Manifest
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
File: yqgF26w2R0m5sRVZCrbvD5cM29g.mft (raw, json)
Hash identifier: XSaoW4lCQHeo/m9qYtAAK24h0ietcPv4UqP5tg2hfd4=
Subject key identifier: CF:75:C7:49:EB:96:45:5C:6E:8F:F8:70:1B:EB:1F:96:4F:79:F1:B4
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 024D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
Manifest number: 02491D
Signing time: Tue 04 Nov 2025 09:20:04 +0000
Manifest this update: Tue 04 Nov 2025 09:20:03 +0000
Manifest next update: Tue 04 Nov 2025 15:20:03 +0000
Files and hashes: 1: 111wEGLfsrCC1YXvRd90Mcgv3so.roa (hash: aK/B7f1mLzo2P0di31RLAL/n8lybzDgTkqimo9ZZzzQ=)
2: D53F-thyu-FB_Q-Qnu54dMG6kUc.roa (hash: F5BasJ7cpf0y1kDUV2GhJ9A7f+WVJ9Tg97K4I87sONg=)
3: SDnJ5mezCjLuEx8ibUeI4qVoUpw.gbr (hash: Dh33tig5Tgg5x+zwGknTxUqLVhn4qAhDHuz7dInvOBw=)
4: XUJQ4tgdREjYop786R0p_wdeyeI.cer (hash: DrDVi/JiphSff/KUlYHrSjbrW1zgVdfqUcsc6Tdez74=)
5: euv64En05073B5-r95s2Uu_UwJg.roa (hash: XiuUZ8UmidXN8hBLSaaK/0y/A/0mIPPIW4YyRcs2pUg=)
6: voibVdC3Nzl9dcSfSFuFj6mK0R8.cer (hash: WwOEnrqRnDl0WwBdK6nhQGVkfYQQotE+5n1JMM/b8Bw=)
7: yqgF26w2R0m5sRVZCrbvD5cM29g.crl (hash: 1ksb9topAKV89mFJ4Baq32qSbyk3zqGFdfq2VoEAAXo=)
8: zIlYN-tDLuEj0BDwZSi5PS1eIDI.roa (hash: qLS98wDD6uBYR/1xGuHLGjRWrS9SRA1uwPUMSp/TaYE=)
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 15:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150901 (0x24d75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Nov 4 09:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=CF75C749EB96455C6E8FF8701BEB1F964F79F1B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:e7:56:e4:87:73:15:f5:a4:ce:2f:9f:82:
4d:05:06:8f:6d:ed:a7:7f:0f:18:17:92:fc:48:6f:
25:35:65:08:a6:60:1d:5e:b5:7f:d7:3a:cc:29:41:
ae:4f:9e:19:a1:13:13:26:a9:fa:09:1e:f6:63:6b:
b2:d7:32:e4:b0:fe:81:17:8f:c9:e7:a6:6d:fe:ec:
0d:44:60:51:6c:b3:c9:bf:ac:0f:e1:31:76:a0:2d:
42:08:a9:f7:31:fc:a7:21:ad:96:4f:6c:02:91:46:
80:3f:0a:43:de:37:dc:90:a1:c4:be:20:02:d1:5d:
50:e3:7e:02:15:98:a1:e3:cf:9a:fc:e8:31:ea:e4:
7e:8d:9c:c0:6f:5a:5c:cb:18:8a:c7:e3:b4:da:b5:
e3:9c:f5:e4:ee:40:f6:16:03:04:cb:0c:5b:cc:29:
39:d4:a3:4a:a7:8a:52:13:6e:72:05:f1:79:f5:80:
12:3d:1e:49:07:bb:ae:48:f2:49:7c:bf:7c:97:63:
0a:df:40:cd:34:0a:97:12:ba:27:85:1b:84:2c:99:
b5:34:07:88:91:2c:09:47:06:33:34:cf:15:1b:09:
36:7e:bf:97:92:95:8d:5e:b9:c1:50:1a:c0:05:a0:
87:8d:37:3c:13:42:18:2d:62:d6:26:40:64:a5:a2:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:C7:49:EB:96:45:5C:6E:8F:F8:70:1B:EB:1F:96:4F:79:F1:B4
