Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
File: yABBYZAh42MorViY6Jl4cEa48Pk.mft (raw, json)
Hash identifier: RIrW11TlYATysOba/gXONahEDl8kRVc+y4XS1KoJkNI=
Subject key identifier: C7:B1:2D:F3:25:8A:D7:BE:E7:D1:F5:FB:60:59:B7:71:07:F8:73:C1
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial: 019A01B672480015D848614EF15A6530EBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
Manifest number: 0774
Signing time: Mon 20 Oct 2025 13:02:05 +0000
Manifest this update: Mon 20 Oct 2025 13:02:05 +0000
Manifest next update: Tue 21 Oct 2025 13:02:05 +0000
Files and hashes: 1: Mok6_FqiiR5wYGEWZBTs8xeaVoQ.roa (hash: FbjTDRIPu8bBy/5KLYHNgVHrWy/v2L+xeWuUUm4Xmek=)
2: yABBYZAh42MorViY6Jl4cEa48Pk.crl (hash: 8aCSy9qP+Ha51BUXXaeqv+IW8560elemc0c8wwNfswE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:72:48:00:15:d8:48:61:4e:f1:5a:65:30:eb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
Validity
Not Before: Oct 20 13:02:05 2025 GMT
Not After : Oct 21 13:02:05 2025 GMT
Subject: CN=c7b12df3258ad7bee7d1f5fb6059b77107f873c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:34:8b:70:94:81:44:9e:70:89:74:e0:86:26:
9e:e5:fa:d0:a0:9c:8e:2d:33:dd:cf:94:7f:f4:24:
4e:a5:ec:5f:17:6a:fd:a6:82:24:84:70:79:20:8b:
c6:83:d2:26:36:49:3d:0f:92:5f:29:31:45:bd:77:
7f:57:7f:0f:63:2f:45:c0:93:b8:0a:0d:eb:35:10:
67:0b:e6:46:49:20:28:5a:6f:88:60:e8:93:a4:15:
14:0e:cb:7a:29:7c:5c:5c:ff:29:c1:e7:f0:cd:a9:
36:f7:4a:7f:27:7f:e9:94:44:1c:10:e8:ff:ac:66:
be:ea:53:12:40:d4:f8:ac:79:22:bf:26:2a:fb:f4:
65:2f:10:cf:a5:71:6c:69:8f:96:6d:7e:e7:1e:a2:
8e:9a:02:8b:22:37:14:db:5c:40:68:7d:b7:b6:1f:
c3:02:bf:e0:72:6a:57:76:a1:93:59:10:59:f4:69:
fc:12:62:73:d5:f9:57:f2:0d:93:32:fa:97:3a:97:
37:08:37:3e:50:ce:bd:b5:41:e6:5a:83:67:68:9e:
64:38:d3:1e:e2:e4:f7:fa:82:c6:b0:4d:41:9e:c0:
60:04:48:a3:bd:b4:ed:ee:1b:d1:a8:6c:e8:31:5f:
23:76:ed:8d:44:8e:db:b7:a0:35:64:86:c9:95:ef:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B1:2D:F3:25:8A:D7:BE:E7:D1:F5:FB:60:59:B7:71:07:F8:73:C1
X509v3 Authority Key Identifier:
keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e5:b6:14:02:1e:87:3a:6e:d0:b5:21:55:35:6b:ad:7a:af:
9a:4b:f7:05:c9:6e:ca:fc:3d:bc:51:41:e1:b2:18:dd:cc:60:
65:a6:42:d3:6b:d0:4c:3d:82:96:05:c6:1c:be:77:17:5d:25:
9c:50:2d:4d:08:7b:73:d1:b4:50:a6:cb:21:68:9a:86:b0:e5:
48:3a:ec:00:ed:51:7f:f4:c8:18:fc:38:5f:f4:7c:24:23:81:
bd:bd:c2:a9:d5:d2:59:f5:f7:ec:3f:eb:66:0f:e9:ea:8e:92:
e2:05:bf:e7:11:52:f9:d0:a4:69:0c:1f:fe:6c:00:0f:5f:d8:
9a:0e:2a:9a:8e:66:2e:08:9e:69:a4:ed:ed:b3:72:c2:6d:ce:
f7:6e:9a:71:99:71:f2:68:cc:7f:5a:0f:26:fe:08:9d:9f:0e:
90:ee:1b:00:31:91:07:7a:80:cc:e5:e9:22:1d:12:c8:53:33:
27:50:0a:8b:02:30:ed:aa:93:31:26:b3:9c:c8:41:21:6d:2d:
a4:67:71:18:af:bb:ed:68:2f:c6:a1:6e:31:5c:8f:d8:4a:bc:
36:2b:f0:7d:ec:3d:1d:c6:7b:87:54:d4:fe:16:a9:02:70:6c:
bf:26:69:4e:3d:71:29:23:2b:8c:47:29:a3:97:0c:01:b1:1a:
67:55:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:03:15 2025 by rpki-client