
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: gwxzguASgNU5tY4ToDrUYNpnkb6z19uSk04E4XZwNa4=
Subject key identifier: 3E:FE:23:7C:83:DE:2E:56:C1:55:68:76:54:A4:33:F3:41:BC:3F:D8
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 0199FDD955BAFFF0AEDE4536BF86A1E2D5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:42 +0000
Manifest this update: Sun 19 Oct 2025 19:01:42 +0000
Manifest next update: Mon 20 Oct 2025 19:01:42 +0000
Files and hashes: 1: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: FaCkONmVW4ueUqilY7H614Mp6WjfVFaPRDnJQZgfQhM=)
2: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (hash: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:55:ba:ff:f0:ae:de:45:36:bf:86:a1:e2:d5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Oct 19 19:01:42 2025 GMT
Not After : Oct 20 19:01:42 2025 GMT
Subject: CN=3efe237c83de2e56c155687654a433f341bc3fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:c1:f4:ac:70:28:00:4e:3c:5e:14:dc:8b:
42:1b:28:fc:d7:dc:7c:8f:ec:f8:10:b3:e6:de:b4:
6a:7d:26:6b:7a:14:68:0d:10:c3:19:bf:c2:0c:40:
fc:78:bd:ea:69:45:8c:8c:29:ea:00:44:be:c2:d9:
69:df:ab:55:94:9d:ff:2d:42:4b:48:be:91:b9:5c:
8d:9d:3c:0c:ec:f4:01:e4:94:61:15:eb:4b:c5:00:
0a:9a:24:70:00:e5:28:77:cd:45:d7:2c:75:8e:19:
c0:ee:a4:42:26:ce:ab:ef:32:8e:e0:48:43:3a:9d:
b7:63:25:be:84:f0:84:4d:4b:8d:34:83:68:a7:9d:
89:4c:bf:3e:a3:1b:e4:b3:4d:fc:99:68:d9:31:91:
a1:72:24:67:97:91:ca:5e:fb:ec:1d:2b:28:97:a5:
da:a7:54:8d:83:46:cb:be:4a:d3:93:1f:2a:51:da:
ea:ac:c2:54:6d:91:4e:31:ad:0e:f7:5a:b2:1c:70:
6c:db:97:ca:59:ae:5a:62:41:c3:60:e7:02:b8:f8:
5a:c1:23:05:0b:f0:22:b2:df:a3:be:a3:78:65:97:
2f:0a:a7:f6:b1:50:d3:50:0d:5c:06:dc:a2:4d:21:
86:09:cb:26:b0:79:ec:44:ca:31:26:b8:dd:c6:90:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:23:7C:83:DE:2E:56:C1:55:68:76:54:A4:33:F3:41:BC:3F:D8
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:69:56:39:39:6a:f8:4e:7d:fd:be:ec:ba:d5:7a:16:c8:51:
70:9d:91:77:d1:83:7b:2e:9d:c1:5f:41:16:da:57:85:ab:6a:
65:72:12:05:6c:7e:04:17:26:1c:f5:3f:9e:59:56:01:c8:d0:
17:c6:68:07:d4:fd:92:af:52:aa:59:35:71:2e:78:a7:24:36:
47:16:58:4f:5e:90:a6:3e:58:c2:13:95:a4:df:bd:4c:6a:f1:
3c:15:3a:ea:1e:d5:34:87:3e:b2:b4:d0:ce:2c:3e:0e:cb:31:
97:97:14:1b:02:f3:b4:a1:cc:bb:f0:fb:80:69:83:46:e4:d3:
2e:6d:93:26:55:a5:41:8c:7d:27:96:b7:79:f9:7e:f1:95:6b:
18:a6:2b:cd:1a:85:d2:43:cf:0b:32:d5:cd:80:1f:89:dd:56:
12:8c:bf:28:7e:87:9b:5c:67:cd:fc:ca:21:f1:cd:b5:97:26:
ec:f4:c3:22:5c:74:0d:a8:ad:6d:07:c1:74:1a:66:f7:ef:4d:
30:3c:fd:b5:37:79:2c:0f:8e:2b:c1:3f:6a:6d:3c:c2:3c:d3:
c4:a6:e4:9d:78:24:21:be:b9:45:e2:88:b8:e0:1f:e0:47:9d:
1b:6c:0e:ed:17:06:3e:80:f4:39:d1:cf:84:dd:5c:18:43:f0:
41:72:c7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:55 2025 by rpki-client