Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: FhHzN+FlZmZz/rcj3S05fkmOa8Kbi8ME2q6/TOTSt+o=
Subject key identifier: 69:D5:CB:46:73:05:91:BE:99:CF:73:0F:F6:4D:6D:42:6A:CE:6C:D5
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 019A247859ECE3C9D4CD4198A4E097C9B081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0B1A
Signing time: Mon 27 Oct 2025 07:00:58 +0000
Manifest this update: Mon 27 Oct 2025 07:00:58 +0000
Manifest next update: Tue 28 Oct 2025 07:00:58 +0000
Files and hashes: 1: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (hash: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: estjLory96R6obQ1se4oceceG2YfdqQ3MbOlJIM3xX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:59:ec:e3:c9:d4:cd:41:98:a4:e0:97:c9:b0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Oct 27 07:00:58 2025 GMT
Not After : Oct 28 07:00:58 2025 GMT
Subject: CN=69d5cb46730591be99cf730ff64d6d426ace6cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:f3:fa:34:12:c5:b0:44:f4:95:25:10:cd:
cd:2a:56:90:dc:aa:73:4b:a2:6d:91:ce:41:3d:f9:
f2:c8:0c:eb:bd:0a:c9:c9:68:1c:20:cd:a7:ca:89:
c3:5b:d3:1e:f2:c8:52:da:15:53:fe:33:d7:ff:54:
5f:44:2f:07:aa:cd:6c:12:6c:a4:6c:35:1b:83:1c:
d0:dc:27:2e:a6:ca:a2:7b:d4:43:ba:44:e0:f9:be:
f5:aa:64:5d:d9:38:01:e4:05:39:da:fb:3a:6d:d7:
34:09:bb:91:77:82:e4:d6:f4:1d:c6:f3:d1:90:b8:
be:f5:46:cc:42:76:37:6e:2e:10:53:f7:7a:79:6c:
31:44:f3:70:8e:51:99:47:4a:2c:4a:75:9f:05:17:
d0:dd:8a:30:79:0d:dd:fd:90:6e:69:fa:6a:97:66:
38:33:14:10:00:ee:c7:8c:dc:c9:35:13:70:85:61:
5d:48:27:c4:4c:7e:a3:cd:47:62:31:eb:25:d6:62:
b8:14:cd:93:27:ca:98:61:59:66:fe:ff:3a:4f:01:
d3:18:52:54:b5:78:f2:89:f5:08:1f:ef:ed:38:0f:
4e:63:cb:80:a1:b2:bd:51:0c:4b:54:de:ab:11:c2:
60:4b:bc:0c:4b:25:fa:db:a3:ca:17:cb:ec:22:a3:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D5:CB:46:73:05:91:BE:99:CF:73:0F:F6:4D:6D:42:6A:CE:6C:D5
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:45:96:fd:a7:79:9e:34:0b:3c:dd:6c:e0:2f:2a:71:11:7c:
9e:5b:6c:bd:e7:ec:3c:02:09:27:9f:bc:d3:24:09:e1:64:dc:
15:c6:2e:1c:a7:35:3f:5e:a7:02:20:ea:2f:c6:7d:42:6a:9f:
47:02:96:62:c2:d1:94:02:68:a4:ac:d3:04:e1:24:d1:f2:a6:
11:a1:d4:c2:ad:63:e4:c6:49:e5:68:92:c0:f6:22:ba:03:60:
bf:69:43:d1:0f:f0:e9:3e:2f:42:89:4d:49:7d:2d:56:6f:15:
68:19:f1:3c:ae:aa:4f:c5:c3:29:d3:eb:8a:26:e9:fb:5f:ee:
54:7a:39:e4:f8:d7:6b:6a:e5:a9:69:57:1b:c8:7a:e9:0b:2d:
91:70:2b:03:5a:3e:79:ec:f2:1b:01:f1:f2:41:8e:f1:89:ac:
9a:e7:ac:23:53:0e:03:f4:c2:07:60:57:5f:31:ba:fe:29:30:
ff:80:f6:86:ae:a5:69:5b:01:51:e1:cb:b8:01:cd:30:b7:19:
96:ef:a0:3c:c7:e3:a0:d5:0a:ea:a8:9c:13:13:f9:39:15:75:
0c:7a:43:d6:83:1c:ff:cc:c1:d1:78:b1:00:0e:de:c9:bd:93:
8e:c1:e1:96:92:60:c4:a7:33:e2:94:2c:a6:79:da:52:ac:b0:
d9:52:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:25:51 2025 by rpki-client