Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: kVxHgzIfA81VSN5oV4hF49S6fG+ylseSOHJxGLh592g=
Subject key identifier: 49:E6:A4:1B:FE:2B:A9:F3:85:8F:A2:D7:8A:82:8D:C4:06:98:26:A9
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 019A25F86C77312EE370CB245033611A78A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 14:00:28 +0000
Manifest this update: Mon 27 Oct 2025 14:00:28 +0000
Manifest next update: Tue 28 Oct 2025 14:00:28 +0000
Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=)
2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: 432NdCNFc+U/kqhblFTcjI7h17aEtQecDpCHG1QmffM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:6c:77:31:2e:e3:70:cb:24:50:33:61:1a:78:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Oct 27 14:00:28 2025 GMT
Not After : Oct 28 14:00:28 2025 GMT
Subject: CN=49e6a41bfe2ba9f3858fa2d78a828dc4069826a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:37:6b:9a:77:1b:d2:bd:d9:5d:6f:e3:97:
2a:b0:d1:f9:05:3f:68:21:25:11:43:e3:d0:16:8e:
6a:df:ac:d6:36:37:97:69:29:4b:bf:82:d4:61:7d:
49:5d:f3:27:24:49:7b:4a:04:c8:4d:51:52:47:d0:
70:79:d9:e6:60:38:b4:f1:5a:ed:62:c2:8b:51:9c:
e1:07:87:3b:74:5b:3f:9f:3c:c0:24:3f:c3:0f:0f:
9d:27:1c:3c:b4:91:c8:ef:cf:9c:90:11:1d:5a:f3:
39:fa:6f:4f:08:7f:8a:53:87:a1:8a:33:d7:7b:df:
6d:55:09:9f:ac:d1:76:a1:81:0a:39:75:7a:fd:74:
a8:07:8c:7f:4c:62:5c:64:9d:7e:97:6c:47:45:41:
9d:f7:c8:81:53:bb:68:e0:56:4a:ea:b2:d7:22:36:
aa:6b:4f:ad:95:0b:80:26:3b:86:b1:f4:bc:2f:ba:
40:b4:c2:99:cf:a6:66:f3:8c:a1:fc:1d:0b:82:90:
07:54:3d:9b:72:b1:fb:54:c5:8c:d9:d8:b9:2f:bf:
fe:d0:2a:72:70:e8:a2:b5:df:2e:d4:c7:ae:64:27:
06:ef:de:b5:73:af:8b:2d:bf:e1:36:53:7b:30:d9:
1a:eb:70:37:6f:7f:20:10:a8:de:6a:56:6f:77:35:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E6:A4:1B:FE:2B:A9:F3:85:8F:A2:D7:8A:82:8D:C4:06:98:26:A9
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a4:b8:b4:12:f6:e1:e1:bf:b9:d1:01:56:49:5f:1d:e2:5e:
3d:92:0b:be:44:91:43:56:cf:48:eb:a7:8b:9d:b3:33:a6:31:
4e:52:e5:38:d8:bf:f9:0b:82:63:53:4a:1c:d8:28:62:d3:66:
59:f2:84:e6:02:dc:6a:93:4c:43:24:33:63:d5:aa:ad:e0:14:
c1:28:19:9a:52:73:95:42:0d:66:02:7d:41:01:31:dd:e4:cd:
66:e5:17:5e:50:e7:3e:94:a7:98:b3:0a:bb:41:41:55:12:f3:
91:92:7f:01:e8:f2:84:60:73:4f:4d:ba:ab:97:a4:c3:09:b4:
35:66:9d:51:25:17:fa:ab:fd:cf:6f:77:0d:73:d7:d0:92:08:
e0:5a:12:cc:a8:1c:1c:8d:1d:66:30:ff:6a:2c:cb:1a:ae:87:
ab:96:45:3c:c4:67:57:a6:dd:a5:b8:ab:ce:c8:18:fd:63:30:
9a:dc:0e:4d:c2:ec:68:f0:7f:d4:8f:99:fe:ac:92:dd:c3:aa:
53:ec:7b:40:41:a0:c1:55:61:49:a8:99:8b:29:f5:d9:57:9c:
04:e5:02:da:98:7c:97:71:b1:f0:30:ed:00:2e:eb:27:c1:a5:
f1:a5:05:47:ba:95:b8:24:b4:dd:be:24:5e:f5:e9:5e:d5:05:
86:46:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:26:48 2025 by rpki-client