Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
File: yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json)
Hash identifier: LREuaxI2yKFPeuTLqbA/XI2MoWojwjzGwsbKYUgGJbM=
Subject key identifier: A0:08:B7:8A:FA:8E:7E:46:E3:4A:8D:05:A8:7B:A0:DA:C6:CB:5B:E8
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 019A1FF60F8F31A673C282BE4B0153A9FBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 10:00:10 +0000
Manifest this update: Sun 26 Oct 2025 10:00:10 +0000
Manifest next update: Mon 27 Oct 2025 10:00:10 +0000
Files and hashes: 1: BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa (hash: rqwF60FwzB+zZQwtQI8AX0k6qPeHy+PObyrOxNB5ovY=)
2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: EnKTYtbIsu8MJC5yDT/oC5K67g+nPluveblLGQczBWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:0f:8f:31:a6:73:c2:82:be:4b:01:53:a9:fb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: Oct 26 10:00:10 2025 GMT
Not After : Oct 27 10:00:10 2025 GMT
Subject: CN=a008b78afa8e7e46e34a8d05a87ba0dac6cb5be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f0:54:a2:04:91:1b:d8:d5:7b:43:18:ec:d2:
9d:7c:d4:2e:41:fd:f5:26:49:a0:dd:1d:c9:a0:69:
5e:fa:20:9b:73:d3:84:2a:2b:36:af:75:a0:6b:e0:
74:53:b9:5d:4e:33:29:7d:b4:86:e9:42:50:af:d3:
2b:73:48:f7:5b:66:c8:d3:55:66:ac:7e:1d:b2:6a:
ee:5b:d4:ff:ce:06:16:04:25:ac:5f:4c:9d:5f:c0:
da:a3:07:e8:23:f9:59:8a:e1:89:ba:08:62:6b:e8:
3c:e5:80:4f:4a:9a:b2:31:5f:d2:2b:2d:96:e6:a7:
4c:5b:2a:c3:be:91:a7:13:fd:9f:47:de:7c:9d:05:
f7:34:e6:6f:67:98:25:f5:a3:8c:68:97:37:69:42:
fb:53:82:44:e9:ca:cc:c2:23:34:58:96:f2:29:ba:
28:c4:fd:6c:6f:66:07:d2:09:1d:a7:75:01:f6:41:
17:b2:64:5b:32:20:0b:a7:91:57:e2:24:11:35:83:
93:7c:13:11:46:fe:f3:2e:c0:17:34:54:01:04:bd:
d4:0d:ec:fe:16:19:0a:19:ea:49:e9:5e:4d:e3:92:
a8:64:fc:06:d1:e9:62:fd:d9:75:84:8b:dd:4b:57:
61:c6:e5:05:58:3a:4c:0b:0f:98:96:9f:75:5a:80:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:B7:8A:FA:8E:7E:46:E3:4A:8D:05:A8:7B:A0:DA:C6:CB:5B:E8
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ab:73:51:cf:72:41:21:57:bc:8e:9e:b0:86:4f:de:16:95:
91:94:87:f7:e1:63:39:20:46:be:71:9e:12:4e:9c:d2:4f:31:
df:a6:87:67:54:b5:a1:93:7c:38:a8:67:bd:5a:8c:72:22:da:
c2:b5:a8:57:b4:4a:e5:61:38:15:84:2b:f8:91:c6:0e:2c:c9:
66:7f:ae:42:a2:20:08:9e:11:8e:11:bf:c6:d3:af:0e:ba:b2:
76:59:f7:3f:a8:5b:38:a5:e0:84:90:d0:d6:70:b1:2a:0b:2f:
48:84:60:bf:f8:ae:8e:90:47:9d:cb:a4:ae:ee:f1:d2:8c:50:
ba:6f:1f:86:56:9d:12:73:ab:2f:55:9a:f1:0d:69:d3:3c:21:
bc:22:ed:a9:f5:d4:a5:10:26:bb:a2:ba:0f:af:72:2e:93:80:
f4:52:cf:6a:5d:f8:d5:ec:f0:5a:8e:be:2d:9f:50:56:0c:1d:
2e:d3:3e:ca:13:fc:07:0e:98:37:86:3e:bd:3a:0b:e5:bf:6d:
3c:1c:52:2c:ab:0d:e7:88:6f:2f:22:41:07:22:20:30:18:d2:
95:95:0f:33:f4:09:ec:0c:a5:23:65:6f:ea:b6:96:7c:f9:65:
d9:d7:68:1c:63:62:dd:d2:f6:5a:d4:8a:6a:28:a4:a9:cc:37:
c1:6e:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:40:22 2025 by rpki-client