Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: /wURC1MlA+kEx6zAbPh4XYTPJciskkESgek+di1XhYo=
Subject key identifier: 9F:5B:BF:E9:DA:D8:B3:F4:20:4D:61:4B:60:E9:50:49:F8:95:E7:62
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 0199FDD94452EB803967D09ED51D20289D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 0496
Signing time: Sun 19 Oct 2025 19:01:38 +0000
Manifest this update: Sun 19 Oct 2025 19:01:38 +0000
Manifest next update: Mon 20 Oct 2025 19:01:38 +0000
Files and hashes: 1: pedXVkU_3_VDst7sTxTSsbn2Em4.roa (hash: 3VM8cHkV3+LaUs7pbcy8XQqPPtDXhoRXeq5taS4kpbU=)
2: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: 3EuiZ6908iFgpA+LLUtYCnTCk5lNPzRA38ovtF1xeCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:44:52:eb:80:39:67:d0:9e:d5:1d:20:28:9d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Oct 19 19:01:38 2025 GMT
Not After : Oct 20 19:01:38 2025 GMT
Subject: CN=9f5bbfe9dad8b3f4204d614b60e95049f895e762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:38:e2:05:32:74:e1:a9:7f:9d:75:c1:65:
df:3d:92:6d:20:8f:00:9f:99:89:15:98:bb:fa:9f:
db:ff:06:01:6d:15:61:4b:c2:a6:fa:13:2f:b4:41:
d6:eb:b0:9e:e0:6b:bb:24:c0:de:a7:01:38:70:06:
18:e7:2c:2e:a9:ac:28:e2:79:44:3b:93:cf:d0:63:
06:d3:25:da:de:07:f9:a0:0e:49:4f:11:e0:d3:39:
cc:38:a2:4e:a5:df:00:8d:b1:53:d7:d3:8d:0b:24:
53:81:1b:72:5a:fb:55:f9:f1:80:b2:d4:8f:fe:b4:
9e:3d:d9:8c:21:8f:fc:9a:d0:2f:4d:f6:ab:9f:cf:
6f:08:c7:6b:11:ea:a3:be:11:9e:a6:4d:a5:a2:a8:
d2:2f:8b:71:4e:5a:82:bc:64:f6:28:4b:f5:c5:0a:
78:2e:13:64:b1:64:41:5b:b2:b8:c8:fc:14:bf:0c:
97:e6:04:c4:9a:ef:7d:ad:e9:e8:67:a7:3e:43:9b:
98:42:f5:e9:b5:92:88:73:b0:41:b8:eb:44:ea:62:
25:60:a8:b2:a5:33:26:ef:13:5f:aa:6a:01:d3:25:
9f:40:74:a9:49:0d:06:17:d7:34:0c:1b:dc:16:05:
da:0e:8d:32:4e:69:6e:91:37:d7:0f:bf:6d:18:66:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5B:BF:E9:DA:D8:B3:F4:20:4D:61:4B:60:E9:50:49:F8:95:E7:62
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a5:63:40:c1:ad:4d:34:d9:14:da:88:40:ea:e8:f4:59:27:
6b:3a:29:0a:6b:10:eb:da:e8:7a:3b:aa:6e:c8:7e:d6:62:55:
e1:ad:0b:33:22:d2:33:6f:46:14:1b:34:3b:a9:41:7a:0d:fc:
43:e0:fb:d1:4d:5e:93:7e:3f:31:95:d4:23:15:7c:4f:89:0a:
26:e1:c0:59:c6:9f:9a:db:c8:63:92:a4:db:70:4a:eb:0d:99:
a4:e4:7a:d1:40:66:81:36:98:5a:5a:0b:40:bc:0d:d8:94:ac:
8e:72:be:90:0f:ac:05:a7:f4:66:9c:87:65:29:57:5e:87:d5:
c7:71:6e:4b:d8:5e:3f:05:f8:af:37:1b:c7:fc:5e:b8:27:36:
d1:0e:ed:7c:e6:f6:35:38:19:a5:e6:6f:04:38:dd:a7:66:4a:
4a:43:48:2f:0c:5f:a9:77:dd:f2:59:d9:cc:0b:99:9b:f4:17:
9d:af:91:00:bb:c6:17:74:c5:70:67:21:9d:40:76:8a:57:db:
21:ff:7a:50:86:38:44:61:b6:cd:7b:b3:a3:84:db:f5:19:0b:
06:c1:f8:4a:66:f7:86:9c:da:c6:97:b0:a4:74:ec:0c:42:48:
e2:20:6a:6c:24:d1:75:33:12:c7:a9:25:e6:27:f6:e5:a3:9e:
f5:56:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:43 2025 by rpki-client