Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: /ckxw3vVXHwVeWxpT3XGRp3sbBB4VKitw/szB51Mo2U=
Subject key identifier: AD:77:1D:D3:CE:F3:03:0A:75:EF:4B:11:90:93:14:15:B7:5E:31:28
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 019A1DD0ED6B6F843B162DD9F783FD530712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 0F4F
Signing time: Sun 26 Oct 2025 00:00:22 +0000
Manifest this update: Sun 26 Oct 2025 00:00:22 +0000
Manifest next update: Mon 27 Oct 2025 00:00:22 +0000
Files and hashes: 1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: WYdMMRV+AG5KQ6J2DYyXkxo1BWSAAQHXYZxGHdSypOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d0:ed:6b:6f:84:3b:16:2d:d9:f7:83:fd:53:07:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Oct 26 00:00:22 2025 GMT
Not After : Oct 27 00:00:22 2025 GMT
Subject: CN=ad771dd3cef3030a75ef4b1190931415b75e3128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:b4:62:16:fe:1b:38:97:bb:7f:a0:22:f9:
35:9b:d0:22:61:17:59:1e:96:df:7f:3c:67:5a:52:
78:00:96:b0:6b:3f:91:17:f5:2c:93:28:39:b4:6d:
9d:9d:c7:50:72:fd:79:65:8d:d2:af:82:a4:91:ff:
5d:6b:2a:3f:b2:6b:dd:e5:0a:f5:bd:ef:b8:9d:79:
5f:80:7e:fa:c5:a0:a6:16:19:ec:dc:a8:34:83:91:
9a:ec:44:a2:f7:34:46:85:0f:95:47:ad:98:05:d7:
d2:88:94:4e:46:36:2e:c2:d8:e6:13:0b:51:a0:e1:
56:6a:52:0e:ed:ef:c9:3d:6f:44:55:7e:7d:93:07:
e1:ef:df:3c:51:23:cc:5d:50:89:00:b3:89:c7:af:
68:2a:a4:01:75:5e:f4:14:62:ff:a8:56:28:45:8d:
5b:80:b1:c7:e5:eb:65:f7:66:fd:b9:41:95:0d:63:
da:31:99:39:a7:53:83:bc:f9:65:88:34:73:c9:63:
a7:e2:06:3e:59:62:5d:35:bd:39:a8:6a:4d:80:3e:
18:10:7a:1b:b9:8e:48:3a:69:ac:c7:2f:f2:44:78:
d5:f9:12:e3:93:fa:53:fa:a6:95:76:0b:de:99:d9:
88:92:99:de:da:f2:6b:23:ac:97:aa:87:eb:7a:2e:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:77:1D:D3:CE:F3:03:0A:75:EF:4B:11:90:93:14:15:B7:5E:31:28
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:11:e7:05:9b:0a:fd:10:1d:da:1e:f8:74:f4:3e:64:da:2a:
38:78:53:29:7a:ec:ec:df:d7:e0:41:68:bf:5e:3c:55:97:4d:
ad:8a:ce:02:1a:4c:3a:65:ea:31:69:3a:c1:8d:e5:4d:29:7a:
7c:6f:d8:93:28:3b:fd:05:d0:b4:b8:78:fd:85:49:c2:2f:ba:
9b:30:41:ff:3c:ce:b9:a8:a7:ae:f3:15:10:e5:54:01:38:a0:
d7:41:f2:f8:e0:07:e3:47:79:7f:26:4b:97:02:62:42:14:00:
00:d6:e1:3f:ea:f1:83:88:62:5d:70:5c:ca:25:66:e1:f6:b7:
2c:d1:31:a9:c8:3f:bc:b2:83:39:2e:cc:5d:57:0e:39:05:e1:
47:e6:83:27:33:d9:b3:b3:bb:d7:ea:4e:61:26:7e:2b:41:0e:
59:1b:f3:72:da:86:b2:65:e5:cf:59:c8:ee:30:df:24:7c:ba:
8e:04:77:af:80:63:66:cf:2e:4d:68:84:57:24:61:db:4c:7c:
56:2b:65:f4:d6:04:8c:67:df:46:27:72:32:b5:26:d9:cf:3b:
c4:db:64:a0:e5:ce:10:01:38:51:ea:84:85:f3:1c:05:87:5c:
69:2a:f7:aa:8f:65:a6:96:09:05:57:28:3e:05:87:8f:a6:2b:
e6:b4:af:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 08:21:39 2025 by rpki-client