Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
File: yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json)
Hash identifier: EB1bkpgaNenkvOo4vMCzYphKjwmue3rOv3NmEvLek6c=
Subject key identifier: C4:B5:71:72:CF:71:A0:DE:84:7B:72:79:01:A8:08:36:FF:F2:EB:4F
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Certificate issuer: /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial: 019A7293D53E8E340005538E230D05C3FB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
Manifest number: 0715
Signing time: Tue 11 Nov 2025 11:01:22 +0000
Manifest this update: Tue 11 Nov 2025 11:01:22 +0000
Manifest next update: Wed 12 Nov 2025 11:01:22 +0000
Files and hashes: 1: xfu021S1jJtouexa28jA9KZojkw.roa (hash: ydYZd2IQ/M2DMWZopd0Btk/t60vr6MsiYiLHbkf4rwI=)
2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: 562yrqwBt+PgnA16vBtTI+zP22BNh04zO6UP8z983MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d5:3e:8e:34:00:05:53:8e:23:0d:05:c3:fb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Validity
Not Before: Nov 11 11:01:22 2025 GMT
Not After : Nov 12 11:01:22 2025 GMT
Subject: CN=c4b57172cf71a0de847b727901a80836fff2eb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:38:c0:12:0c:1e:0c:c7:4e:52:12:01:20:
c2:43:7a:39:78:69:c7:26:54:87:0f:c5:0e:43:85:
85:85:f0:53:37:93:4e:58:a4:24:f4:b7:69:a7:9c:
cd:40:e2:d2:27:db:12:6e:6a:87:43:71:41:d5:b9:
84:d3:33:c8:96:bd:d5:57:ae:87:ba:35:3d:ce:98:
af:f7:36:53:f7:68:e4:69:fa:51:ea:39:9d:ec:b9:
83:e4:c7:4d:82:0c:b8:f0:7b:46:37:4a:f4:f3:3c:
a5:fd:9c:bc:e7:72:ff:7a:87:b0:6c:88:de:65:77:
6b:fd:e6:5f:37:32:ae:2b:e6:04:1c:c9:76:f0:39:
0b:01:10:e5:9a:10:cf:85:33:69:7d:98:dc:03:48:
77:72:36:8b:cd:19:90:bd:a6:f8:c7:cc:d7:90:79:
ed:01:0a:7f:dd:e1:47:5a:01:8e:1c:6e:47:41:90:
a5:59:95:fa:6e:1a:1a:ee:71:39:fe:c1:a0:2f:f0:
09:4b:f9:54:24:ec:2b:b8:b5:a6:00:b2:1f:13:b9:
40:63:40:ea:d6:cc:d8:04:77:97:6b:30:e4:36:b9:
af:c8:bb:8a:ad:4b:7a:51:49:ae:b7:d7:11:07:dc:
48:55:fa:0e:4f:52:4c:b7:09:20:8e:6f:73:db:e1:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:71:72:CF:71:A0:DE:84:7B:72:79:01:A8:08:36:FF:F2:EB:4F
X509v3 Authority Key Identifier:
keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:30:e3:90:e1:1a:ac:7d:c7:d3:a6:d0:1f:d8:64:3b:f2:91:
8f:9f:6a:52:12:c9:8a:dd:69:75:ee:a2:8e:f5:37:a0:f3:be:
33:a4:27:27:fc:cd:6c:b9:26:5c:9a:53:18:e6:cd:66:36:03:
de:08:37:50:9e:ba:05:36:f9:49:69:56:bc:4c:43:0d:91:04:
13:91:3d:33:42:0e:59:d6:be:14:11:83:29:a4:8e:54:19:11:
d2:36:41:aa:9a:e2:7c:be:31:e5:8a:43:b5:0c:18:47:3d:be:
65:77:8a:2e:12:43:31:53:bf:6c:75:a0:99:80:9f:62:e2:36:
71:15:e3:c0:fb:1d:43:4b:3a:cf:ee:88:06:05:2d:5a:b2:09:
2c:90:7d:3e:10:13:68:ba:8d:2e:8e:38:67:f3:2e:09:87:a5:
cd:e3:8b:16:dc:a2:b5:63:0f:2a:f2:1f:74:90:6d:b3:01:b8:
23:89:fa:1f:53:77:c5:1d:92:f2:9b:06:45:aa:b0:3d:f3:8c:
2c:b8:da:57:0b:bc:f5:07:41:16:81:d9:38:ae:7e:00:b2:56:
7f:2a:bd:15:cf:d5:36:4d:cc:00:d5:f8:0a:ce:b6:cb:6b:da:
14:2f:20:2d:e9:36:a7:f5:3d:58:25:bb:2e:4a:7e:13:f0:98:
90:0e:9e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:31 2025 by rpki-client