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:9d:04:40:3d:82:55:b6:bc:64:45:8e:0b:eb:c4:25:95:2a:
5b:c6:71:fe:01:8a:3f:6d:2c:0c:24:c7:3a:c6:16:ff:09:10:
34:53:4c:93:dc:c2:c3:21:43:b5:3f:0a:57:77:0f:3f:90:19:
ed:65:c7:fb:5d:f6:2b:88:b3:42:90:da:54:ec:64:98:85:45:
4a:b4:2c:0e:2d:fb:f1:ac:fe:fc:81:55:1a:e5:12:a0:d3:0a:
e3:25:62:8a:86:fa:47:44:a4:d2:51:bf:71:33:1f:66:6d:e3:
26:e2:51:f4:0f:d0:6a:12:9b:73:f4:a9:f1:98:4d:46:bd:52:
05:1b:11:91:77:fe:d2:37:5a:75:a8:06:4d:c3:ed:ed:bb:93:
bb:2e:ca:f4:1d:5d:1f:2a:91:2f:c3:0d:20:f5:94:5a:66:21:
c2:2e:31:da:eb:bd:55:b4:93:46:f9:56:8c:68:5d:47:04:c6:
b7:4e:e7:47:94:72:a1:8f:7e:99:81:ce:89:09:b6:b1:35:af:
8f:cc:2d:18:17:48:39:99:b4:7c:40:37:ba:af:4c:35:52:e9:
23:b9:d6:52:dc:c7:61:4f:19:9a:c6:05:67:8c:b4:89:33:3d:
ea:66:3c:11:6a:d1:3c:42:29:8a:f1:85:cf:02:78:72:a9:4e:
eb:b9:89:c0
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIDAk11MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
YTgwNWRiYWMzNjQ3NDliOWIxMTU1OTBhYjZlZjBmOTcwY2RiZDgwHhcNMjUxMTA0
MDkyMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhDRjc1Qzc0OUVCOTY0
NTVDNkU4RkY4NzAxQkVCMUY5NjRGNzlGMUI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxebnVuSHcxX1pM4vn4JNBQaPbe2nfw8YF5L8SG8lNWUIpmAd
XrV/1zrMKUGuT54ZoRMTJqn6CR72Y2uy1zLksP6BF4/J56Zt/uwNRGBRbLPJv6wP
4TF2oC1CCKn3MfynIa2WT2wCkUaAPwpD3jfckKHEviAC0V1Q434CFZih48+a/Ogx
6uR+jZzAb1pcyxiKx+O02rXjnPXk7kD2FgMEywxbzCk51KNKp4pSE25yBfF59YAS
PR5JB7uuSPJJfL98l2MK30DNNAqXEronhRuELJm1NAeIkSwJRwYzNM8VGwk2fr+X
kpWNXrnBUBrABaCHjTc8E0IYLWLWJkBkpaIvawIDAQABo4IB5TCCAeEwHQYDVR0O
BBYEFM91x0nrlkVcbo/4cBvrH5ZPefG0MB8GA1UdIwQYMBaAFMqoBdusNkdJubEV
WQq27w+XDNvYMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZAYDVR0fBF0wWzBZ
oFegVYZTcnN5bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpv
YnNuaWpkZXJzL3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5jZXIw
DgYDVR0PAQH/BAQDAgeAMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5
bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpvYnNuaWpkZXJz
L3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5tZnQwFQYIKwYBBQUHAQgBAf8E
BjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQAXnQRAPYJVtrxkRY4L68QllSpbxnH+AYo/bSwMJMc6xhb/
CRA0U0yT3MLDIUO1PwpXdw8/kBntZcf7XfYriLNCkNpU7GSYhUVKtCwOLfvxrP78
gVUa5RKg0wrjJWKKhvpHRKTSUb9xMx9mbeMm4lH0D9BqEptz9KnxmE1GvVIFGxGR
d/7SN1p1qAZNw+3tu5O7Lsr0HV0fKpEvww0g9ZRaZiHCLjHa671VtJNG+VaMaF1H
BMa3TudHlHKhj36Zgc6JCbaxNa+PzC0YF0g5mbR8QDe6r0w1UukjudZS3MdhTxma
xgVnjLSJMz3qZjwRatE8QimK8YXPAnhyqU7ruYnA
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:42 2025 by rpki-client