Manifest
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
File: yqgF26w2R0m5sRVZCrbvD5cM29g.mft (raw, json)
Hash identifier: LFQkSqiL7BWncq+sPBsSNHHFyjGWMGzBBvu7rAEMSR4=
Subject key identifier: CF:75:C7:49:EB:96:45:5C:6E:8F:F8:70:1B:EB:1F:96:4F:79:F1:B4
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 023ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
Manifest number: 023663
Signing time: Mon 15 Sep 2025 10:47:19 +0000
Manifest this update: Mon 15 Sep 2025 10:47:19 +0000
Manifest next update: Mon 15 Sep 2025 16:47:19 +0000
Files and hashes: 1: 111wEGLfsrCC1YXvRd90Mcgv3so.roa (hash: aK/B7f1mLzo2P0di31RLAL/n8lybzDgTkqimo9ZZzzQ=)
2: D53F-thyu-FB_Q-Qnu54dMG6kUc.roa (hash: F5BasJ7cpf0y1kDUV2GhJ9A7f+WVJ9Tg97K4I87sONg=)
3: SDnJ5mezCjLuEx8ibUeI4qVoUpw.gbr (hash: Dh33tig5Tgg5x+zwGknTxUqLVhn4qAhDHuz7dInvOBw=)
4: XUJQ4tgdREjYop786R0p_wdeyeI.cer (hash: DrDVi/JiphSff/KUlYHrSjbrW1zgVdfqUcsc6Tdez74=)
5: euv64En05073B5-r95s2Uu_UwJg.roa (hash: XiuUZ8UmidXN8hBLSaaK/0y/A/0mIPPIW4YyRcs2pUg=)
6: voibVdC3Nzl9dcSfSFuFj6mK0R8.cer (hash: WwOEnrqRnDl0WwBdK6nhQGVkfYQQotE+5n1JMM/b8Bw=)
7: yqgF26w2R0m5sRVZCrbvD5cM29g.crl (hash: fsQ/3pl7iENG7dVgXoJmiLcNnzn6JtYqeKwZVoYtku4=)
8: zIlYN-tDLuEj0BDwZSi5PS1eIDI.roa (hash: qLS98wDD6uBYR/1xGuHLGjRWrS9SRA1uwPUMSp/TaYE=)
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 16:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146107 (0x23abb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Sep 15 10:47:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=CF75C749EB96455C6E8FF8701BEB1F964F79F1B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:e7:56:e4:87:73:15:f5:a4:ce:2f:9f:82:
4d:05:06:8f:6d:ed:a7:7f:0f:18:17:92:fc:48:6f:
25:35:65:08:a6:60:1d:5e:b5:7f:d7:3a:cc:29:41:
ae:4f:9e:19:a1:13:13:26:a9:fa:09:1e:f6:63:6b:
b2:d7:32:e4:b0:fe:81:17:8f:c9:e7:a6:6d:fe:ec:
0d:44:60:51:6c:b3:c9:bf:ac:0f:e1:31:76:a0:2d:
42:08:a9:f7:31:fc:a7:21:ad:96:4f:6c:02:91:46:
80:3f:0a:43:de:37:dc:90:a1:c4:be:20:02:d1:5d:
50:e3:7e:02:15:98:a1:e3:cf:9a:fc:e8:31:ea:e4:
7e:8d:9c:c0:6f:5a:5c:cb:18:8a:c7:e3:b4:da:b5:
e3:9c:f5:e4:ee:40:f6:16:03:04:cb:0c:5b:cc:29:
39:d4:a3:4a:a7:8a:52:13:6e:72:05:f1:79:f5:80:
12:3d:1e:49:07:bb:ae:48:f2:49:7c:bf:7c:97:63:
0a:df:40:cd:34:0a:97:12:ba:27:85:1b:84:2c:99:
b5:34:07:88:91:2c:09:47:06:33:34:cf:15:1b:09:
36:7e:bf:97:92:95:8d:5e:b9:c1:50:1a:c0:05:a0:
87:8d:37:3c:13:42:18:2d:62:d6:26:40:64:a5:a2:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:C7:49:EB:96:45:5C:6E:8F:F8:70:1B:EB:1F:96:4F:79:F1:B4
