Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
File: yzNdxv6zhfaiM0QFahPCxZUCjpE.mft (raw, json)
Hash identifier: y4c6rlulSQeRDdGqqrv2DudukPupZhotHVQuytd+c3c=
Subject key identifier: 46:A0:39:C7:22:4B:91:B6:E8:C8:B4:FE:7D:C1:41:59:FD:E0:A0:9C
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 019A22F7095D96868362B5B3DD568BADCA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
Manifest number: 16FD
Signing time: Mon 27 Oct 2025 00:00:06 +0000
Manifest this update: Mon 27 Oct 2025 00:00:06 +0000
Manifest next update: Tue 28 Oct 2025 00:00:06 +0000
Files and hashes: 1: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (hash: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=)
2: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (hash: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=)
3: k5xMorPADX6pjlz13eIpCR1YD6Y.roa (hash: zYtUaU0ku4oMSnzZFqoPkHIdrXIDxibBJ6DcraKtexc=)
4: yzNdxv6zhfaiM0QFahPCxZUCjpE.crl (hash: 3iYSWD0cFSOkPwhVKpgd7oIcz8n8MJOA0jRb67qrQbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:09:5d:96:86:83:62:b5:b3:dd:56:8b:ad:ca:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Oct 27 00:00:06 2025 GMT
Not After : Oct 28 00:00:06 2025 GMT
Subject: CN=46a039c7224b91b6e8c8b4fe7dc14159fde0a09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6c:f1:09:71:ff:5c:93:8e:69:53:0a:a4:f9:
7f:cb:6e:25:76:a8:f0:f6:87:87:4d:13:9e:91:98:
ac:da:d4:2f:e7:b2:57:5a:fb:55:4c:48:ba:d7:ed:
e6:c7:bd:b7:58:c9:4e:3f:fc:80:2a:be:98:65:28:
4e:2f:a2:bb:8b:d2:85:13:02:39:ad:d6:79:b9:12:
33:08:95:12:21:05:77:b7:1a:65:97:8d:3b:7f:9c:
ce:c5:07:e6:37:09:4c:76:05:29:c5:16:a8:3d:92:
22:07:cb:43:94:61:36:49:bf:2f:1d:09:c2:e8:d5:
cb:e3:7b:44:d8:29:12:b8:cc:af:9f:78:d6:18:30:
11:f3:8e:26:5a:e7:f0:fb:17:57:b1:ac:7d:28:f8:
69:d1:77:a8:38:68:c9:e4:c6:42:38:cd:8d:c9:cc:
06:f7:2d:5d:a6:a3:8e:7d:62:11:54:75:ad:95:6e:
17:0f:39:de:f9:8e:4b:66:40:c4:12:55:15:61:58:
6c:c5:f3:fd:5f:d8:fe:55:13:db:2b:87:82:c2:2e:
fb:f2:46:2c:44:e7:b5:2f:09:99:e1:7d:dd:f0:76:
7f:83:53:cd:b9:da:0f:82:6f:9c:e7:69:62:6a:3f:
75:dc:6c:de:51:5a:2a:30:a5:01:4d:7b:6f:2f:67:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:39:C7:22:4B:91:B6:E8:C8:B4:FE:7D:C1:41:59:FD:E0:A0:9C
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bf:6f:cf:6c:10:77:e7:06:68:f3:4e:75:8b:ba:76:80:1b:
fb:d6:20:58:8f:a1:df:3a:52:72:89:fb:4a:d5:53:33:7e:1e:
4e:fd:e6:47:88:46:ff:0a:28:19:01:f2:54:44:8b:2c:45:d4:
71:53:67:50:68:01:c5:28:b6:67:81:69:6c:2f:78:46:df:4b:
b9:0e:c4:cc:18:ce:15:8a:44:4d:66:c2:b1:8d:4a:38:8a:43:
fa:7c:03:6b:bb:02:ec:c0:07:22:3a:b5:90:33:24:f2:5c:cf:
41:ad:d3:5b:f8:d2:3f:c4:99:11:0a:ef:f1:75:6f:c6:79:52:
66:4a:66:70:06:5d:d2:d3:23:35:ae:3c:33:d3:be:88:d7:93:
75:2e:12:eb:1f:2b:c0:4c:9b:d7:82:98:d0:ec:9e:a4:02:c1:
ca:30:b7:a7:41:c6:aa:37:74:24:36:7b:1f:30:8a:ab:ce:2b:
f0:b7:27:60:3d:86:a6:b6:d8:2d:46:6f:d8:cc:3e:cb:9b:16:
29:55:6d:1d:83:ab:ae:be:36:44:1c:84:0f:ca:ae:c8:d2:80:
3f:5f:d4:c6:82:13:7f:36:c0:f9:8e:5f:f6:80:40:2a:e5:75:
3d:26:70:72:03:e5:64:7c:34:8a:17:63:18:80:ca:8b:6b:84:
57:20:57:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:01 2025 by rpki-client