Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
File: yuBptmPuJf0TVZEB2sHVAyuf1m4.mft (raw, json)
Hash identifier: t4Wg6G/VsFBsZ3Lt2zf30Mi3NL2pJ1eK0vuvdbmR7Pc=
Subject key identifier: D6:D5:01:D7:51:41:44:59:33:10:BF:0F:F6:8D:F4:CE:CF:0D:8A:B5
Authority key identifier: CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E
Certificate issuer: /CN=cae069b663ee25fd13559101dac1d5032b9fd66e
Certificate serial: 019A2AB106A9FC459CD7EB39F429F1F84D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
Manifest number: 1049
Signing time: Tue 28 Oct 2025 12:00:35 +0000
Manifest this update: Tue 28 Oct 2025 12:00:35 +0000
Manifest next update: Wed 29 Oct 2025 12:00:35 +0000
Files and hashes: 1: J-eKojxMi6UoXnAnWpcgCgfxWzI.roa (hash: 3mfOivDPBdA5JQvXcz+RrhjkTiZkiP3KgPuzQa9ZrxM=)
2: yuBptmPuJf0TVZEB2sHVAyuf1m4.crl (hash: C7iNSw/o7ghKJLJ0TMzcs9WAzvNS5Xn0nb0xvCPk1Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:06:a9:fc:45:9c:d7:eb:39:f4:29:f1:f8:4d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae069b663ee25fd13559101dac1d5032b9fd66e
Validity
Not Before: Oct 28 12:00:35 2025 GMT
Not After : Oct 29 12:00:35 2025 GMT
Subject: CN=d6d501d7514144593310bf0ff68df4cecf0d8ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:8e:39:a5:00:71:5d:76:ac:c8:f4:a8:57:
e4:b2:01:f1:fd:39:3e:32:bc:4f:88:6c:5e:02:3e:
73:98:56:35:e7:cd:93:b6:90:f9:77:23:ea:fd:c6:
fb:32:29:98:ad:ea:f8:30:34:b5:f3:bc:ef:ae:6a:
43:a8:94:4b:cc:df:eb:1c:09:ae:3a:6f:e1:ce:53:
de:6c:d6:4e:b7:62:07:fd:5c:0a:bd:fa:27:d0:f2:
e5:6b:f0:c7:e8:c4:36:0a:f2:81:97:35:8d:05:31:
8f:b7:35:8d:e3:7e:34:d6:b1:db:b2:20:32:b4:cd:
79:97:75:58:d9:70:6d:f8:4c:ae:ba:60:d8:f9:4f:
e8:ec:58:95:7f:e8:23:37:01:03:49:fc:bd:0a:3b:
ba:89:92:6c:a2:31:73:12:1e:85:c2:3d:2f:cb:5b:
0e:15:ce:bf:c4:2d:65:f9:8c:df:3d:a1:a7:66:ef:
c9:5d:24:9b:b7:cb:b9:87:97:54:03:5f:18:7c:69:
3d:cb:50:e4:ef:64:b8:18:23:4a:8b:94:c6:41:22:
42:2d:93:e5:0b:39:35:4c:6c:6c:52:1c:75:a5:e9:
b0:c5:0f:2f:45:7f:08:3a:c0:17:a4:74:99:27:3b:
80:44:f8:f3:7e:53:1f:cb:03:d9:18:4e:48:cd:37:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:01:D7:51:41:44:59:33:10:BF:0F:F6:8D:F4:CE:CF:0D:8A:B5
X509v3 Authority Key Identifier:
keyid:CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:7c:36:ae:04:9a:49:3e:20:35:bf:19:e7:d9:02:86:48:37:
0f:9e:4a:82:56:40:f7:5b:53:82:d5:38:31:02:bb:1c:14:ee:
05:01:53:bf:3e:0b:98:45:57:fc:b4:6c:7a:7e:a8:d8:59:90:
31:3e:cd:21:06:ae:9c:58:d7:9a:e4:82:5f:e5:a5:d8:18:39:
1a:dd:06:1e:08:ca:e6:b7:01:48:0a:7b:09:57:57:8b:30:97:
ea:74:fe:78:02:5f:ed:1a:ad:4c:31:5f:4a:d9:e4:0e:d7:13:
f8:db:4e:b1:be:11:11:9b:be:86:5e:57:8c:71:e5:94:68:36:
5b:78:cd:6a:04:98:05:55:bf:e1:19:35:ea:4f:85:0d:57:9b:
2a:9e:65:ba:ba:61:30:a1:e2:7c:6f:e0:33:a2:ef:ba:d6:50:
ae:77:a3:5b:a1:1b:55:fe:3a:0a:7f:07:5a:9a:1a:49:64:40:
ab:00:04:5a:8e:02:70:04:b1:f7:f7:3e:84:c0:ba:3d:17:07:
f2:af:b0:99:ed:a1:fc:08:17:37:d1:7f:10:67:f1:42:9c:b1:
56:fa:1b:1c:bb:d7:28:c8:41:8b:61:72:5c:65:56:d9:ff:fb:
79:33:71:0b:4a:6c:65:bd:08:cf:fd:21:a6:57:79:08:94:6b:
b0:32:bc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:03:26 2025 by rpki-client