Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: IzceeEA9/C3RNimRiQDgwaOGgugkqqM5nu65o/HRiKU=
Subject key identifier: 1D:3A:69:D2:39:8C:22:59:F4:35:39:35:2D:CF:F3:F9:25:12:DA:5E
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 019A202CE0E50D766390A2DC660E6806B7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 0544
Signing time: Sun 26 Oct 2025 11:00:03 +0000
Manifest this update: Sun 26 Oct 2025 11:00:03 +0000
Manifest next update: Mon 27 Oct 2025 11:00:03 +0000
Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: KhK0va+w3BDHRPp2rJ7YbWD+AOuiA+mxiebjudHbGf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2c:e0:e5:0d:76:63:90:a2:dc:66:0e:68:06:b7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Oct 26 11:00:03 2025 GMT
Not After : Oct 27 11:00:03 2025 GMT
Subject: CN=1d3a69d2398c2259f43539352dcff3f92512da5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:76:18:71:1a:64:cc:66:fe:80:2f:1d:fd:
b4:07:56:d3:3f:16:60:4b:56:2b:59:fe:88:b8:e5:
41:4f:07:dd:d3:a2:87:96:70:8b:b5:81:fd:d4:9f:
4c:50:53:32:63:10:40:52:d9:e0:73:c7:c5:66:00:
9e:23:45:d8:33:6e:a6:d5:9f:b1:00:ca:06:56:58:
de:5a:d2:93:13:ce:06:ab:73:a2:d5:58:b1:1f:a7:
57:ba:fd:f4:f9:2a:57:01:50:3a:10:a3:83:55:27:
04:04:43:5c:01:2c:63:f9:12:ff:6f:97:3b:52:32:
48:a6:85:28:d3:bb:24:e8:28:ac:66:29:45:ee:04:
d5:f8:bb:30:e0:56:cb:a0:d3:ac:0b:f4:ef:e9:97:
5e:42:33:04:76:9c:bd:76:08:7a:30:15:03:32:11:
ba:e6:c3:e8:25:be:1f:46:d7:53:e0:4b:c3:de:95:
99:ea:41:88:02:25:db:e8:dd:b7:67:8a:39:66:21:
64:d7:d9:e1:09:a5:db:a4:7b:e8:39:06:87:47:6d:
33:97:ba:4f:b6:82:06:45:5c:d0:35:88:45:04:f1:
40:aa:f5:85:34:28:ad:1e:f4:13:f8:bf:8a:6c:52:
4e:8e:b9:d8:43:54:aa:f1:eb:e8:ac:87:31:d8:ff:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3A:69:D2:39:8C:22:59:F4:35:39:35:2D:CF:F3:F9:25:12:DA:5E
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b9:e3:be:b4:6e:c2:ac:84:1f:0b:ad:71:9e:6a:50:ca:72:
61:af:6d:4d:89:b3:bc:48:33:85:da:aa:71:e3:f7:7b:fa:bd:
da:c5:06:df:00:80:f3:aa:03:64:0f:8e:f5:00:99:22:7f:e0:
87:90:8a:e0:ea:1e:41:b4:d1:55:c6:72:8b:8a:ac:8f:20:ab:
60:81:a7:f7:a7:a8:59:70:87:44:9b:5a:be:62:20:47:92:43:
e3:2a:6a:64:27:8b:96:d4:89:c8:f2:45:7e:66:3f:5d:bc:e5:
61:59:21:2c:f6:cf:15:6b:37:04:10:a8:7b:21:23:18:e1:68:
6a:3b:77:cd:02:88:62:f6:e7:ec:70:68:2b:2b:bf:98:73:39:
6f:cb:55:2e:11:39:a2:53:6b:04:78:87:f2:89:47:c2:7d:f4:
de:93:69:91:cb:93:98:57:ff:fe:e4:b6:39:6c:d3:a3:7c:8e:
05:65:50:76:c9:b1:1d:c3:2e:e2:b3:61:8a:cd:8b:00:df:c7:
3d:5a:3a:aa:67:93:fd:df:13:35:bd:12:f7:63:7b:70:c2:06:
c9:56:f8:5a:68:93:25:c7:d3:5e:f0:6f:01:8d:44:32:84:91:
ba:05:66:c8:74:cd:d6:6b:99:63:42:ae:81:df:2a:eb:ff:b6:
75:8c:16:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:41:40 2025 by rpki-client