Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: NVRNVY+8KAohwyT/r31JGuSgRHiBLsXlbFDhFRLru5M=
Subject key identifier: 7E:AF:1E:37:91:7C:64:4D:21:4A:5A:D7:C5:F5:7B:BF:23:17:0F:D9
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 019A1FBF2F29F33B65815801900E6B5E9726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 084C
Signing time: Sun 26 Oct 2025 09:00:14 +0000
Manifest this update: Sun 26 Oct 2025 09:00:14 +0000
Manifest next update: Mon 27 Oct 2025 09:00:14 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: SkpF2UurDbBEngFlcGzMSEzHGyGhsrudGYx72EeUsQo=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:2f:29:f3:3b:65:81:58:01:90:0e:6b:5e:97:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Oct 26 09:00:14 2025 GMT
Not After : Oct 27 09:00:14 2025 GMT
Subject: CN=7eaf1e37917c644d214a5ad7c5f57bbf23170fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:16:71:50:9c:50:8b:e0:f9:3c:0b:01:52:
28:a1:eb:95:8d:0d:3d:9b:b8:3f:20:e6:a5:03:8b:
b3:07:03:f9:6c:2d:8c:7f:93:29:20:53:c7:6d:67:
b5:12:75:68:19:1b:11:54:e5:e5:66:d9:5a:14:16:
33:d6:8c:3c:32:3b:39:3a:9e:d6:52:ee:de:66:ea:
93:07:e1:10:e2:ee:95:66:64:f1:e8:50:2f:39:44:
a2:e3:07:fa:66:f8:20:9c:e8:05:ad:79:33:85:9f:
54:03:b4:90:d5:12:77:b2:1f:d0:b5:08:ea:44:21:
e5:70:95:a0:97:5a:56:c3:03:f8:ee:8b:72:3c:5a:
35:e1:67:4f:07:a1:46:0a:12:9a:d8:e3:71:65:d2:
47:62:77:0d:f4:fa:03:ea:c4:58:51:37:e2:85:c8:
82:b7:a2:00:65:a7:5c:8b:42:1f:22:dd:47:ca:48:
cb:af:92:38:f0:82:1e:a0:30:cc:88:0a:09:96:26:
8d:5c:d6:0c:c1:51:08:e1:82:ab:01:ca:0f:84:4a:
f3:a8:e6:de:b8:54:4f:bf:08:7d:ae:51:47:37:4b:
7c:48:43:51:0f:79:19:98:9c:16:94:7b:c7:e9:f7:
01:47:70:61:cc:84:58:7f:7e:c3:c5:37:76:f0:fb:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AF:1E:37:91:7C:64:4D:21:4A:5A:D7:C5:F5:7B:BF:23:17:0F:D9
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6f:10:f6:77:88:4c:ed:2f:a4:4e:a5:55:92:c3:b4:e5:19:
cb:02:19:64:03:fa:e6:a2:eb:ad:ec:b3:3f:f1:dc:ff:0e:b4:
33:6f:8a:b5:13:a6:7a:ab:45:23:fb:84:54:da:b1:2d:7f:e0:
86:25:08:84:4d:52:5b:bd:bc:92:7e:24:93:ac:b0:3d:e9:ee:
c4:ee:fc:89:dc:8b:85:f0:ba:eb:0b:73:46:0b:4d:10:cd:de:
5b:f3:41:57:13:28:a3:76:61:67:de:c9:c5:8b:99:a0:f2:f6:
39:e5:91:7a:fd:7c:65:f1:c7:3a:e0:bc:bc:63:11:24:9f:c7:
e8:a8:f6:13:63:3f:02:cd:fe:2b:f8:88:c4:19:3c:26:04:19:
80:3e:24:b2:89:d8:24:9e:ab:e1:5a:51:66:d1:95:37:27:13:
3a:e3:84:b7:ec:c6:49:67:72:77:43:7a:0d:5f:2c:93:09:ff:
85:7e:95:0b:20:3c:dd:6a:05:f6:dd:7f:77:9b:28:48:33:e4:
08:d5:ac:b7:1b:ac:ba:83:a2:c3:92:ac:be:f7:21:f3:c2:cb:
01:1a:56:6b:d2:b9:a6:68:fb:8f:a7:83:46:ab:d3:85:3f:97:
35:2c:ce:97:86:90:c0:a8:21:f7:85:5c:bd:84:d4:43:05:1a:
4b:30:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:09:18 2025 by rpki-client