Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: 2bB/9gkiY/EbFPgjCKwlBrf/Jt2fVrlm00xcwYY573o=
Subject key identifier: BF:51:79:9C:AE:16:D7:84:46:64:B2:49:91:2D:D3:4A:AC:3A:15:72
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 019A4E4FE9519B60A6BBB43BC4E5FB7F306B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 0AFA
Signing time: Tue 04 Nov 2025 10:00:51 +0000
Manifest this update: Tue 04 Nov 2025 10:00:51 +0000
Manifest next update: Wed 05 Nov 2025 10:00:51 +0000
Files and hashes: 1: Mo_PTp1RnKkJnXxtlC7OWx0YSxQ.roa (hash: YFv4cH8jBfWT6Q+LN0D+DWnRT7DQ1QH3WQI1NP0LJho=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: GutM//mEDc07690EMrfWi2671svKkyG4o3ZHCR7gWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e9:51:9b:60:a6:bb:b4:3b:c4:e5:fb:7f:30:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Nov 4 10:00:51 2025 GMT
Not After : Nov 5 10:00:51 2025 GMT
Subject: CN=bf51799cae16d7844664b249912dd34aac3a1572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:2e:9c:02:5a:58:23:08:6f:c5:bc:f9:be:
7d:41:87:8d:2e:48:31:0a:d9:6f:db:69:93:a1:b4:
6c:3c:dd:80:62:4a:cf:89:05:1d:24:29:e7:d8:6c:
09:e4:59:30:74:a6:df:fa:0f:44:03:c2:38:84:af:
60:d8:cb:91:67:1b:85:6e:e4:e6:ae:75:ce:1d:6b:
fc:ce:55:37:0c:a6:48:39:1c:47:ef:02:d7:79:9f:
d7:9e:0c:22:9d:82:4d:9a:38:74:99:c7:82:59:8b:
95:65:26:5f:4b:71:eb:ed:75:7e:93:e7:23:c3:8f:
e3:96:5e:7e:34:7a:d2:2f:b3:40:18:cb:f6:97:7d:
b0:68:56:62:5a:b0:a4:52:46:d5:5e:e4:74:66:c8:
f0:96:e1:94:68:31:dd:59:24:3b:69:db:5f:78:9e:
7e:60:41:f9:81:da:0a:0e:d2:fb:5f:15:ee:ef:f5:
4d:75:64:97:ec:53:6b:e8:4d:b4:3c:f6:7e:9b:65:
6d:e9:a8:d1:da:43:b3:3d:ec:da:b1:7f:3e:78:96:
c0:85:3c:2c:70:95:dd:ba:8d:26:03:40:f9:c0:98:
42:67:be:e4:8e:9e:d5:12:8f:3f:ed:53:d5:33:e8:
96:7b:fd:1f:5f:c6:86:b0:c1:2c:cc:61:47:eb:47:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:51:79:9C:AE:16:D7:84:46:64:B2:49:91:2D:D3:4A:AC:3A:15:72
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:86:3c:21:77:44:45:4a:eb:43:21:c4:78:7c:10:3b:da:42:
7f:37:9f:52:4a:8e:ea:6f:4c:06:b8:da:bc:c5:47:ab:45:20:
47:c5:b9:f9:e1:b8:ec:30:91:7c:7a:2a:9b:a6:62:2c:bb:dd:
f2:25:12:b4:a9:9d:55:a8:a2:7f:76:3a:f3:9e:b7:a2:a5:06:
fd:92:10:e4:98:43:0a:60:17:66:f7:43:25:f3:2e:07:30:1c:
e8:49:a3:a7:ea:ac:6d:03:c5:e8:28:97:1e:7b:ab:c3:78:4e:
78:d9:58:1e:92:84:fd:ef:1c:b8:7a:ac:18:42:16:6f:39:b7:
05:fd:8a:85:ae:c3:4e:45:a8:bb:ce:d7:dd:ed:ce:a6:b7:ac:
2f:37:e9:24:c1:68:68:b0:e9:12:5b:02:92:da:93:ef:ed:f3:
f7:d5:8a:25:88:a4:a9:68:62:88:ba:cc:2c:8a:41:00:fb:6d:
72:72:11:68:52:23:e1:27:54:04:49:c7:ae:40:76:45:80:7e:
66:7a:99:cc:0c:0c:91:7a:0d:04:02:98:f7:f7:f9:cb:7c:41:
30:cd:11:ab:3b:85:44:6d:11:00:34:ec:74:0d:83:46:e1:c9:
cf:1a:e0:ac:78:c2:39:85:b8:29:1f:20:ea:c7:e1:59:c9:c3:
37:20:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:26 2025 by rpki-client