Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: nqhMnaY5s0lIG0CwEAgl876ZDvwdEbj7tf9TjLiLPG0=
Subject key identifier: 65:89:BF:2C:20:76:11:18:1C:D0:9F:22:15:29:7F:63:B9:19:DA:23
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 0199FDA1CBF7AEDA1D8417B06604911013F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0A76
Signing time: Sun 19 Oct 2025 18:01:03 +0000
Manifest this update: Sun 19 Oct 2025 18:01:03 +0000
Manifest next update: Mon 20 Oct 2025 18:01:03 +0000
Files and hashes: 1: 9-Jf83x4olz8Hfew1s_UNi3V90k.roa (hash: IKeSXJFCHy882FUnOTCs1ATh13Yeq7epWPgTRQh0CZE=)
2: ECPnWkDMI2_nTmbCZhDYVWDmDx4.roa (hash: Lpl7m/eZhYRN7DnJNG4Sw0QJsO8hvbMn/hQYBg/ViaI=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: HuOUdUREGcXUxrMMKqjeABgiZyeD0we1TBnT9cgJDis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:cb:f7:ae:da:1d:84:17:b0:66:04:91:10:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Oct 19 18:01:03 2025 GMT
Not After : Oct 20 18:01:03 2025 GMT
Subject: CN=6589bf2c207611181cd09f2215297f63b919da23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:c3:64:9d:83:df:b9:1b:f5:59:9e:ae:d4:
92:39:45:57:91:83:14:50:7b:0f:05:f1:16:7a:c5:
7c:18:6e:a5:90:0b:40:7b:61:1a:ab:17:02:04:47:
f5:05:d8:e1:63:08:da:97:cf:f2:4f:90:18:14:fe:
b0:76:97:d8:cb:d2:f8:4a:67:8a:6e:68:06:0e:51:
1f:98:0f:29:fe:f0:aa:b9:7f:8e:16:f0:a0:6d:87:
cf:ed:b5:71:39:17:78:f2:6f:f0:65:f6:ff:17:69:
b2:6c:c1:55:c8:8d:ab:cb:56:bc:64:dc:f8:7d:4d:
4f:04:c4:2c:91:f4:c9:db:76:8b:99:b6:c8:5a:80:
47:a8:7f:6a:90:01:34:4b:ea:2d:8c:41:03:af:1f:
2e:57:92:f1:0f:89:27:1b:b4:24:fc:06:b9:79:7c:
7a:b0:0d:76:be:b7:98:1a:2d:7e:a5:a7:78:a0:ac:
f9:3e:5a:63:88:9e:bf:78:35:d8:e3:de:4d:15:3d:
2e:70:93:02:8b:54:ca:64:d0:5b:6f:31:7d:90:72:
16:cd:97:77:c2:df:0d:fc:55:5a:56:81:dc:ea:4a:
64:eb:c0:3e:88:50:e6:68:db:35:88:ad:ff:61:aa:
00:95:2a:57:33:cd:46:99:60:61:db:05:5a:ed:82:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:89:BF:2C:20:76:11:18:1C:D0:9F:22:15:29:7F:63:B9:19:DA:23
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b6:f3:42:37:f7:86:4b:eb:46:6b:d2:7e:75:91:ba:24:3e:
fd:a4:28:4d:99:52:f9:9b:77:8c:2d:e1:ba:c9:d7:36:ea:44:
72:c1:53:35:cf:f4:40:94:b8:2a:bd:a8:9f:82:37:93:07:13:
f4:b0:e0:95:d0:66:34:20:d3:58:96:37:67:05:ce:45:a6:43:
9f:31:1a:46:7c:83:ae:78:3b:cd:e6:24:47:66:f7:e1:c7:1d:
b0:fd:f8:eb:85:7b:3f:ae:1c:42:d8:41:bf:80:da:5f:d2:ea:
32:d3:af:4e:18:0f:d5:4d:56:61:f7:cb:16:1f:8e:fb:b8:25:
12:41:74:8e:63:25:e0:64:05:b7:be:ef:85:58:64:af:41:59:
be:ec:70:dd:ed:28:e5:bb:55:a8:e6:bf:22:e6:0c:11:49:5f:
bb:cf:f5:d2:b7:83:02:f9:d4:1d:96:cc:2d:4b:3f:22:dd:1b:
c0:bb:68:86:91:91:26:72:4a:7b:1f:28:93:84:76:ec:a0:52:
2a:bb:9e:9a:d2:7a:d6:57:46:28:72:36:59:5e:5b:01:34:4a:
d3:33:d2:b8:fd:1d:d9:42:75:ea:5d:18:b1:4e:22:8a:7f:fc:
0c:e2:68:8d:be:40:4f:72:6d:dd:fd:37:39:d9:06:41:06:66:
2d:b9:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:48 2025 by rpki-client