Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json)
Hash identifier: GpUhfu/QbuLVK8U83W9Vmar7A6Oq32TxOKr2z1b9/Gg=
Subject key identifier: 14:51:98:93:BF:28:B8:8E:1D:E5:C4:3D:85:D2:EE:B4:B3:9B:12:01
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 019A7112B25015B42E43D89724DC9EB00BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
Manifest number: 12E0
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: Dfh76wqLJFFyVrWGvNQ86Cd1ugg.roa (hash: cQ3NC144NOW+txHpDNWV4+CIEXIR87Btz3V4GE61yOA=)
2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: 4gLdwpmaFrF1EXZp5qQCXOnLMyU4siD/SbGopcT0btg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b2:50:15:b4:2e:43:d8:97:24:dc:9e:b0:0b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=14519893bf28b88e1de5c43d85d2eeb4b39b1201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:c0:52:ec:ba:e0:54:7a:38:72:fb:6c:21:
17:bd:23:1b:94:3b:df:01:fd:b2:8f:2c:f9:9f:a8:
dd:8c:4e:a0:80:5a:62:b6:65:3b:7c:b1:d2:02:7a:
46:12:f3:1e:14:08:37:35:73:0b:c5:c8:63:6d:e7:
6e:b7:12:47:dc:06:80:83:ec:a3:5b:d5:03:ae:cb:
38:39:89:c3:91:60:11:8a:5d:77:46:9a:a8:a2:9e:
ec:20:35:a8:58:2b:74:d0:bf:ec:96:94:91:53:8f:
7f:23:0d:e2:af:b8:d3:b4:d3:28:82:4c:43:a1:52:
1e:d6:8c:2e:d5:6e:59:45:26:55:42:c5:f7:b9:08:
d6:af:7f:9e:1e:60:29:5a:a2:1d:e8:b2:34:55:18:
78:2c:e8:2c:09:37:65:db:4f:5d:aa:5d:f5:17:d2:
04:bb:e9:23:e9:4b:ba:3c:9f:1d:5c:2b:8a:c7:cc:
56:5a:6f:e2:fd:02:f0:66:62:4a:fb:d3:e5:c9:fc:
1e:d4:73:86:9b:cc:3d:94:cf:a7:16:22:b6:96:65:
9b:2f:0d:fe:5b:20:9a:5a:18:df:66:32:31:e5:5b:
3d:58:54:0d:7a:de:6a:6a:ad:35:6c:a1:6d:fa:95:
07:57:77:7f:08:50:74:11:d9:43:dc:74:09:af:0f:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:51:98:93:BF:28:B8:8E:1D:E5:C4:3D:85:D2:EE:B4:B3:9B:12:01
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c8:ab:ce:c8:fb:c2:e5:54:5f:e7:f5:de:2d:9f:b6:bb:1d:
98:18:3d:cc:3d:11:21:1b:96:09:8d:77:3b:c3:2a:18:07:7f:
f3:c9:4b:2f:d7:1b:7a:e5:64:af:84:1b:75:45:f8:10:69:7a:
11:58:c0:29:99:1d:5e:e1:6d:50:4e:7f:86:5b:37:7c:df:18:
d6:80:de:de:23:0e:ec:17:c9:54:13:37:fc:7d:7c:c5:d5:d6:
3d:bf:0e:31:a8:88:c3:55:7c:d5:a6:51:39:41:02:79:3e:67:
da:a9:59:34:39:80:a7:1d:9b:50:d9:e1:68:9a:c2:24:82:25:
89:5f:8d:8e:4e:57:e8:c6:a5:41:8d:4e:c8:05:94:06:36:e3:
57:1a:34:fc:30:11:36:92:48:8f:c4:99:df:49:a9:2f:23:c0:
09:2b:dc:c3:b3:94:0c:aa:e5:70:41:5f:e2:78:b3:fb:ec:d6:
d3:96:a9:61:7f:af:2c:4e:86:d2:af:0d:fd:8b:c7:51:3e:1f:
74:44:ca:2a:9e:47:7f:ca:08:37:ff:83:e6:08:96:ba:73:af:
b3:64:85:5a:1e:0c:69:b0:ea:ce:7c:f0:e7:ad:8f:47:58:38:
df:dc:05:2e:b6:0c:58:c3:b4:7d:c7:f8:d3:a0:61:e3:56:fc:
a5:45:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:53 2025 by rpki-client