Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: vkw8AqmYGq3N5Ywii1herwggbTu7Ix6ZDqLdssbSRcI=
Subject key identifier: 3F:F7:AE:F5:76:BE:9B:E1:98:FA:88:01:E7:E6:FE:80:ED:B4:AD:F3
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 019A500716C020843D26D8D478788FC74AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 06B0
Signing time: Tue 04 Nov 2025 18:00:33 +0000
Manifest this update: Tue 04 Nov 2025 18:00:33 +0000
Manifest next update: Wed 05 Nov 2025 18:00:33 +0000
Files and hashes: 1: Jsgd2QMS4v8iKbqKY7mpL6rgdrw.roa (hash: zUKbiJyZKBDLVjXxF3gSP5G2WQgNlz6YzfL6risxYY8=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: r2cQJXbaw3W2CjaR8QGHIDQXVUOh4KtHll6ouzO4sSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:16:c0:20:84:3d:26:d8:d4:78:78:8f:c7:4a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Nov 4 18:00:33 2025 GMT
Not After : Nov 5 18:00:33 2025 GMT
Subject: CN=3ff7aef576be9be198fa8801e7e6fe80edb4adf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:26:f5:df:6f:bc:ba:83:e5:2b:b7:d4:dd:a8:
2f:b0:58:89:9b:3f:f1:80:04:bb:76:4b:e5:7c:6c:
2c:00:08:c4:1a:fb:90:94:70:ae:fc:0d:e3:df:23:
48:0f:f1:33:89:f4:61:26:a4:90:39:47:9d:51:5e:
17:f4:21:a7:93:e6:83:23:d9:3d:69:8e:18:44:96:
4c:da:ce:8e:d3:89:b4:50:10:9a:e9:02:db:df:84:
ee:b6:4b:c5:85:6c:64:fd:d7:c0:b7:58:45:2e:4c:
de:08:a1:6b:66:73:27:93:4d:fc:6d:d6:3a:60:e0:
7b:ed:b9:b6:86:ac:01:f1:7f:08:74:5f:3d:ac:10:
5d:fc:b5:2c:8a:99:c6:f2:b0:a0:06:48:22:a4:b6:
4c:a6:f1:50:f6:a6:78:61:f6:9d:ae:5a:2c:d9:89:
d3:c5:da:9e:1b:03:f7:5f:23:a5:3f:36:e4:ab:5b:
70:8f:dc:b0:b9:b0:3e:ac:5d:76:dc:f2:19:34:ee:
f1:50:ea:9a:f7:ac:1f:74:ea:02:ce:7c:97:3b:4f:
ed:14:18:62:11:b6:13:99:f9:35:1c:fd:a4:4c:7b:
68:82:19:ff:8f:e3:d9:d5:1b:5c:5f:0f:69:f8:b9:
22:74:3a:46:91:59:dc:0f:74:b3:22:fb:0c:2f:e1:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F7:AE:F5:76:BE:9B:E1:98:FA:88:01:E7:E6:FE:80:ED:B4:AD:F3
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:84:69:c5:ff:db:dd:67:fc:76:fb:7a:e1:e6:42:c8:be:df:
fc:64:d1:74:08:92:50:02:38:de:8e:fa:e8:7e:4a:38:43:ef:
2c:22:51:e7:ea:00:24:69:48:fa:4e:38:e0:4c:bc:1b:0a:2d:
23:a3:ff:47:29:b5:fb:06:ec:3e:b3:0c:cb:ae:7b:6e:34:ff:
d2:d8:ed:97:90:d8:17:77:e9:86:59:17:26:d8:ce:96:c8:6f:
c9:96:3b:01:57:73:e7:2b:4e:d9:81:ce:dc:e4:6f:f8:41:22:
8c:9a:18:cb:0c:4e:79:23:bb:28:23:f9:f6:f7:38:e6:f8:95:
bf:27:90:50:f9:ec:60:a1:83:62:f5:52:1b:d1:84:d9:32:3c:
8b:fe:df:11:83:50:8a:91:17:77:65:5d:22:5a:06:9b:be:d3:
63:51:9f:2f:95:21:32:4b:93:9b:c7:a3:84:d0:76:43:c5:05:
ef:df:96:01:f9:9b:67:af:25:75:07:5c:f1:4c:c8:08:cd:58:
54:83:e9:d7:fa:af:3f:eb:a8:4d:e0:9b:a4:e6:70:57:16:05:
b8:e4:3e:1a:96:f5:a8:fd:6f:10:cd:d6:e1:88:8d:8d:64:b4:
1d:c0:d7:58:fa:e0:ad:f2:23:a9:7b:b6:b4:d6:8e:4e:aa:7f:
fc:7c:8c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:43 2025 by rpki-client