Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: onpsQSGuIWpoAG75fxWiTvmVfpheZIa/OemFVvJCoGA=
Subject key identifier: DA:2F:E4:92:A8:B9:6E:3B:D6:01:6D:EB:63:4E:79:E8:B5:6C:56:32
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 019A4D3CB79AD27BB058AB36AD502173584D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 0762
Signing time: Tue 04 Nov 2025 05:00:16 +0000
Manifest this update: Tue 04 Nov 2025 05:00:16 +0000
Manifest next update: Wed 05 Nov 2025 05:00:16 +0000
Files and hashes: 1: d6sgkQbNQYkqYXcedUvxxcDi_RY.roa (hash: qNUbQpwyqYmbMOUJJoCyiXY3LQNxqUvVSzT1Kq6z0rI=)
2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: dDyAbIltBNzkE3vKnS1r6owBpjf+Liq1OKFmYNCXUzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b7:9a:d2:7b:b0:58:ab:36:ad:50:21:73:58:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Nov 4 05:00:16 2025 GMT
Not After : Nov 5 05:00:16 2025 GMT
Subject: CN=da2fe492a8b96e3bd6016deb634e79e8b56c5632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:dc:8d:e7:b8:71:4f:43:a1:2a:de:9f:eb:
12:91:9c:26:fb:ba:e5:45:99:ed:a2:c3:9b:98:5f:
bd:a0:e8:e5:54:6f:9f:29:d7:01:97:e6:6e:61:ac:
6d:58:31:24:e5:3b:03:df:10:2c:a5:62:cc:41:e6:
45:63:49:d1:92:60:3b:5f:6a:97:44:04:a2:a1:06:
81:55:2d:c7:75:b7:07:b7:a4:f3:1c:00:e2:77:3e:
1a:64:47:8b:1f:d8:c2:98:2b:77:a5:23:eb:01:05:
ef:7d:b6:a8:cd:86:a3:8b:aa:9d:70:44:bf:33:63:
86:a8:97:59:7c:17:db:67:63:69:60:19:a6:f7:23:
b1:d1:69:14:0b:f4:31:74:db:ad:ab:54:10:d5:11:
fd:07:5f:90:d9:85:66:01:99:36:01:50:24:08:2b:
87:a7:7b:86:fc:04:44:59:58:79:7f:d6:7f:9b:53:
16:1c:71:dd:17:f2:fd:ce:8a:f4:02:74:69:3c:95:
f4:00:90:76:12:b6:90:0d:c0:e7:0c:4d:93:09:89:
b5:83:fe:56:ca:41:11:8f:28:8f:56:ca:2f:1b:96:
8c:c5:13:81:15:ed:be:45:bf:61:e3:aa:6e:e0:84:
5e:03:72:78:82:a5:76:77:79:f5:d4:ea:0c:57:ec:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2F:E4:92:A8:B9:6E:3B:D6:01:6D:EB:63:4E:79:E8:B5:6C:56:32
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:bb:13:dc:1a:51:69:65:45:40:33:83:6f:68:21:a7:32:95:
05:1e:b4:f7:78:9c:f7:09:ac:25:ee:36:7e:b6:ca:f4:66:d1:
19:4a:2a:53:aa:8d:21:e2:eb:0d:9f:a4:94:83:7a:f4:46:68:
51:33:ad:d5:b3:95:ce:29:df:20:d7:06:73:c2:d3:75:5f:30:
41:dd:9f:e7:32:f6:be:c2:ec:3c:a9:92:7d:82:ea:78:89:fa:
c1:01:d6:72:ec:65:10:e2:e4:50:cd:d6:64:67:a9:3b:97:7f:
89:b3:15:b5:7d:13:e5:f7:47:56:ff:fb:00:cf:48:09:c5:e7:
8e:bd:c5:cb:66:05:47:31:0b:9d:56:f0:fa:f7:e8:63:1b:72:
42:c9:45:53:d5:d6:e4:04:b3:a0:dc:fa:ce:bb:87:b5:9b:52:
6d:54:56:68:5e:1e:be:c5:f7:a9:8d:6e:a7:2d:bc:c0:37:be:
a5:14:de:a7:5c:c1:4e:90:06:23:8f:92:7f:4e:61:56:88:7c:
da:39:d3:43:ab:c7:8d:46:df:ed:4f:f6:eb:2d:35:4a:b8:48:
79:5a:11:66:e1:f9:97:48:86:69:b9:d0:d5:40:70:c6:0b:f4:
7c:e7:3b:03:a2:03:15:65:61:e9:e7:52:41:b9:5c:4a:be:33:
bd:95:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:39 2025 by rpki-client