:42:fb:f3:5c:83:ed:32:23:8f:
29:0a:50:5d:07:63:b5:85:f0:2a:76:df:3a:d6:5f:
cc:de:dc:e5:81:99:d1:1b:99:cc:5e:84:11:cf:b4:
d6:c6:ea:e1:73:d1:b7:e8:35:b9:e3:80:6b:5a:b1:
de:02:2a:d3:c5:c5:99:3d:18:ca:4b:b6:74:2a:52:
63:9e:91:1c:ef:9e:26:f7:70:8c:07:47:62:8d:6d:
b6:be:c5:bc:26:e2:cc:67:ae:1d:66:ad:89:8f:dc:
81:df:0f:b8:a7:de:f2:b0:c3:c6:45:9a:7b:cd:86:
37:c6:e0:1e:6c:5c:71:fb:24:47:f9:d9:20:84:a5:
9d:d2:15:75:e5:35:1a:be:5d:7b:5b:83:ce:e2:ed:
95:3e:7f:e8:52:1c:65:13:c9:7d:cd:f7:34:84:d3:
83:82:9f:4b:83:6d:bc:27:76:e8:ff:18:37:34:50:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0C:75:CA:F2:79:9E:90:03:A4:D7:5D:98:E6:52:ED:A5:2B:C5:38
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:00:d2:7c:dc:56:fb:71:66:89:68:0d:4f:45:86:3b:99:a3:
fb:9d:bd:9b:ad:67:a3:37:98:c4:8b:21:88:76:04:63:d3:50:
5e:34:28:63:bc:d0:c8:42:d1:06:9b:0e:1e:f8:ba:43:bc:66:
02:13:8d:0e:29:9c:09:e5:61:6f:f4:e8:04:41:bc:b6:88:84:
56:e5:1b:e0:c0:71:4e:e4:62:d9:62:dc:b8:70:8d:bc:a4:ad:
aa:8d:19:e8:f7:a1:6d:31:06:f0:9f:b4:47:eb:e2:5b:8e:1a:
88:18:07:75:09:c6:75:62:91:53:cd:49:d9:b6:10:2c:2a:bf:
55:c7:42:ad:d4:dc:7a:e8:9e:5d:33:e9:54:41:8a:1d:1a:3a:
6f:38:d9:4a:6d:1c:f0:a4:b6:5e:84:f2:78:0b:50:3e:8e:ca:
df:fe:7c:45:94:d8:cd:c3:fa:c0:dd:3b:6c:0a:b2:6e:8d:d2:
13:ed:2c:80:9b:f6:cd:d2:c5:9d:d4:d6:ae:8c:d6:16:4b:ef:
bc:68:74:f7:b2:23:ec:fb:ae:1d:2e:45:43:d0:7e:41:74:b8:
ca:6d:a8:3c:26:c7:00:fa:84:51:36:73:aa:52:80:1e:59:cc:
34:7e:8f:7a:bd:a9:0c:47:a8:50:66:de:2a:c8:0e:60:29:ef:
8b:2a:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:15 2025 by rpki-client