Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
File: yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json)
Hash identifier: sI02zmx34YBt3OA3f71O3JT6WqoLjqOt6J5n3pLDHPk=
Subject key identifier: AE:D5:40:B7:D3:0C:A4:D4:B7:81:F9:04:AE:EF:16:C7:5E:D4:E0:7E
Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
Certificate issuer: /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Certificate serial: 0199FD6AED66A49FDEAFA1AC5943721364B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
Manifest number: 0D6F
Signing time: Sun 19 Oct 2025 17:01:07 +0000
Manifest this update: Sun 19 Oct 2025 17:01:07 +0000
Manifest next update: Mon 20 Oct 2025 17:01:07 +0000
Files and hashes: 1: _Z27vdbVNx1AkVs4_tUBUqOLYnE.roa (hash: GcXnOCS0CtBJVhbx+3s+RdmGrB9WpH4rUku+ZZjo1A8=)
2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: Gm0qjfIHJYlYFLhaiyLX5W/ZJO+lHvG2WVhWq/qcEUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:ed:66:a4:9f:de:af:a1:ac:59:43:72:13:64:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Validity
Not Before: Oct 19 17:01:07 2025 GMT
Not After : Oct 20 17:01:07 2025 GMT
Subject: CN=aed540b7d30ca4d4b781f904aeef16c75ed4e07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1b:3f:dc:32:18:e9:78:23:b0:8d:e2:ca:33:
b1:48:60:ea:9d:01:5f:37:f7:62:26:b1:3a:63:47:
b1:95:b9:90:5c:78:3c:62:99:dc:6e:50:3b:47:cb:
7c:d0:61:31:27:4e:15:a7:d4:75:22:65:f9:e2:81:
15:b9:76:69:08:70:f0:a1:ac:11:5c:ea:9f:50:0c:
bd:19:90:51:21:a6:02:c6:bd:f8:c0:74:a4:f3:04:
33:13:22:27:c3:57:05:33:76:44:f3:c3:aa:b2:a9:
28:cc:6f:b8:31:e6:87:9a:25:fd:7d:96:5e:d1:03:
00:8e:61:eb:f7:d9:f3:8a:41:f4:87:fd:56:f0:71:
7e:48:26:f3:85:1a:3f:e7:41:1e:57:6f:5e:e5:c8:
2b:3e:a4:f0:53:95:80:bb:a0:72:18:fc:21:30:8c:
5c:1d:ff:be:7a:ba:d5:49:d6:53:a8:53:2c:91:c8:
74:43:7d:db:61:9e:b5:93:52:60:06:60:69:ef:d3:
b7:a5:61:f4:d4:7d:46:2f:91:85:16:90:ae:10:2d:
24:6a:fb:45:09:7e:0c:18:85:7c:74:fd:de:f2:6e:
30:19:34:9a:52:c7:2b:c9:e4:05:71:49:2b:7b:e8:
3e:b3:9a:01:23:c9:72:04:ff:90:e4:ad:a3:02:db:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D5:40:B7:D3:0C:A4:D4:B7:81:F9:04:AE:EF:16:C7:5E:D4:E0:7E
X509v3 Authority Key Identifier:
keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8b:06:2d:ad:ce:c4:95:65:57:e3:1a:c1:fb:19:87:b4:f2:
63:15:44:ca:b9:ad:ee:ef:8d:27:e0:e1:e6:8c:95:3e:e5:4b:
0f:25:5f:58:b7:61:b7:08:e0:74:44:a5:29:03:8f:14:d4:3f:
bf:14:80:26:ac:37:35:f0:26:d7:1b:dc:46:f6:5d:28:76:8c:
02:f3:00:45:98:ad:68:5a:51:77:ac:33:6f:b8:c1:8a:ab:29:
59:e3:8a:3e:8a:47:f9:9a:15:73:44:f7:81:42:9d:ca:b8:a1:
07:45:27:7f:51:db:68:42:f0:5b:16:99:6b:21:e0:e8:34:d7:
42:28:4a:2f:40:0d:ee:22:06:a5:19:71:c1:43:73:3b:ab:fb:
fe:92:ed:4f:fa:66:e7:ab:0c:96:11:bb:c1:a9:86:a2:0e:85:
92:08:38:4a:cf:2c:30:e6:67:09:74:49:4c:39:1f:9e:7e:98:
36:0f:9b:64:32:7f:48:67:f5:06:78:41:c8:80:49:26:7e:e9:
43:54:e5:03:15:bb:77:fd:f3:37:4c:74:2a:66:3c:3e:00:16:
58:ed:5a:7a:af:fd:3a:0e:b5:17:26:f1:20:82:c0:3a:dc:6f:
ed:1f:a3:9a:5c:e8:98:05:0f:ba:eb:26:7a:93:bc:91:8d:90:
cb:52:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:52:45 2025 by rpki-client