Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: jg4fBvLCmbJFXWDeqxBcPlj/XZCAo5BLDF/tt3dmTTY=
Subject key identifier: BE:B7:67:40:19:B2:36:BC:25:BB:DD:D2:AE:5D:DD:DB:8F:74:0C:9D
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 019A73017D1C7080BBD3E2A8B1836D1E8449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 0B0D
Signing time: Tue 11 Nov 2025 13:01:08 +0000
Manifest this update: Tue 11 Nov 2025 13:01:08 +0000
Manifest next update: Wed 12 Nov 2025 13:01:08 +0000
Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: SiChuC8qx8IOhFp2Y+iPOsk1V/TXWI/YfGXr/DIOe0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:7d:1c:70:80:bb:d3:e2:a8:b1:83:6d:1e:84:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Nov 11 13:01:08 2025 GMT
Not After : Nov 12 13:01:08 2025 GMT
Subject: CN=beb7674019b236bc25bbddd2ae5ddddb8f740c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:e9:a8:0f:89:f5:cb:d8:c5:d3:2b:5a:e8:
b6:32:0f:8f:09:a7:cb:da:8e:80:66:29:58:43:24:
db:03:60:c5:f4:64:98:63:34:f9:b8:c2:f7:24:44:
db:e5:4d:e2:ec:9a:ba:bf:c4:36:c0:70:c2:76:64:
00:e5:88:86:a9:bd:44:3d:ee:67:a3:a7:ec:93:20:
8f:8b:d9:af:ca:58:5a:81:c6:f8:33:69:97:ef:15:
c6:51:f1:d6:1c:9a:47:34:50:3e:9a:eb:c9:6b:45:
9e:3d:e6:16:16:ea:2d:d9:79:47:23:24:b2:30:a9:
53:2e:69:11:27:3b:9d:09:14:3b:7a:10:b9:eb:13:
d3:c1:73:96:7f:fb:9d:3f:11:8f:11:1d:7e:aa:e4:
a5:17:e7:5b:41:9e:63:87:91:89:73:a0:27:2e:30:
7e:a9:65:11:3a:8b:7f:dd:51:4f:50:03:07:ef:4f:
20:93:d0:2b:f3:0d:86:f2:af:52:9c:96:56:e5:0f:
01:a2:07:55:f9:c4:2f:50:13:d3:b8:61:4b:1e:97:
1b:87:ce:09:47:77:09:a8:c4:de:d7:52:6a:93:ff:
be:6b:fb:99:c9:a1:6f:17:8a:0c:95:0f:b5:0d:37:
80:2a:a9:1c:d7:f9:74:77:16:c3:31:25:9c:74:2d:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B7:67:40:19:B2:36:BC:25:BB:DD:D2:AE:5D:DD:DB:8F:74:0C:9D
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9e:39:c0:56:7a:00:11:5f:7b:61:29:1a:09:2b:46:72:d7:
a9:4b:ca:3d:b5:f2:bb:c0:a7:ee:c5:ab:60:83:71:fd:b8:ed:
3c:df:2a:99:d0:b2:83:49:79:e0:0a:ee:22:56:fe:ae:11:42:
d1:14:e0:a4:49:c9:bb:27:c8:b3:32:cf:ae:18:b2:38:92:38:
e2:a0:3b:c1:63:05:18:93:51:21:0d:cc:ce:06:71:23:6e:6e:
4d:77:e9:95:2e:b1:59:2c:89:bc:36:85:fd:69:b3:c9:e7:ed:
0c:ed:a0:47:09:e4:c1:b3:29:72:9c:ae:65:a3:87:5c:19:97:
65:c1:ee:25:1e:8c:31:a7:55:e2:68:94:ee:77:99:81:75:74:
3b:02:82:b4:db:44:6d:2f:b6:6e:86:e8:c3:e1:7f:c3:ae:55:
71:f1:69:f1:3f:52:49:b9:5d:8e:40:89:29:95:62:50:5e:db:
f2:f9:ef:e9:ee:55:17:84:a8:36:59:19:a7:cc:9e:e8:ee:c1:
22:6f:38:64:02:ea:7f:2c:72:c0:e8:21:06:b4:7f:6b:62:41:
cf:92:4d:d1:d4:1d:31:38:31:c9:67:82:77:ac:06:da:3a:b2:
d9:93:44:a7:73:c9:95:d7:ba:17:06:33:96:89:cb:61:b0:b6:
fb:67:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:37 2025 by rpki-client