Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File: yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier: lHGoBimYvhaszK0k445dcD4jRS3tjBVCjt7/ZVdwq+I=
Subject key identifier: C4:83:15:58:04:23:4E:CD:C2:E7:55:ED:9E:55:5F:C2:7F:88:FE:A0
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 019A4F2AFDAD73FA593C747B76B07F8C313A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number: 1517
Signing time: Tue 04 Nov 2025 14:00:08 +0000
Manifest this update: Tue 04 Nov 2025 14:00:08 +0000
Manifest next update: Wed 05 Nov 2025 14:00:08 +0000
Files and hashes: 1: 3dzOq8G9IRlpRN6VYAesJxFCM9I.roa (hash: pZlE7f/kxQT336UtrvzPnURvz6UI7VQoJaImOOVWpDM=)
2: JJmF9idPFAXWWPX9AjfEMsS8Ozk.roa (hash: Z6lxpjHZf+bFBTA5z2r8BCssBYWOfAe+nD+SW+UaYNE=)
3: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (hash: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=)
4: _RcJWBC9z2DoyJEEVJqiJ3iNmSY.roa (hash: shwbQcS4UjqPIXlBcN1Jjj6/KYNyV5tzzIShWjZk6kQ=)
5: nuCFwAqyzaBDOFqPTOr9WxwYvF0.roa (hash: s0EEOYTzU+K4DwXB/HLNvSrguhiOGINJ5MGi2FWEkwk=)
6: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: cIgO20YUpbtBYIk2BKfcjLRwi0297Mpa0qsBvFWmqMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:fd:ad:73:fa:59:3c:74:7b:76:b0:7f:8c:31:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Nov 4 14:00:08 2025 GMT
Not After : Nov 5 14:00:08 2025 GMT
Subject: CN=c483155804234ecdc2e755ed9e555fc27f88fea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:5e:e8:e6:45:03:54:e9:d1:ef:f3:cb:b5:
55:0f:cf:16:50:cb:60:5c:73:6f:f3:43:2a:47:60:
e3:5c:5b:ba:dc:5f:8d:4d:2a:19:fd:53:d3:1e:b4:
4a:07:e6:98:5d:2b:c6:72:54:b8:95:33:84:c2:a9:
94:36:5b:4a:a3:67:e2:c4:43:81:bd:13:d1:5f:b7:
bd:4f:7f:39:c4:18:67:ae:56:65:ca:04:04:ae:cb:
25:56:e4:59:72:35:c8:ae:15:40:03:3b:ba:78:24:
a5:31:ef:9c:22:f6:d3:eb:f0:9e:a1:aa:52:b1:4c:
90:71:34:c9:09:b3:f2:8a:67:28:e3:75:06:40:80:
24:a8:f6:24:5d:3b:4b:0b:da:c3:0f:59:68:d2:c8:
34:ce:88:6d:29:50:ee:ff:e2:99:c5:1a:77:d4:a6:
f4:83:3d:37:21:fc:03:74:1d:cd:a3:b5:51:3b:59:
cb:87:6a:1e:53:20:c4:bd:a1:36:c4:55:86:45:ad:
40:19:d7:e6:bb:fc:42:c2:d2:21:7b:0b:64:8a:ad:
76:78:4d:8c:09:9c:12:33:f5:db:d0:41:f6:df:e3:
61:50:11:41:99:4b:10:db:e0:36:a6:83:fe:82:ee:
1a:1c:b3:12:25:c3:16:be:09:aa:17:29:ca:da:72:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:15:58:04:23:4E:CD:C2:E7:55:ED:9E:55:5F:C2:7F:88:FE:A0
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:54:80:3a:1a:cd:95:bb:ec:2e:17:ec:ea:df:5b:6f:32:cd:
0a:68:d3:49:1c:c2:b8:c9:ee:fd:06:ef:95:b5:38:5e:67:21:
ff:66:0d:bf:7d:7f:c3:8a:c7:25:83:73:91:eb:85:19:0f:e0:
93:11:19:83:5c:d3:e6:78:fa:e5:e9:3a:01:1d:e7:f0:02:2d:
1f:8c:4d:10:dd:d7:1e:32:de:2f:dc:a8:e5:10:81:5c:70:c2:
7a:ec:e5:21:17:0b:90:4f:6c:db:e9:1f:e1:31:bc:01:83:49:
75:1d:c0:92:3d:a6:3c:98:a0:a7:6b:70:d7:83:84:a7:46:db:
a0:b6:7f:f6:19:16:2d:07:ab:34:fc:2d:18:e5:ed:b5:d0:75:
31:5d:4e:65:1d:f3:97:a6:37:f4:a1:3d:b6:bd:9c:f0:8b:4a:
07:a2:96:6b:d5:94:da:c8:c5:d9:ee:bc:e9:c8:06:d9:61:2a:
48:6d:2d:0e:69:98:6f:ac:f2:7a:24:5c:f7:c5:15:ba:63:39:
d2:8c:0f:62:76:48:43:e4:bb:04:f3:11:64:51:87:4f:8b:df:
73:43:be:6c:be:78:f1:65:bf:d4:1b:0b:6a:bb:96:50:b4:9b:
1f:aa:58:54:4a:59:7f:df:57:7b:6f:af:1f:44:6e:42:fa:b2:
bb:1d:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:55 2025 by rpki-client