Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
File: yPJYziA-BKM_TpBlEVOyWc_6Pog.mft (raw, json)
Hash identifier: VVMPbJMChUlLO9V4H58smQg8SmuRZ2WlSpWi2MyedZc=
Subject key identifier: FF:23:14:D1:19:3A:02:A2:70:0C:4C:22:E0:63:BA:D9:46:29:82:FD
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial: 019A2A441F1E433056B9FE1AA7841ADE6F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 10:01:38 +0000
Manifest this update: Tue 28 Oct 2025 10:01:38 +0000
Manifest next update: Wed 29 Oct 2025 10:01:38 +0000
Files and hashes: 1: 3OPKqlzsdO_6FnnigdjEBtH5MGI.roa (hash: TGXodn+4ZnMS0vB8YcYqILiualGqtvptFZ+aYltyIls=)
2: DSP2YiR4WzjHqSWGSS08rUQRgbE.roa (hash: wRqBcz801mLsMlnqTiS+wIo1U44VP4wBktKdtKLPifQ=)
3: L-DhFAOlHk5rFENU35v4H6Y8kC4.roa (hash: es/wTE6LdxRXaEI3U8d6ZJo/4QzkGb/m+lXYCfWMDmo=)
4: yPJYziA-BKM_TpBlEVOyWc_6Pog.crl (hash: fF75r1OTmuV1x6FXl55uBW57DemfJ9x5BNK0AREE1ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:1f:1e:43:30:56:b9:fe:1a:a7:84:1a:de:6f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Validity
Not Before: Oct 28 10:01:38 2025 GMT
Not After : Oct 29 10:01:38 2025 GMT
Subject: CN=ff2314d1193a02a2700c4c22e063bad9462982fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:22:cf:29:d1:f6:b9:50:1d:2a:a3:88:89:
90:f4:07:47:6d:5b:b4:47:ad:77:a6:bd:ad:6b:5f:
6b:53:c7:fa:43:b1:47:51:88:6d:7e:79:5b:d0:25:
8d:68:bb:95:47:bf:31:43:b4:fa:90:b0:28:d6:0b:
52:7d:04:df:66:72:12:9d:7e:46:3a:50:b6:c9:6b:
e7:4f:5f:96:76:f6:42:81:52:30:c2:d1:c4:8a:73:
0f:17:a7:51:ad:cb:67:78:00:6f:07:10:10:2e:5d:
9d:fc:55:b8:d0:6e:ed:7e:37:a7:fb:47:c3:09:99:
df:8c:a7:39:af:97:b6:ac:4e:d9:cf:75:e2:88:82:
0f:ff:1e:b7:60:32:05:3d:bf:0f:e9:fc:e8:1f:8d:
97:af:81:80:80:5b:d1:61:88:54:e0:35:35:24:14:
54:65:07:57:eb:e8:6b:6f:3b:88:27:00:40:2c:8b:
ed:7a:18:5d:f3:99:70:41:f2:2b:ac:ae:5b:3b:b7:
9e:1f:7b:29:0f:22:c7:d8:06:f3:10:65:fc:1e:45:
a2:a0:61:e0:0e:0d:a6:71:3f:24:4d:61:fb:08:11:
09:24:68:81:bf:2d:ec:1e:f4:69:3c:04:a0:bf:5f:
05:ad:b1:af:de:8c:ec:ca:5d:fb:bb:ea:d6:12:7a:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:23:14:D1:19:3A:02:A2:70:0C:4C:22:E0:63:BA:D9:46:29:82:FD
X509v3 Authority Key Identifier:
keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c7:20:f2:31:5d:32:a1:89:f4:bb:88:14:63:52:f1:2b:1a:
65:89:ab:f2:08:f7:c7:de:74:cc:76:3e:9a:c7:aa:46:18:22:
39:26:27:2d:90:20:ae:cc:e0:db:66:09:f3:bc:d2:cc:09:0a:
37:b1:e7:26:d9:12:7e:d3:88:5e:60:77:02:0c:78:f7:5b:3a:
ef:e1:b7:3b:d9:c1:6b:6f:42:4d:02:2e:88:26:54:ef:92:56:
8f:6e:a7:19:c3:61:87:94:0e:a4:53:b3:1d:91:fc:61:21:af:
9a:55:ec:d7:35:e2:bd:ad:43:7f:83:7a:83:59:30:38:f2:8a:
e4:0c:73:62:ce:8a:b6:55:fd:b9:dc:2b:84:2a:f9:fe:65:36:
99:e8:8e:60:f4:c8:56:10:8e:d4:64:b9:59:6a:1a:70:e6:a8:
86:ca:ea:70:dc:2f:a0:a3:11:fb:d2:53:d7:89:58:13:8f:13:
83:d5:ff:1f:f5:e8:fb:c1:e9:f3:58:21:2d:0e:8b:09:5e:3f:
12:b3:77:e6:60:f9:a2:ed:67:5c:79:3b:9a:16:b1:50:33:ab:
f4:e7:4f:39:b7:2b:8c:d5:76:ea:22:90:e2:5b:ac:86:a0:d5:
8e:13:f4:99:37:f1:41:5e:b0:ce:4a:ce:77:b0:ab:c2:05:b4:
b8:71:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:15:17 2025 by rpki-client