Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: BquvnscvV8miS0Eb3CGAKHg+ADwpIn2kSjytUK7F2ok=
Subject key identifier: 0B:20:39:46:80:49:73:FA:9F:FB:7F:2C:80:A4:37:53:83:49:91:C0
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 0199C1FBF55A274437ED258B750C471434EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 01C7
Signing time: Wed 08 Oct 2025 04:02:18 +0000
Manifest this update: Wed 08 Oct 2025 04:02:18 +0000
Manifest next update: Thu 09 Oct 2025 04:02:18 +0000
Files and hashes: 1: 39eMlym5-vUY7eWOJGWxfmeXbRY.roa (hash: WY0sOOmZNXOfMNrzfd1Jh0Sr1ckGzWAuxPnTphEkb9w=)
2: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
3: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=)
4: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: m4FgANhxm1TrV/o2zKbas2HLJDyzOVGq5mJn20Ugs3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 04:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c1:fb:f5:5a:27:44:37:ed:25:8b:75:0c:47:14:34:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Oct 8 04:02:18 2025 GMT
Not After : Oct 9 04:02:18 2025 GMT
Subject: CN=0b203946804973fa9ffb7f2c80a43753834991c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:5b:6b:fc:53:0a:b5:36:ce:a2:82:6e:95:
e2:71:4d:bc:02:b6:f2:a3:b7:e1:13:61:c8:f5:f1:
ce:e7:99:3a:a6:17:78:3b:d4:08:34:7f:9f:4a:84:
61:33:44:53:98:c9:32:3d:81:43:e4:f1:60:76:05:
a0:c4:94:d1:fe:f4:90:84:57:fc:53:9a:56:bf:f8:
6d:e8:46:b6:b0:e5:55:ed:62:f9:4e:2f:30:bc:40:
05:84:15:fa:61:3a:30:a7:59:b7:12:78:b5:05:c8:
ab:b2:a5:c0:b9:5c:bb:db:1d:c9:06:c0:f8:46:a8:
5d:d1:bc:c7:15:5a:bb:f2:b2:03:7a:76:58:9e:d0:
82:0e:99:ff:6e:6b:ef:14:fc:2c:6b:a0:32:9e:38:
26:e5:0e:31:4e:d2:72:e4:d6:a1:3b:58:34:59:9a:
34:bc:ea:c7:48:99:91:2f:5d:ef:ee:37:3c:3a:6d:
8c:72:47:14:e4:5b:c3:29:67:e1:f2:3b:46:e8:f7:
4f:25:a4:5b:af:d5:0a:9a:13:a9:a2:4b:aa:41:67:
ca:f8:42:e1:cb:e8:93:65:34:94:dc:a6:b1:fc:f2:
bb:25:48:57:9c:c1:93:fb:c6:a8:f6:dd:4d:72:0a:
d3:ca:a0:6d:78:fd:1b:08:e4:8c:b4:8f:06:1c:cc:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:20:39:46:80:49:73:FA:9F:FB:7F:2C:80:A4:37:53:83:49:91:C0
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:59:70:7e:a9:9a:22:6d:94:9b:07:4f:0c:ff:5f:04:3c:de:
f9:8d:f5:18:ca:fc:b5:83:7f:d3:2e:c0:dd:3f:ce:49:eb:32:
58:84:61:b9:7b:8f:09:39:b7:b0:d6:ce:64:de:25:f0:2c:a2:
55:d8:c4:31:4b:01:d9:8a:6c:0b:4a:c8:ac:0b:39:3d:55:4e:
4e:a7:8c:f0:ac:98:c7:ab:f2:a0:39:6c:3b:5d:9e:e7:c1:db:
47:02:b5:c7:ca:a9:cc:62:00:46:8f:56:a2:34:d7:97:ad:d6:
c1:52:45:8f:61:5f:6e:17:be:bd:34:cd:96:4b:bf:c3:48:b8:
b1:fc:7e:69:bc:4b:dc:45:a0:f4:80:c3:4e:2f:c0:8a:e2:a9:
eb:e2:c0:99:be:4d:92:30:f9:f9:bb:9d:52:45:5b:b0:ba:f5:
64:a7:d3:64:24:ab:b2:69:95:7f:bd:4d:22:cd:ad:72:90:8e:
35:b7:14:56:b4:e9:71:88:cd:71:19:21:cb:67:c6:17:bb:e3:
a4:18:2f:01:c6:db:9e:65:c1:46:ee:72:ff:22:c3:ca:57:5a:
4a:e8:f0:0c:31:39:a1:c6:d0:d5:7d:12:0f:a4:3d:51:40:1e:
d8:42:f2:9f:bf:e3:38:51:55:b0:90:2b:53:b0:19:6b:fb:aa:
e0:ba:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:38:58 2025 by rpki-client