Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: K8JccE2KYzIVbdCSzaGUeFgyYmIYHBtVD14wujk+KEI=
Subject key identifier: 8D:09:49:0C:3B:70:3D:AB:37:CF:35:28:CE:50:C9:8A:FC:61:74:0B
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 0199FD6B14717655A190EB5D367B85930592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 078E
Signing time: Sun 19 Oct 2025 17:01:17 +0000
Manifest this update: Sun 19 Oct 2025 17:01:17 +0000
Manifest next update: Mon 20 Oct 2025 17:01:17 +0000
Files and hashes: 1: S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa (hash: Wj6L5jF5/gTOwMGZzw/KKTZV7RAbfIUF0qejcJRN4Ao=)
2: nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa (hash: jaTBLGxMAzmUNw1xz6jc+rhc56U1GYTnqK8npgQkUZU=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: 4UQdTC+XJbAqMhwOPy2QFn2idV5zV9SLusweCugFmhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:14:71:76:55:a1:90:eb:5d:36:7b:85:93:05:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Oct 19 17:01:17 2025 GMT
Not After : Oct 20 17:01:17 2025 GMT
Subject: CN=8d09490c3b703dab37cf3528ce50c98afc61740b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:88:bc:ec:e6:85:2e:de:59:4e:b7:e2:b2:a9:
76:fc:c7:f7:04:de:b9:b8:87:ed:fe:a2:58:cb:39:
5f:fd:fc:1c:f9:45:1b:ee:3d:d4:b0:d6:5c:47:a7:
2f:09:e5:1a:d9:55:4b:71:b2:c5:08:5b:71:d8:24:
e4:c7:00:86:d2:20:3f:4e:cd:3d:67:45:a3:fa:bc:
5e:2e:97:8a:08:e7:4f:56:19:12:be:b7:07:a3:33:
7f:93:f7:77:3e:a8:d8:74:b8:7d:99:ce:9f:1e:c2:
80:fc:fe:51:98:ff:9c:ce:5c:59:05:c7:11:18:8e:
c7:c9:64:a8:2c:ab:da:a5:ba:0d:4f:a8:62:65:b3:
60:7b:8d:12:7a:c0:2e:7b:27:df:58:44:15:de:4e:
6a:97:55:63:f6:c7:e7:76:3a:34:cf:9e:cb:04:81:
8d:cb:19:8b:1f:b8:75:dc:36:03:78:08:83:e8:a3:
04:59:31:a0:8a:2c:0e:63:77:29:a8:39:cb:49:cf:
37:b3:01:ba:34:c1:31:90:62:ac:70:59:d7:e7:f7:
e1:36:98:cf:7e:28:00:ac:09:70:80:85:96:e4:62:
60:25:2d:2d:16:be:aa:6b:54:f6:a7:73:90:a9:21:
68:1a:cd:cb:2f:9b:e6:37:4e:80:25:4f:7d:01:77:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:09:49:0C:3B:70:3D:AB:37:CF:35:28:CE:50:C9:8A:FC:61:74:0B
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:86:4e:d0:13:9b:29:24:37:10:b4:45:e3:28:ae:f1:dd:d6:
a5:fe:1a:6e:27:f1:bf:9b:b2:a2:40:ee:cd:16:77:dd:be:34:
40:b1:f2:66:4b:2a:f4:20:5b:0a:31:21:ae:f8:bf:55:76:d3:
ea:eb:89:ad:ce:c9:9d:76:d5:f7:85:b5:2c:9d:ab:36:16:7f:
92:40:95:d0:4f:74:e6:ab:64:73:06:da:b6:b5:c1:22:a4:7d:
2c:a4:4a:58:d9:4e:83:cb:75:59:84:a3:0b:37:b0:2c:18:a9:
e0:62:7c:4f:1a:3a:8a:30:27:32:97:c3:1c:2c:44:4e:10:52:
17:a7:cc:b7:91:dc:34:f4:a9:31:f8:27:00:d7:e2:fe:41:0c:
8a:1c:a6:52:db:45:e4:fb:4b:7f:16:23:95:1e:c6:2b:6e:07:
d2:ae:14:65:17:02:2f:54:54:00:92:e9:d6:4f:5e:84:56:85:
a0:1c:f2:c7:e4:41:e7:b5:a4:de:b5:ad:9e:bc:19:2e:1b:f9:
9b:27:08:1a:7f:7a:d0:30:44:f3:85:b8:43:fe:a4:40:4a:4a:
de:a4:0e:c8:ab:cc:b6:11:77:72:82:61:31:71:e8:f7:11:e0:
1d:36:05:da:3f:9f:ec:e6:d3:23:6f:6f:67:70:21:a9:be:11:
77:82:ab:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:29 2025 by rpki-client