Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
File: yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json)
Hash identifier: PFYBGBInO+2/HoBADnH6bfgAJ3XEiC8HSXu0TzzkebE=
Subject key identifier: 42:D7:A0:A2:46:9F:5A:09:A2:57:A3:AD:CC:85:93:44:26:01:51:60
Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
Certificate issuer: /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Certificate serial: 019A714A0970495B82E1158436952FD7C5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
Manifest number: 0DAB
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: _Z27vdbVNx1AkVs4_tUBUqOLYnE.roa (hash: GcXnOCS0CtBJVhbx+3s+RdmGrB9WpH4rUku+ZZjo1A8=)
2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: 71Do4jnmS+80nLr5y5c+neOL6Bie2DT9G94f/K4Ai4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:09:70:49:5b:82:e1:15:84:36:95:2f:d7:c5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=42d7a0a2469f5a09a257a3adcc85934426015160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:50:e6:e9:e8:a2:e8:a5:00:c9:cf:1e:fe:
ab:81:fd:96:09:ec:22:3a:80:a9:10:d1:84:ee:80:
95:4c:29:f5:a3:c8:16:9f:90:3a:c0:04:a0:3d:c4:
86:5a:3f:7d:6b:c5:0d:23:f1:e9:a0:73:d9:0f:e1:
ee:45:eb:c5:91:2f:3e:0e:9e:5f:3c:ca:fe:aa:e2:
e6:7a:e4:a4:da:79:0b:83:30:3a:e8:2b:31:33:b6:
1b:6d:93:43:d7:e3:67:2d:93:6d:cb:a1:f3:1f:c6:
8d:50:68:c8:56:47:4f:3d:00:66:09:8c:cd:59:aa:
56:be:15:b9:c1:bc:7a:c2:c3:34:96:95:ef:a9:b0:
7e:8a:b1:3e:60:59:64:19:d1:5d:20:74:7d:43:4b:
c7:cd:9d:d5:73:96:19:b4:85:fc:65:19:aa:38:59:
ca:05:85:14:8b:88:2e:de:3f:9b:b1:bb:af:e1:75:
b2:67:e1:e9:24:5f:29:e6:30:19:0b:3d:a6:3c:05:
45:47:31:63:f7:2d:64:ed:ba:b0:16:a4:95:ca:32:
29:ab:b6:42:aa:9a:a4:21:54:4c:5a:1e:4f:a2:0f:
49:ed:77:3e:59:dd:d8:80:d1:03:90:17:e6:24:43:
4a:dd:c6:4e:af:a8:2a:47:07:19:38:80:bb:b4:80:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:A0:A2:46:9F:5A:09:A2:57:A3:AD:CC:85:93:44:26:01:51:60
X509v3 Authority Key Identifier:
keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:58:82:3d:6c:d1:7a:4b:7b:f6:14:92:ce:08:d3:ef:e9:a1:
92:b4:85:d7:c5:e7:cc:dc:ba:33:52:42:d4:a4:09:0f:0c:8a:
dc:0b:01:60:3c:e7:4d:f3:47:4f:4e:3a:91:b1:f7:64:6a:6f:
30:16:f3:b1:64:f0:12:bd:e1:22:20:cb:f7:1d:ea:99:0e:7b:
24:3d:5d:5d:91:66:f6:ff:50:d0:57:36:e3:b3:a7:14:ea:a8:
01:aa:6c:60:a9:7c:ac:0f:1a:a2:45:61:0e:3b:67:9a:64:8d:
bb:d1:21:28:a4:64:dd:ae:54:ba:3b:32:ae:8e:ef:d5:d2:c1:
b5:5e:a2:40:52:4a:56:7c:29:15:03:71:11:3f:0a:81:ed:ec:
2c:c5:02:9c:1b:8e:c4:74:8b:fb:1c:e3:4d:c2:87:26:eb:68:
a8:da:88:a0:e6:d6:30:da:37:70:ac:a6:0f:8d:d4:d5:23:31:
08:a7:d6:b2:36:9d:1d:64:9c:53:28:b3:37:df:87:25:c5:09:
a4:e9:ec:df:f4:38:4a:32:83:71:b1:90:b3:52:9c:48:68:67:
a1:f8:c1:ae:72:5a:6a:65:ec:a8:e6:21:fc:d2:2e:9a:eb:de:
84:85:9c:cb:43:56:61:a4:33:17:22:cf:a9:41:7a:0e:6a:5a:
1e:fe:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:47 2025 by rpki-client