Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: wHcCLwN05KW8CjVOnKa+ZS/pQpVQrjyMXMTEn8RtT2M=
Subject key identifier: 4C:C5:99:38:25:D5:67:4D:9B:E3:96:4A:49:0E:92:59:E6:C2:F7:6D
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019A4DE1C0B77F5C5C3E65F8AEC7844AB23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 075D
Signing time: Tue 04 Nov 2025 08:00:31 +0000
Manifest this update: Tue 04 Nov 2025 08:00:31 +0000
Manifest next update: Wed 05 Nov 2025 08:00:31 +0000
Files and hashes: 1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=)
2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: l9dbQRCE0J9+LMOrNT7kmFlIPs0bHacAXGCt8g4i7Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c0:b7:7f:5c:5c:3e:65:f8:ae:c7:84:4a:b2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Nov 4 08:00:31 2025 GMT
Not After : Nov 5 08:00:31 2025 GMT
Subject: CN=4cc5993825d5674d9be3964a490e9259e6c2f76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:2c:7f:aa:4a:74:c2:4a:75:cf:19:d2:ee:
e8:43:be:ac:e9:11:76:a8:6a:38:bd:da:94:dc:bc:
a9:b7:8b:72:94:9d:2d:27:32:d1:f5:01:33:77:2d:
cc:db:cc:2f:a7:49:56:30:a8:65:98:8d:0d:04:6f:
e8:8d:6a:bd:02:27:64:76:9d:15:35:35:55:bb:68:
1e:09:0a:15:16:e9:ef:89:c5:fd:f9:2a:d7:d5:1f:
57:fc:4d:e7:2f:2d:ee:0d:9f:d9:d4:99:d0:d8:02:
a7:d8:cf:8a:c7:0b:3a:ab:7b:f3:6d:52:23:29:ae:
96:c5:58:11:05:44:02:e3:37:66:4e:28:64:50:b8:
8a:55:00:e1:e8:57:27:52:93:17:69:fe:60:8a:88:
5d:45:ec:ac:21:77:12:54:18:57:27:68:c8:7c:0f:
a3:f2:4b:3c:9c:e6:66:7e:1b:e7:6d:c2:1e:25:4e:
b4:1b:86:16:82:7f:1f:2c:11:21:46:9a:d9:ad:b9:
bc:cc:dd:23:10:fe:fe:a9:d0:dd:e3:94:42:e5:b6:
4e:27:95:93:9e:21:18:27:5d:a1:77:48:95:45:fb:
16:cf:6d:fd:48:b1:07:06:1d:a5:d6:47:5b:3f:32:
8b:3a:4f:48:6b:5e:db:12:ad:a5:b2:6e:5e:de:1b:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C5:99:38:25:D5:67:4D:9B:E3:96:4A:49:0E:92:59:E6:C2:F7:6D
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:63:d0:33:29:81:7a:ad:5f:66:c2:97:bd:b7:3e:f9:c5:18:
a5:e1:93:9f:22:89:b3:e8:d4:53:cf:1b:03:43:33:c1:89:92:
b9:c7:c3:c9:60:cc:6c:07:5f:f8:9c:b2:3d:d9:4b:02:2d:81:
6c:ed:ab:4c:47:12:56:01:42:08:6f:e0:b2:b7:a5:94:98:e9:
e4:5d:66:a5:94:c5:f9:5f:93:16:bc:50:c0:b0:55:1c:67:86:
c9:af:ed:0e:b9:43:1c:de:93:19:5d:b3:72:b9:47:eb:b0:b8:
46:50:44:95:b0:84:27:b6:58:d4:23:60:bd:8d:f8:0a:5e:4f:
f3:56:78:96:86:7b:42:2e:8a:b7:d7:da:89:f1:e1:e7:c0:c8:
78:8d:d3:82:0f:2b:e0:ca:2a:09:9f:56:d4:9f:a2:b9:34:93:
dc:71:9d:d8:16:31:ed:06:e1:47:49:8f:a1:e4:72:25:ca:e4:
d5:0b:b4:df:55:78:45:88:bb:31:6e:42:77:ba:35:eb:d4:77:
b9:b5:01:ee:7e:e6:f5:60:ad:ea:45:62:81:bb:0b:4d:bc:05:
12:95:bc:a1:dd:03:c4:cc:ac:2a:ed:bf:d9:8b:10:02:da:dc:
00:33:3c:ac:73:d3:1d:d3:02:47:6d:98:33:7c:27:d3:e7:5a:
a9:00:a4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:24 2025 by rpki-client