Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier: i94JysfFQhlrEvSGi0wVyzIH+mzqNtIHbAd5MaLDWso=
Subject key identifier: 8B:CF:67:26:47:F8:E4:8E:49:22:07:F6:2B:C9:E1:4A:AD:B0:41:C1
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 0199FB7CCBF976DE7E1D4A9146ECCC894D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number: 1429
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: GEnuOQleBBUDKJ-4Y-M3IyBH42g.roa (hash: OrN9ZjjDEjR1Mar15xKYXAUpkqA7O1AMRBJLOwwo76o=)
2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: PCTK76spOsArrnWnyFbuJR0LiuPSXTgvPEM0xUOw7os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cb:f9:76:de:7e:1d:4a:91:46:ec:cc:89:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=8bcf672647f8e48e492207f62bc9e14aadb041c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:79:9d:92:d5:6d:34:de:54:f5:8d:d4:53:
0f:c6:3a:96:bb:c1:1f:68:d8:c2:87:44:fc:1e:93:
98:80:74:43:fc:37:cb:27:cd:01:b0:f5:d7:2e:cb:
98:01:b1:65:95:cb:6f:3a:2f:30:18:1d:04:dd:d3:
53:8f:1b:1d:8a:63:5a:b7:a3:d9:67:6d:59:f2:ce:
60:cc:2d:9c:fd:47:96:ab:11:df:5b:40:09:fa:4b:
28:4f:ea:da:0f:16:b3:bf:d0:7b:c7:53:cb:a5:e7:
67:b1:5a:0e:85:26:47:01:52:a1:24:21:e1:15:f8:
9c:54:e5:57:6a:dc:12:56:fe:82:b7:47:36:50:7d:
9d:cd:eb:ab:e2:4a:db:d4:a3:a7:06:5c:e2:be:72:
0b:ac:cc:d9:08:c3:a1:55:05:50:46:5b:1b:df:92:
71:95:2f:f6:c5:74:cf:68:aa:55:19:33:9a:78:cf:
ad:ba:f5:ef:fe:d1:2d:16:10:5c:9e:fb:dd:a6:75:
58:22:1e:97:49:76:af:da:ff:28:2c:f7:03:b2:70:
d5:3b:74:01:be:65:41:08:17:1d:11:0f:20:92:22:
f4:f5:b4:e1:dc:06:de:46:cf:e2:de:82:f0:8a:cb:
c9:86:31:80:47:30:2e:9a:a7:31:c8:6f:40:41:5b:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CF:67:26:47:F8:E4:8E:49:22:07:F6:2B:C9:E1:4A:AD:B0:41:C1
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0d:d6:f3:e7:4b:79:6c:0a:c1:75:be:41:49:f1:dc:54:6c:
b9:fe:c8:c8:cb:32:5d:fa:aa:62:49:72:e6:f1:43:b7:aa:20:
67:48:37:6c:ba:b6:ac:53:d7:2c:1b:45:9a:9c:e4:0f:19:ca:
18:0a:41:be:92:80:7f:85:f1:f5:14:d6:cb:8b:46:be:31:54:
1e:fc:93:1c:bd:10:5b:43:12:45:f1:ac:d4:cc:d9:66:26:aa:
d6:cf:33:71:c9:7b:5c:9e:87:a2:91:6f:89:2b:ac:48:26:87:
96:43:5c:43:79:3f:d4:33:14:6a:a4:0e:ad:0b:1b:4d:ff:31:
b7:2b:df:b3:8b:b1:69:c9:cd:5c:03:a6:ad:54:dc:f7:10:46:
aa:a4:58:61:93:94:7c:ef:12:74:94:74:24:17:09:74:de:21:
3e:6e:ba:c9:b1:f0:e4:95:35:f1:6e:67:74:2d:0c:34:da:3c:
db:45:6f:b5:69:f8:80:01:a2:19:ba:90:ec:60:fb:62:17:8a:
3c:67:91:3b:f2:3f:70:93:ff:1a:36:4d:18:8d:f8:5b:81:48:
aa:64:26:8e:f1:9e:1e:6d:3d:32:f0:ca:4b:d1:71:af:a7:1b:
69:67:fd:ea:11:11:2e:9c:03:61:5b:76:68:aa:c8:0b:a2:c2:
3a:31:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:23 2025 by rpki-client