Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: RMgFIP+rPmGZQQpEEB3GWdZTK7a6BZ+l0KB2dWFEhdk=
Subject key identifier: 58:AC:DF:28:A5:A1:99:F4:BE:90:DE:10:94:94:60:44:D8:BD:CB:AF
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 0199FC8F9AA54129BDA4B8B0D8CF485ACB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 13EE
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: RctnLasQjcnHKBLMgYkb32EciPb6igR7AmT7JVPVFDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9a:a5:41:29:bd:a4:b8:b0:d8:cf:48:5a:cb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=58acdf28a5a199f4be90de1094946044d8bdcbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:bd:81:96:53:ed:7a:83:80:1b:ec:aa:1b:
9f:c4:1c:9e:24:c3:c8:b7:f3:67:03:7a:5e:15:96:
9e:9b:36:59:43:b3:8c:72:38:b6:a4:bb:60:ff:73:
01:85:20:74:31:a7:f7:cb:66:26:85:79:c3:fe:32:
27:f1:42:b7:ad:63:f1:75:74:30:a6:bd:d0:74:75:
b0:36:27:cd:3e:68:e9:94:79:39:92:1e:42:61:d3:
08:7b:a5:3e:6f:9c:65:75:d3:20:e9:ce:a3:20:27:
8d:8c:83:e5:68:20:9d:f3:82:5d:d6:a3:eb:c9:c3:
76:bc:54:46:19:93:a8:2c:92:fb:f1:a5:49:38:31:
4b:91:35:95:80:73:e4:19:84:3e:cb:e7:ab:51:72:
52:c7:da:bc:29:f6:04:4d:b9:7d:1b:62:94:a7:d9:
20:5a:bb:12:f3:3d:4f:83:2f:dd:2f:d1:b7:b5:57:
74:c8:11:5a:48:90:67:9d:0c:9d:02:40:25:8b:b6:
ad:bd:74:5b:33:a3:1b:96:aa:59:1e:ae:66:7e:ea:
a3:7e:2b:cb:d6:07:86:5b:31:27:1e:53:27:fa:ef:
e9:45:a7:01:50:6c:47:72:3f:9d:33:ff:bb:61:e3:
f7:1e:7e:69:a3:66:6d:7a:8c:62:66:f6:8d:f0:8d:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AC:DF:28:A5:A1:99:F4:BE:90:DE:10:94:94:60:44:D8:BD:CB:AF
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:07:3e:a1:fe:e9:fb:a4:ad:28:b2:4c:7a:7a:73:21:2f:d3:
f8:1a:26:cb:70:34:6a:28:79:a0:44:02:67:26:3d:39:89:3b:
5b:1f:af:ea:72:e0:98:d5:c7:ff:d9:c2:74:69:f2:30:86:6b:
17:70:dd:53:11:04:97:71:85:dd:b2:0d:54:7e:2a:e5:84:b9:
b2:af:28:fa:8b:bb:c1:b7:28:53:40:6f:12:bd:31:6c:0c:3d:
44:be:84:7b:12:a1:bb:d9:98:f1:21:15:1a:d2:68:75:10:f0:
52:40:3e:da:c6:1c:ac:64:23:af:58:eb:99:97:c8:55:a8:00:
4a:f9:7b:0a:df:71:f8:4a:b2:54:80:d3:2a:05:d2:47:5a:49:
3b:55:3c:e4:64:28:1b:41:15:2f:da:47:6f:87:96:23:7f:6e:
89:b5:e5:0d:6f:11:f1:a8:d7:e7:46:68:75:c5:d5:50:c8:75:
14:a6:4c:fd:48:a9:03:e7:b8:b5:91:6b:14:3d:44:23:ca:63:
57:d0:39:01:67:60:73:9f:c2:c6:cf:c7:0a:97:1c:d0:1c:68:
6a:d0:e4:c7:d7:29:22:7c:6a:fb:ea:7e:84:c2:25:a9:97:43:
be:77:6a:1d:5c:dd:0f:1c:bc:38:77:17:fb:58:9b:6e:25:fa:
a9:fe:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:47 2025 by rpki-client