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:d2:e8:e3:22:db:9b:6b:a1:8a:a9:d9:80:a8:24:b9:33:94:
e6:aa:bc:bc:6d:eb:ea:cb:0c:c3:3b:71:d6:1f:3e:35:f9:f9:
6b:06:56:41:90:d0:b2:ce:5a:ca:36:bc:b3:c5:c5:8e:5b:43:
aa:a0:f6:23:a5:45:92:f5:3c:9a:38:79:92:d8:7b:2d:c3:13:
c0:49:d2:73:00:67:5f:45:ad:7b:c4:c7:3a:c5:54:37:1c:a1:
01:07:5b:e1:06:f6:fb:12:fc:2b:7b:78:79:27:a3:07:c1:29:
e9:49:08:14:d1:a2:cb:ad:63:97:5a:3b:37:44:26:68:6f:f8:
f0:93:47:42:83:39:0c:f4:d7:38:e9:26:b8:74:d0:96:46:cb:
15:31:fe:2c:74:12:bb:57:b9:fc:5c:6e:f1:b9:6a:12:78:b3:
44:ea:6a:10:eb:01:82:bc:df:7b:57:99:34:fe:6a:7e:3c:d3:
52:00:75:80:01:d1:27:13:05:f4:37:ee:2e:5a:3f:38:42:00:
b9:e4:12:63:0b:8f:3a:09:41:be:26:66:b3:94:df:c1:1a:05:
b7:92:b2:e7:07:d4:b9:4b:60:bb:8a:c1:9c:fc:f2:2d:76:6e:
46:86:5d:bf:82:eb:e0:7a:e4:c6:d6:67:fd:b5:e7:6c:a5:3a:
91:ca:be:43
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIDAjq7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
YTgwNWRiYWMzNjQ3NDliOWIxMTU1OTBhYjZlZjBmOTcwY2RiZDgwHhcNMjUwOTE1
MTA0NzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhDRjc1Qzc0OUVCOTY0
NTVDNkU4RkY4NzAxQkVCMUY5NjRGNzlGMUI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxebnVuSHcxX1pM4vn4JNBQaPbe2nfw8YF5L8SG8lNWUIpmAd
XrV/1zrMKUGuT54ZoRMTJqn6CR72Y2uy1zLksP6BF4/J56Zt/uwNRGBRbLPJv6wP
4TF2oC1CCKn3MfynIa2WT2wCkUaAPwpD3jfckKHEviAC0V1Q434CFZih48+a/Ogx
6uR+jZzAb1pcyxiKx+O02rXjnPXk7kD2FgMEywxbzCk51KNKp4pSE25yBfF59YAS
PR5JB7uuSPJJfL98l2MK30DNNAqXEronhRuELJm1NAeIkSwJRwYzNM8VGwk2fr+X
kpWNXrnBUBrABaCHjTc8E0IYLWLWJkBkpaIvawIDAQABo4IB5TCCAeEwHQYDVR0O
BBYEFM91x0nrlkVcbo/4cBvrH5ZPefG0MB8GA1UdIwQYMBaAFMqoBdusNkdJubEV
WQq27w+XDNvYMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZAYDVR0fBF0wWzBZ
oFegVYZTcnN5bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpv
YnNuaWpkZXJzL3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5jZXIw
DgYDVR0PAQH/BAQDAgeAMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5
bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpvYnNuaWpkZXJz
L3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5tZnQwFQYIKwYBBQUHAQgBAf8E
BjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQAp0ujjItuba6GKqdmAqCS5M5Tmqry8bevqywzDO3HWHz41
+flrBlZBkNCyzlrKNryzxcWOW0OqoPYjpUWS9TyaOHmS2HstwxPASdJzAGdfRa17
xMc6xVQ3HKEBB1vhBvb7Evwre3h5J6MHwSnpSQgU0aLLrWOXWjs3RCZob/jwk0dC
gzkM9Nc46Sa4dNCWRssVMf4sdBK7V7n8XG7xuWoSeLNE6moQ6wGCvN97V5k0/mp+
PNNSAHWAAdEnEwX0N+4uWj84QgC55BJjC486CUG+JmazlN/BGgW3krLnB9S5S2C7
isGc/PItdm5Ghl2/guvgeuTG1mf9tedspTqRyr5D
-----END CERTIFICATE-----
Generated at Mon Sep 15 12:37:10 2025 by rpki-client