Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: OOtokz+y2rkBPic/Xf2/P7J5RlNiuQ33hRW8oUXQlDI=
Subject key identifier: 40:0F:5C:E6:55:E4:FA:AA:73:60:68:89:37:9A:E9:F3:76:D8:A2:5C
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 019A4DE1A6A7E43E87253D925696520FFCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0B5A
Signing time: Tue 04 Nov 2025 08:00:25 +0000
Manifest this update: Tue 04 Nov 2025 08:00:25 +0000
Manifest next update: Wed 05 Nov 2025 08:00:25 +0000
Files and hashes: 1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: WFYlFokSV2gxobhjwDfstG+J+pZEz2us8IgnDIAvZ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a6:a7:e4:3e:87:25:3d:92:56:96:52:0f:fc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Nov 4 08:00:25 2025 GMT
Not After : Nov 5 08:00:25 2025 GMT
Subject: CN=400f5ce655e4faaa73606889379ae9f376d8a25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:2d:50:5f:ae:a8:2b:fd:0b:82:84:8b:31:
f8:e6:89:5d:6b:ec:07:fd:f8:b8:ca:50:42:81:25:
64:5c:3d:93:05:09:a7:17:d6:00:fe:82:e0:dc:b5:
46:1d:dc:9d:04:9a:97:f4:af:c8:fa:7e:47:f0:0b:
f4:73:d5:cd:c4:ff:ee:3e:af:2a:25:ad:74:c9:61:
dd:af:ea:2b:1d:66:08:2e:f1:cc:f0:4c:88:de:1d:
eb:25:b7:72:8a:81:27:c8:c1:2f:cd:2c:cd:a9:9a:
da:63:c0:77:1c:5f:6a:c0:d7:ad:37:ed:82:ba:a4:
91:40:32:44:2f:24:ae:96:bd:04:a0:63:f1:3d:d3:
2e:8f:0c:ce:5f:85:96:89:1f:5e:0b:8c:98:85:e4:
ff:0c:5e:2f:9a:ac:22:4f:e6:e6:0a:d3:a1:5b:50:
ed:c7:7d:c1:54:07:0f:b7:74:73:3a:ad:e8:39:46:
70:af:72:5c:2b:6e:5d:04:eb:02:99:12:15:ae:d0:
24:57:e7:71:7f:e8:c6:dd:69:2b:ed:b3:50:6c:75:
06:73:ac:b4:f3:85:48:cb:a6:65:7d:cd:10:62:b9:
71:38:77:61:ff:e5:7b:ee:49:4c:80:14:6f:e8:1d:
7d:cc:d4:02:d6:ec:93:02:c3:5b:9f:77:84:f6:55:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0F:5C:E6:55:E4:FA:AA:73:60:68:89:37:9A:E9:F3:76:D8:A2:5C
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:91:0a:36:05:ba:5b:01:2e:e6:31:85:2c:96:23:c8:01:c8:
15:06:cc:a1:e7:32:5f:86:f4:5f:85:47:06:4a:f4:83:ff:8c:
f4:23:ec:28:18:bc:a9:69:00:32:f4:3a:c4:d5:1e:14:6a:6f:
34:f3:74:0e:03:e1:21:6f:41:89:ec:44:4d:00:78:4f:e9:24:
5b:b9:4f:74:c0:f9:37:a9:3b:c7:95:25:33:bb:8e:cd:e0:c5:
e9:0b:20:15:c2:23:80:31:b3:f3:09:0e:e3:20:58:a5:7c:be:
11:8b:6b:b7:97:ca:f2:61:1a:17:76:d8:0c:b0:dd:48:ef:f4:
bf:a7:84:f6:1f:d4:1b:52:c5:ad:93:c4:80:40:11:2b:39:88:
49:d7:0f:e9:4e:a5:02:2f:06:00:59:5f:de:1e:58:ad:85:61:
b1:34:33:f8:18:1b:14:a4:03:ff:b7:d9:39:44:08:9e:8c:a0:
43:ff:09:ca:df:03:ca:26:6b:38:e4:d7:29:76:fb:3d:90:6a:
63:c6:d0:c1:21:e4:11:cc:7e:af:d3:1a:5c:43:1a:9a:01:42:
c0:bb:56:a3:ee:87:2c:8f:88:6c:19:52:c4:50:b8:67:69:d0:
df:57:fa:9f:5b:4c:a8:aa:37:41:b2:24:44:d6:0b:e9:ec:0d:
1f:1f:9c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:39 2025 by rpki-client