Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: IKNna38tJaj3sBSe3oFTn6qQnsaFp0dWjIgXpBV2OlY=
Subject key identifier: 0C:1E:AF:F3:67:AF:53:24:97:AF:0C:E4:61:68:D3:BD:61:0A:22:4F
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 019A4E4FBF66C8FD092CBAA1D387AAC9CD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 1553
Signing time: Tue 04 Nov 2025 10:00:40 +0000
Manifest this update: Tue 04 Nov 2025 10:00:40 +0000
Manifest next update: Wed 05 Nov 2025 10:00:40 +0000
Files and hashes: 1: Iq8sBOoYl2FdEDuOs7ZjqubA0mo.roa (hash: cKH71Gw8ENbKfDC7hsHD0Ixm5ykhTLruun3w+xwHV3U=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: BYPzF1ypMgTrTCRHHxm6+EqAVIWAolWQ6c6SsEI/wN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:bf:66:c8:fd:09:2c:ba:a1:d3:87:aa:c9:cd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Nov 4 10:00:40 2025 GMT
Not After : Nov 5 10:00:40 2025 GMT
Subject: CN=0c1eaff367af532497af0ce46168d3bd610a224f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:8a:94:28:15:3c:d2:41:ac:f0:3a:b4:95:
db:ce:5b:1b:da:8d:a3:4d:b4:57:c7:f6:71:aa:e1:
bd:da:96:4f:22:6a:16:df:9f:36:b2:77:7b:ed:33:
35:d3:b7:0d:a7:28:5e:67:9c:80:13:5f:55:cc:cb:
d3:f4:23:77:cb:01:5a:03:8e:45:bb:d1:da:47:55:
b1:a5:ac:55:af:8e:b6:8e:4f:ca:1f:07:09:7e:75:
87:e2:8f:94:be:43:ec:fd:b0:1a:59:e7:2d:94:be:
10:fe:31:82:59:4b:48:34:2e:f8:ef:84:e2:ac:bf:
4d:73:7e:38:3f:d1:03:37:3f:d1:4f:c6:9c:19:8c:
3e:30:83:b6:74:47:ae:15:8f:6a:52:9d:45:18:72:
c7:ea:75:9f:1a:f8:60:0c:69:3e:d9:63:85:f7:d0:
38:e8:48:ec:a3:a4:5a:b3:e4:f0:12:63:22:ce:07:
d8:7a:09:b3:c7:df:90:42:59:41:8f:88:0f:c2:c0:
5a:0f:3d:68:41:aa:60:be:c8:ad:b3:e9:3e:ca:16:
5f:33:de:9e:23:ba:f5:9d:7e:89:49:52:98:93:7e:
5b:4f:a7:d8:04:2b:0d:60:c8:8e:bc:be:ae:86:aa:
76:a2:b2:b8:a6:d6:79:cf:dc:19:7b:f5:5f:c6:cc:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1E:AF:F3:67:AF:53:24:97:AF:0C:E4:61:68:D3:BD:61:0A:22:4F
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a1:39:88:6f:8a:7e:3c:31:dc:1d:3d:f6:16:68:ea:31:7d:
44:6f:16:44:18:3f:05:3c:01:62:fe:fc:37:e2:4f:db:63:3c:
7e:93:ed:2d:a4:d2:75:44:99:cb:26:d7:d9:e5:50:5a:01:16:
ee:fe:36:d3:84:c4:70:72:db:02:47:07:97:99:58:06:a7:4a:
f7:69:a6:5f:d7:46:80:62:e9:01:88:39:ac:a3:71:24:b9:ed:
07:a1:89:cf:57:21:72:3c:ee:eb:1a:39:1f:1e:2f:92:99:7b:
01:0a:39:29:43:9a:9d:3f:c1:d8:2d:02:f3:49:4e:42:ec:32:
e2:a5:b4:61:aa:e9:a5:c7:7d:49:2c:35:04:ce:a9:1f:d3:82:
67:61:40:d7:48:0e:2f:23:cc:81:71:24:8a:e4:e4:7c:52:2a:
fa:92:06:7d:97:b3:32:6d:5f:00:16:d9:63:1f:1d:f5:03:9b:
2a:9a:d9:aa:f6:04:a3:4e:17:ec:db:ce:ad:14:14:24:9a:c0:
15:fb:db:f7:10:7a:12:d9:c2:ee:18:88:5f:32:eb:17:85:cd:
8c:c4:ba:38:87:8c:29:2d:cb:c7:5a:ec:10:3f:5a:a7:d4:9d:
8f:e5:3b:fd:85:35:14:00:90:9b:2a:08:e8:cf:a4:66:93:87:
09:c8:5c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:12:13 2025 by rpki-client