Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: qiJMq61ZRcXkBGorBkybaUXFTEgZzMXKxelJ9s18Umc=
Subject key identifier: 61:20:29:A6:A8:00:4D:E0:81:AC:BB:F9:0E:1A:2A:83:6A:91:3B:DE
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 019A71B9699681AFD0A6303945A59AD75F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0C40
Signing time: Tue 11 Nov 2025 07:02:47 +0000
Manifest this update: Tue 11 Nov 2025 07:02:47 +0000
Manifest next update: Wed 12 Nov 2025 07:02:47 +0000
Files and hashes: 1: 1-xE0-vSES3q7X24C7bA8kScsYVE.roa (hash: AMR+YDswQHGejlMnTq+0urVDztOvK2YpsO5lA8H1zXk=)
2: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (hash: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=)
3: KwFiVQgCHTlXMY_TYL_laU7APsg.roa (hash: qfYaVhKwplFB9wdvFF2eG+ZvwUUFbi4aeim7C9EVTCM=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: DDoJYx1ZXUN0eckHC4EM+88TGjMr5lws2EOIVGi4jlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:69:96:81:af:d0:a6:30:39:45:a5:9a:d7:5f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Nov 11 07:02:47 2025 GMT
Not After : Nov 12 07:02:47 2025 GMT
Subject: CN=612029a6a8004de081acbbf90e1a2a836a913bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:1f:07:9d:aa:7f:82:af:00:67:6b:4e:24:
3d:65:77:ad:0f:b2:20:28:28:df:3a:27:5a:8a:f2:
30:07:94:64:71:be:3a:c5:12:80:c3:e2:c4:63:83:
23:f0:2a:87:87:68:bf:5f:9b:ed:41:a6:62:59:dc:
39:e5:4c:73:bf:db:81:c6:0c:64:08:02:7d:b3:a9:
dd:f6:7f:05:19:78:43:fd:7e:af:03:e8:03:15:05:
cc:79:1f:b8:d3:7b:63:6e:d9:2e:e4:e2:c6:24:65:
b2:56:cf:32:65:b6:6b:a1:3a:97:aa:b0:a8:27:e3:
0c:ca:f2:9c:22:0f:b2:5f:9b:d0:61:2a:86:dd:12:
f0:09:6a:00:c9:1b:84:4c:ef:e6:30:03:c5:90:67:
1b:b9:7f:7d:eb:c7:db:1b:0a:59:c1:7c:b0:42:b8:
28:06:7c:f7:77:56:5e:25:10:b7:6b:2c:18:9d:dd:
16:ff:62:1a:79:f7:b1:1c:89:78:6c:84:a1:5c:72:
18:07:ff:4f:16:41:78:42:d5:b9:5b:45:0f:fc:dc:
44:fa:0e:78:9a:26:d5:9e:14:b1:d2:74:03:b6:04:
4a:a8:9b:0d:c3:55:a1:41:ae:f4:19:2b:15:66:f6:
5c:f2:b6:04:73:16:cc:d9:e3:d2:57:d2:64:f3:e9:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:29:A6:A8:00:4D:E0:81:AC:BB:F9:0E:1A:2A:83:6A:91:3B:DE
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:31:c7:f8:72:02:e5:18:15:e1:47:e2:94:6a:ce:53:e0:71:
ab:fe:29:1a:52:be:3c:d5:7c:cf:33:a3:bc:32:59:bd:c4:28:
f8:80:fc:62:fd:98:e4:76:b7:05:42:82:ea:52:f9:84:c6:78:
3f:a2:b9:da:70:23:3b:27:bf:e2:d6:c5:f1:87:e0:83:01:42:
40:35:02:0c:2d:1e:56:0a:1f:a5:1f:f5:38:64:61:e4:39:0b:
97:5b:d9:e9:b8:d0:9a:4c:fb:69:56:88:2a:bb:34:73:83:84:
b6:1d:bd:de:8d:82:68:c1:a6:89:5e:37:b5:21:9b:ea:83:29:
0c:16:0d:22:a6:be:14:b7:da:0a:69:e4:24:8e:8d:65:64:5b:
b3:ea:83:a1:44:81:01:8d:c8:f9:47:15:5a:cb:1f:26:df:b5:
21:89:e9:6c:27:54:34:63:3c:d7:27:44:46:bc:f2:68:30:6e:
e8:d6:d2:a2:9f:1b:34:63:1e:c3:f4:b6:65:97:bb:99:9e:ae:
79:34:08:c0:d6:61:84:32:e3:20:66:70:1b:a2:fe:34:4e:30:
26:41:6e:12:16:76:08:d2:17:02:01:8c:34:76:9f:25:e5:29:
84:9e:09:ff:31:43:d3:76:94:a7:9a:f0:9a:44:3d:ec:fa:50:
0c:e6:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:33 2025 by rpki-client