Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
File: yvYTMRp4acM1ymbLQjzG6LL6kCw.mft (raw, json)
Hash identifier: wPTRBYVbSVAu8ugTJZh0IgXOzf68WQvNXkfPr2QokOg=
Subject key identifier: 43:D3:3B:5E:0C:5D:D6:13:2D:45:AF:69:12:5F:8B:10:34:4D:41:C3
Authority key identifier: CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
Certificate issuer: /CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Certificate serial: 019A03A491A7A399A8C87AC6D38E79513AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 22:01:48 +0000
Manifest this update: Mon 20 Oct 2025 22:01:48 +0000
Manifest next update: Tue 21 Oct 2025 22:01:48 +0000
Files and hashes: 1: gWMrTu8Of2Dx3uAeFmzVA6qXGew.roa (hash: 8qHiVPNeypQh4D2Me20Hi3HMwJdiHI6/+GwoODvt2Bo=)
2: yvYTMRp4acM1ymbLQjzG6LL6kCw.crl (hash: DrpWAFDgS6hNTEdLbiSaAltfhRfDRENiTgSntMQSmtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:91:a7:a3:99:a8:c8:7a:c6:d3:8e:79:51:3a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf613311a7869c335ca66cb423cc6e8b2fa902c
Validity
Not Before: Oct 20 22:01:48 2025 GMT
Not After : Oct 21 22:01:48 2025 GMT
Subject: CN=43d33b5e0c5dd6132d45af69125f8b10344d41c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:f8:10:94:77:e4:b6:52:22:97:b2:d5:bf:
8e:c3:11:cf:2b:98:58:7a:31:7f:4c:8d:ce:04:0d:
8f:72:3e:41:b0:aa:ea:f8:82:81:a1:36:57:8e:e6:
3d:49:d0:c1:66:b8:1c:df:64:c5:dd:8c:40:e5:e0:
61:ad:5e:e9:bf:6f:56:34:b2:ae:a3:37:2d:2b:80:
12:e6:ed:e8:c9:b3:01:8e:d4:05:af:36:d8:22:f5:
df:db:f4:d0:2c:70:3b:91:c4:30:5a:d8:0f:df:66:
94:12:d0:cd:9d:df:ac:cf:77:d7:e3:bd:5f:16:06:
1f:01:9b:37:ac:2d:c6:ad:01:f4:ab:7f:83:67:f1:
83:9b:fb:f6:89:28:40:35:10:77:f6:bb:e5:9e:39:
4b:90:74:95:73:92:8f:83:46:37:26:5e:52:b0:29:
18:9a:eb:38:ad:3e:3c:8f:09:b4:4e:15:fc:a1:ea:
9a:b9:7a:92:cc:8a:a7:aa:be:d7:d8:36:d7:a2:0f:
79:52:a3:ba:24:29:14:4b:ef:3d:bd:20:fe:76:ad:
bb:60:ed:cc:4b:90:e0:1a:4f:86:da:cb:38:09:d0:
0c:dc:31:0b:63:74:73:5e:37:ba:c9:4e:b8:01:f6:
9d:39:c7:4a:82:ac:34:64:65:e9:99:78:30:21:12:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D3:3B:5E:0C:5D:D6:13:2D:45:AF:69:12:5F:8B:10:34:4D:41:C3
X509v3 Authority Key Identifier:
keyid:CA:F6:13:31:1A:78:69:C3:35:CA:66:CB:42:3C:C6:E8:B2:FA:90:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvYTMRp4acM1ymbLQjzG6LL6kCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/94ea4b-3ff0-4f7b-9d83-c310eca3c07b/1/yvYTMRp4acM1ymbLQjzG6LL6kCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0f:6a:b4:12:cb:17:4a:30:c3:4b:56:09:c8:46:35:e6:7b:
f0:5a:1c:99:9c:a0:06:b1:39:52:7e:02:15:98:05:17:eb:5e:
1c:6a:20:a0:c8:a7:3a:b5:9c:f8:b3:23:6f:85:07:50:59:09:
60:71:8c:38:6e:d1:68:66:40:7b:1b:9c:bc:6e:b4:cb:0b:2e:
e1:af:f2:72:33:82:94:81:40:04:70:0d:d7:6a:a5:bc:a9:6f:
3f:b8:15:83:e6:f2:ad:33:35:e4:61:f3:17:a4:75:fa:5c:72:
5b:c3:4f:60:c9:8c:08:52:09:ce:b8:f1:3a:d2:82:67:60:0c:
54:db:a1:ea:0a:9e:cf:d8:48:d4:ce:8a:f7:ad:ff:49:11:28:
21:ad:d3:79:88:93:2e:de:af:bf:42:44:de:51:df:a1:6a:e7:
4a:8b:fb:71:2e:57:a7:94:46:06:76:f8:74:08:da:7a:55:0f:
66:a0:1e:b3:8b:2d:f9:75:c0:eb:ee:b9:61:31:e1:56:a7:22:
b6:da:ee:27:d6:53:57:59:d8:4d:51:ef:3d:76:36:e0:b1:a0:
ba:b4:8c:3c:79:80:18:42:74:e3:f1:ea:97:a8:fb:e9:49:35:
34:de:88:6b:98:62:11:b9:1e:4a:8c:d0:e9:10:e8:63:ce:f7:
ec:bf:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:58:31 2025 by rpki-client