Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: 2vG8pDLchNdeAUxtlt5LUpsZE21zZSz//oxippv0uCs=
Subject key identifier: BA:BA:AA:BE:18:EC:D3:09:3D:F1:6F:31:BC:75:A7:A4:31:76:12:BB
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019A2554076ECC6A1622F6DFF0022BAF200C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 0748
Signing time: Mon 27 Oct 2025 11:00:55 +0000
Manifest this update: Mon 27 Oct 2025 11:00:55 +0000
Manifest next update: Tue 28 Oct 2025 11:00:55 +0000
Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=)
2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: 7C4PivyKq4NAsbKt6kqMAIRiFh9e8uycdZwTvQDiqfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:54:07:6e:cc:6a:16:22:f6:df:f0:02:2b:af:20:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Oct 27 11:00:55 2025 GMT
Not After : Oct 28 11:00:55 2025 GMT
Subject: CN=babaaabe18ecd3093df16f31bc75a7a4317612bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:c4:74:36:df:25:c5:88:34:b3:53:e8:75:
31:78:fe:70:b4:f4:3a:be:7e:0b:60:4d:73:8d:d3:
8c:d3:29:c1:a0:bd:e7:fe:1d:ad:da:91:5d:84:ac:
69:4b:4a:b0:22:12:5a:a9:94:14:56:a9:54:d1:e6:
a4:7b:28:c5:f0:88:1f:bf:d6:3b:1a:20:1c:86:c2:
1d:74:00:e9:a5:f7:b0:ae:fa:bb:b1:31:0b:a1:3a:
35:24:cc:1d:0b:09:05:cb:9c:fb:6c:67:c8:83:54:
e1:d1:46:3f:5f:f2:e1:39:95:a3:0d:53:f9:a2:2b:
e6:62:b1:36:28:21:81:8d:5c:80:93:f3:f5:15:6f:
95:a4:95:a2:49:8e:a6:f9:fb:30:3d:67:35:9e:36:
1b:ce:85:33:95:86:63:1b:13:61:f5:85:4d:41:f0:
60:43:2a:ed:f4:f8:29:09:88:33:d9:b1:c7:18:ed:
91:75:4c:05:74:9b:40:77:2b:ff:b4:e3:c2:74:45:
ca:f4:ad:bc:ec:f4:1f:2a:8d:3e:88:1a:3f:85:3c:
ca:6c:2f:8f:0c:45:97:4b:f6:a3:61:8e:9a:fd:48:
cb:95:7f:e0:ad:f2:5e:27:c0:41:a4:d7:b1:35:a6:
48:85:32:77:ba:04:b8:60:37:60:7c:95:85:23:2c:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BA:AA:BE:18:EC:D3:09:3D:F1:6F:31:BC:75:A7:A4:31:76:12:BB
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1b:63:aa:fa:d9:f7:f2:ec:99:b2:ed:2e:62:dc:2c:05:5c:
e0:31:87:0f:fe:8d:d6:8d:80:d0:c2:60:23:83:0f:4b:16:b0:
e5:d0:b0:e1:76:aa:b8:2c:8c:65:fa:b5:af:50:f9:5f:eb:20:
0f:83:53:f0:6a:a7:41:4e:e7:09:3d:7c:6d:69:2a:1b:47:b0:
2d:d5:73:1a:a2:11:4b:ff:cd:8b:0b:69:98:0c:db:16:19:32:
e2:40:e7:5b:dd:49:ff:18:f1:d7:f3:98:73:3d:2d:4f:03:9a:
f6:71:d2:44:69:c3:00:7f:b5:72:4f:dc:0b:b3:11:a8:0d:14:
48:82:f8:7c:73:87:7e:2b:21:a3:ba:25:0d:7e:6c:0a:c4:da:
80:6e:50:22:4f:0a:24:a0:ab:55:df:f7:35:cf:1f:e4:da:4d:
45:87:45:85:9f:33:53:dd:d4:86:7a:51:17:9c:ce:6f:0e:af:
55:85:a2:19:da:63:5d:1f:2f:a3:00:9c:65:e4:9d:2a:d5:6b:
04:ce:b3:b3:e9:37:79:81:20:9a:8b:7a:c5:15:9c:50:a5:13:
96:d4:b9:08:71:f8:90:73:cc:7c:84:c1:2b:c3:4f:bf:85:9f:
04:a5:83:29:8c:3c:42:79:2a:24:55:cd:92:55:7d:a7:ba:ea:
3d:0c:f2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:23:57 2025 by rpki-client