Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: Vi3X5bubroqlswO8Iub+6nfk8wFfLeAPSgfsx5U8evA=
Subject key identifier: A4:30:C0:8E:C5:D5:A1:CF:E7:FA:31:98:02:B1:E1:E2:14:D6:C2:72
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 0199FBEA9FA3B72FC3D74D7837AB18ECE2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 04E2
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: UnbwSxH6ZVeEnUksjRft9S3sebQ.roa (hash: 9U4mL4N8d7vors4YWo2644UK3bJphFQDyoU+KjBkOjc=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: 6yBvJkFO8XffWKqp0WQ7UzFlNpxR4O3I3WOLe/Im/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9f:a3:b7:2f:c3:d7:4d:78:37:ab:18:ec:e2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=a430c08ec5d5a1cfe7fa319802b1e1e214d6c272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:b2:fb:11:c9:de:3d:2e:91:9d:7e:0c:44:
b8:f7:f3:ac:8e:fa:e9:6f:86:8f:1c:90:89:6a:39:
cb:0d:8c:3e:5f:5d:eb:18:2c:b7:6f:e7:9d:05:e7:
07:7e:e1:18:88:94:b8:51:8e:ac:e8:b6:16:25:8f:
6f:0f:32:4b:94:b5:4c:21:f4:82:07:9c:59:e0:ea:
2b:2b:0a:71:0f:99:d3:d8:0f:9a:73:19:83:f0:54:
ea:c0:ec:f6:2e:8c:3e:d0:11:e1:a4:85:09:71:60:
e6:bb:96:f5:b3:23:59:1c:e8:bc:f4:5c:51:30:67:
93:1b:f6:4a:bc:65:d7:c8:0f:36:d4:83:ca:b0:4f:
73:db:ca:de:b5:06:75:b7:42:b9:56:e8:4d:6c:e4:
e7:0b:d5:8c:ed:b4:3b:b9:24:c7:bf:75:2d:dd:d4:
bb:ea:98:89:9b:a1:22:63:7c:32:0a:5d:be:7a:5d:
ae:e8:1c:91:32:07:a9:d9:f5:1b:e7:76:fe:f2:1d:
9d:22:16:77:e7:fd:fe:cc:f4:c7:09:db:77:87:81:
d0:b6:1c:10:4d:e6:c2:5a:9d:23:09:9f:a0:d0:5c:
6d:12:51:6b:59:5b:77:83:cd:68:95:63:fb:e9:24:
f3:82:ac:08:86:4f:08:f6:39:9e:f2:dd:45:b5:48:
b8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:30:C0:8E:C5:D5:A1:CF:E7:FA:31:98:02:B1:E1:E2:14:D6:C2:72
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7a:8e:ac:4c:ae:de:cb:9d:70:08:8b:4b:0e:b1:80:31:07:
eb:5e:0c:e5:1a:9b:88:81:85:0b:13:3a:6f:1f:5b:65:62:c5:
5a:65:b8:1c:f1:34:88:77:fb:d9:ff:da:8e:e4:2e:e6:31:ed:
bc:0c:55:e7:6a:44:c1:1e:10:86:26:97:e6:2e:1b:d0:58:41:
42:1a:f2:de:ef:e5:69:1a:9a:a7:54:75:93:7f:bb:9d:1a:b4:
6a:1c:5c:3c:fe:c6:a4:3a:49:de:40:08:fc:e6:d7:39:a6:78:
fe:b9:f7:b4:34:d3:ca:21:54:6e:e0:ce:a1:6a:49:91:94:e8:
7d:4b:97:99:87:89:b6:73:92:fb:df:d2:9c:38:ae:87:7b:08:
99:19:97:f5:68:06:36:07:b4:0f:c3:39:ff:f8:e3:13:d6:ab:
8f:03:46:80:8c:f8:36:c9:52:d8:b4:b7:88:8b:b4:c2:bf:42:
84:d4:bd:a1:c8:86:74:40:2e:f3:e9:c4:70:01:87:fa:52:f1:
a7:35:be:cd:75:7c:9e:1d:9c:fc:de:39:90:d8:6c:a1:c1:c1:
7b:95:8f:a5:6f:cf:da:e4:c5:0a:2d:18:1b:7e:89:06:23:a6:
1b:0a:ec:34:f0:4e:42:7e:d3:cd:c5:8d:cf:fe:7f:b7:d2:34:
ff:f0:99:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:46 2025 by rpki-client