Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: wddkj9wbWjnARsgnPCrkDjF7RNMU1KBzR3Ba2fPqPU0=
Subject key identifier: FB:02:D5:6E:A1:C0:EB:AC:22:53:91:1F:90:9F:02:E4:C8:A8:AB:C3
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 019A251C8D1F4C8C11D555987C28910225A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0E2C
Signing time: Mon 27 Oct 2025 10:00:19 +0000
Manifest this update: Mon 27 Oct 2025 10:00:19 +0000
Manifest next update: Tue 28 Oct 2025 10:00:19 +0000
Files and hashes: 1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: OGsTbxvRObVkm3wBGSlhz9vFQd9PH4MKWEa0xLs7oso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:8d:1f:4c:8c:11:d5:55:98:7c:28:91:02:25:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Oct 27 10:00:19 2025 GMT
Not After : Oct 28 10:00:19 2025 GMT
Subject: CN=fb02d56ea1c0ebac2253911f909f02e4c8a8abc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:5c:e9:a5:1c:22:92:73:7d:37:6a:a3:83:
ba:4f:3f:82:a3:79:df:a1:02:c9:c1:76:a8:ff:c6:
0c:d2:a3:e6:52:50:ce:a6:51:ff:88:48:6b:3b:80:
9e:b8:81:20:79:39:e3:10:97:a7:5a:e3:c3:c2:25:
41:2f:97:8b:29:33:dd:55:e0:cf:b7:bc:bd:2e:e6:
a8:84:8b:e6:02:47:07:e7:d9:58:23:0b:ef:9c:f6:
5d:3c:e5:21:92:39:26:a3:de:a4:ac:37:ad:5a:9b:
fe:29:bd:35:10:77:d0:66:74:6f:0e:02:d7:33:61:
8b:57:ed:24:69:32:67:60:a2:b6:62:84:26:cc:77:
e6:a8:09:79:5e:fb:93:db:13:09:10:57:b9:3d:5e:
54:62:b8:df:87:cb:b3:81:07:7b:d1:4d:46:4e:b6:
af:f8:5b:40:38:3e:3c:8a:55:54:15:72:20:fc:67:
f0:9e:99:b2:9a:1d:7b:fb:e0:01:42:c0:3c:bc:7b:
3b:e9:71:09:ba:40:76:b5:38:8c:d4:98:9e:81:d5:
32:33:94:50:b5:9c:a0:a4:50:0f:0b:54:c9:3d:7e:
33:51:e7:4f:8c:cb:f6:93:12:c8:42:c4:66:c1:c3:
fc:4b:b1:cf:53:55:38:3f:e0:97:bb:a7:10:b2:76:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:02:D5:6E:A1:C0:EB:AC:22:53:91:1F:90:9F:02:E4:C8:A8:AB:C3
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bb:a9:c0:b6:0d:e9:94:ec:4b:bb:20:6a:d9:15:f9:78:fd:
ec:19:d8:5b:c5:ad:eb:14:50:81:66:5d:6f:25:b9:6f:59:2c:
65:bb:c0:42:0d:28:29:a2:4b:bd:87:0c:91:da:d1:98:18:45:
d9:c6:f1:5c:de:24:50:01:67:8f:8f:5d:c0:44:c0:01:51:05:
4a:99:0a:2c:9d:79:80:ea:cb:1c:ef:f5:a4:85:29:a8:06:cf:
5b:78:2d:8f:fa:16:52:05:5e:6a:6b:ef:c3:93:b6:08:7e:39:
c7:b6:42:38:80:05:7d:ae:43:b9:0b:7d:a9:f9:f1:9b:69:ab:
2d:9d:06:24:46:06:20:4a:86:30:3c:3e:0d:5b:35:96:62:85:
76:b6:2f:6c:af:26:72:48:5c:f9:19:06:1b:2c:e7:8d:8f:0a:
44:df:3f:fd:af:3c:df:09:cd:c1:76:7f:1f:d4:1f:1d:f3:0f:
91:d4:15:a8:92:15:19:39:2c:8c:da:0c:f6:6f:26:0f:8e:3a:
f1:0c:38:9c:e8:a8:ef:00:f8:5b:47:72:3b:f9:64:02:5f:79:
4b:6e:98:bb:7a:ed:21:97:ce:47:ca:66:72:f0:c3:1f:7c:70:
a2:6c:ea:19:81:5b:b4:e5:d6:39:69:df:ab:a7:1d:f1:19:24:
74:a6:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:05:31 2025 by rpki-client