Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: 1mj8iFx/jki71+35cNUfH9UdgVGkaqeX+TfgMeqPyG0=
Subject key identifier: 4E:1F:6F:74:DE:6A:20:1B:B3:83:35:F4:79:BA:B8:86:9D:03:B1:D5
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019A51874CEAF380956D4AAF6B86C31B1C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 141A
Signing time: Wed 05 Nov 2025 01:00:12 +0000
Manifest this update: Wed 05 Nov 2025 01:00:12 +0000
Manifest next update: Thu 06 Nov 2025 01:00:12 +0000
Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: 85JLSVsT+HBKKcX832ljZoJamtavysXFh2y+eM+6qdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:4c:ea:f3:80:95:6d:4a:af:6b:86:c3:1b:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Nov 5 01:00:12 2025 GMT
Not After : Nov 6 01:00:12 2025 GMT
Subject: CN=4e1f6f74de6a201bb38335f479bab8869d03b1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:58:fc:6c:47:08:1e:dc:0b:3e:79:03:78:
fb:2a:d3:ce:e2:cd:4b:7e:d7:57:4f:12:10:fe:19:
99:39:8f:b2:46:62:ec:34:5a:d9:c2:8c:be:c7:39:
ff:87:e0:dd:f1:92:96:17:98:70:ab:06:1d:3a:ca:
0d:08:81:c1:db:1b:62:36:2e:ef:aa:3d:36:e4:bf:
10:fb:c3:e5:06:e4:29:0a:a2:9a:10:99:7d:88:c2:
92:1f:20:08:a6:5f:82:08:fc:df:d2:b3:38:b7:5d:
4e:25:f4:17:5c:db:26:0a:5e:95:8b:ed:5b:4d:a5:
a9:b7:71:25:28:2f:2a:aa:33:f8:d0:78:24:e3:30:
1e:c2:a2:82:a1:33:2b:6b:b5:94:12:98:58:be:18:
4d:12:c9:e3:b7:7a:66:02:13:67:2a:bb:67:fb:41:
74:09:c8:d0:78:1e:94:dd:4f:81:0b:dc:43:16:f3:
1e:d9:a8:27:8b:48:f8:84:ea:1c:9f:d6:30:2a:82:
86:4f:69:9e:f8:3c:a3:4a:c3:b0:00:8f:8e:3e:14:
13:78:17:41:de:dd:ba:60:d3:df:bb:c1:c5:20:a3:
db:e6:f2:02:2d:70:9a:4c:79:c1:6d:73:fc:7f:cb:
9e:e8:ef:6f:ed:7c:ee:99:ee:49:06:ab:6f:48:93:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:6F:74:DE:6A:20:1B:B3:83:35:F4:79:BA:B8:86:9D:03:B1:D5
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:46:a4:9c:19:f7:31:bd:db:e3:55:be:40:14:3c:bc:ce:de:
b6:f7:2d:6a:09:70:14:e1:d8:5c:df:2e:12:54:07:b3:67:19:
98:37:35:01:03:9a:26:b4:73:c8:fe:22:4c:56:91:98:10:6f:
b2:85:e8:15:a9:66:6e:10:67:2f:73:a5:38:87:b3:6c:55:67:
39:3e:2f:92:47:b3:b1:1b:c9:e3:0c:5f:c5:ce:51:51:b5:f1:
7d:86:fb:97:55:4d:c7:92:51:03:cc:96:db:9b:dd:a4:d1:bf:
46:0a:43:68:b4:83:c6:e6:0c:b2:4d:61:a8:b1:c7:6d:69:95:
76:44:6f:38:50:1d:c2:26:82:75:63:4b:8f:5f:98:30:a6:78:
47:bc:b7:5b:20:02:60:63:a9:1f:07:72:3a:1f:1e:40:ff:15:
45:b1:6f:b0:90:84:5b:47:60:14:ec:a8:3a:1a:6a:91:2b:6e:
5c:13:3c:c9:97:99:d5:76:6e:70:39:da:43:92:d4:40:b4:86:
59:dd:1f:48:6b:c1:e5:ac:29:68:8e:2b:d3:eb:f0:18:4a:9f:
ef:ef:20:4d:cc:cf:c7:70:51:2f:bf:77:1b:57:5e:3d:a5:82:
34:e9:70:24:73:75:75:5c:81:8c:03:49:58:32:fa:1e:e5:3d:
24:a1:69:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:42:51 2025 by rpki-client