Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
File: yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json)
Hash identifier: hdnUxeDbdlK3Vnnopm5v95xQtNRFjVo+VkT6YxzYxXw=
Subject key identifier: D2:BD:56:25:A2:0C:2B:B2:1B:BB:B5:E8:15:F8:B9:64:7B:AD:38:DB
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Certificate issuer: /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial: 019A228A39E07F7AC8E35918941230385FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
Manifest number: 08B2
Signing time: Sun 26 Oct 2025 22:01:15 +0000
Manifest this update: Sun 26 Oct 2025 22:01:15 +0000
Manifest next update: Mon 27 Oct 2025 22:01:15 +0000
Files and hashes: 1: rOX9zRwObaYZKZTR0WDKGvQYCI8.roa (hash: AVl8Cu7AhfVM1Wh1VdzrltPVEMOUXlEEy7ZTpT+wzAA=)
2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: uZNzywpcBW4s4OVhUeMrP3WvTrfssPy7XwHi1B9YbhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:39:e0:7f:7a:c8:e3:59:18:94:12:30:38:5f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Validity
Not Before: Oct 26 22:01:15 2025 GMT
Not After : Oct 27 22:01:15 2025 GMT
Subject: CN=d2bd5625a20c2bb21bbbb5e815f8b9647bad38db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:65:de:79:5e:e3:35:4c:55:15:12:9f:21:
cf:60:8e:fe:b8:96:01:67:1f:6e:13:25:e8:24:20:
ab:15:de:9f:3a:4c:ee:2a:6b:aa:e9:24:e6:53:a9:
ae:48:c5:bb:2f:d7:8b:2e:12:98:1a:9a:7d:4a:7b:
cb:a3:28:6b:37:21:8b:55:d7:d8:56:c3:6e:67:dc:
86:af:46:fa:18:c5:70:1e:2b:9d:8b:68:f1:8c:34:
18:4b:be:c4:ce:bc:f0:92:a2:77:86:61:b3:ad:f3:
9b:cd:10:e9:28:40:52:a9:fd:be:03:c0:ba:18:5b:
18:07:99:06:85:00:01:60:75:54:00:76:07:ec:f9:
0f:0c:0e:f6:a1:26:05:28:09:f2:d9:ad:0c:1b:f1:
ac:35:72:78:bc:5e:aa:2d:b8:65:18:72:9c:10:a8:
57:34:73:56:c1:d0:01:5c:2d:36:0c:ba:63:99:22:
dc:51:29:4c:1a:c7:d0:66:5c:b2:cd:fe:03:fb:59:
16:87:1c:a3:92:35:c6:a9:d9:df:c0:ae:b7:c2:51:
96:f5:a1:19:18:c8:d2:f3:9c:8f:f7:e1:e3:90:65:
17:6e:1e:9b:20:a8:2e:ab:a3:2c:9f:07:87:01:d9:
f7:25:94:2b:69:bc:9e:8f:3e:16:a7:7f:4c:5f:86:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BD:56:25:A2:0C:2B:B2:1B:BB:B5:E8:15:F8:B9:64:7B:AD:38:DB
X509v3 Authority Key Identifier:
keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:30:1e:1c:fd:b9:02:f4:0d:1e:2f:3e:0a:ba:35:a0:33:bc:
a7:65:ed:78:5c:4b:30:41:6b:64:2f:e4:90:b4:12:2b:a4:5a:
7f:cb:ee:3c:ad:92:3d:0c:02:b1:9b:71:89:47:7a:26:fe:c6:
77:71:81:aa:f2:c0:62:52:27:9e:c4:fe:2a:a8:38:d1:cd:39:
1a:12:b9:e8:35:5f:af:d3:b6:55:50:0c:d3:03:ef:d4:1f:94:
6a:35:f3:96:c0:08:00:b3:9a:e7:ba:f2:21:09:a0:84:1f:09:
59:e4:44:6a:b9:f1:91:c7:55:26:24:42:17:2c:20:cf:1a:a6:
58:5c:01:fa:09:e2:a5:87:40:8c:8e:e6:a1:82:ed:8c:6a:be:
02:6e:7f:72:89:3e:18:04:1e:77:a2:ad:04:23:86:4d:f5:73:
36:40:3b:87:ba:3a:41:82:de:86:f7:ca:13:23:d6:52:d4:db:
c9:1e:cb:a8:b3:21:29:4c:73:9d:2b:36:b8:96:c3:ac:2d:a1:
60:be:e2:72:7e:89:c9:31:db:0e:53:22:83:26:d0:b3:45:5c:
f0:c7:b8:9b:88:8e:04:81:7a:4c:c0:38:c0:e0:9c:4c:b3:33:
5c:b4:43:44:27:70:ad:11:d5:ec:73:7f:94:c5:a0:45:e5:73:
26:5e:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:28:24 2025 by rpki-client