Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier: hBSa5WB+6+dFiGn8T3Wm0t4dzq4P/IsXPo9OWe84UwU=
Subject key identifier: 95:16:5A:E4:35:A0:44:D3:09:0C:32:7A:E8:CC:BF:41:81:64:43:1C
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial: 019A4D3CB37BA0225C48FF1A866130146CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number: 04B2
Signing time: Tue 04 Nov 2025 05:00:14 +0000
Manifest this update: Tue 04 Nov 2025 05:00:14 +0000
Manifest next update: Wed 05 Nov 2025 05:00:14 +0000
Files and hashes: 1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=)
2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: b9Kl7Va8YM520ZaT2sWBSEjotGU+ORQ1Csk4SsVe8zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b3:7b:a0:22:5c:48:ff:1a:86:61:30:14:6c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Validity
Not Before: Nov 4 05:00:14 2025 GMT
Not After : Nov 5 05:00:14 2025 GMT
Subject: CN=95165ae435a044d3090c327ae8ccbf418164431c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:5a:80:f7:e8:11:7b:39:4e:63:87:e5:6a:
42:60:9b:9a:bc:49:c9:2c:34:f0:0c:e2:d2:c4:ff:
fd:a2:ac:c9:9d:57:fe:a3:69:b0:49:18:44:71:c7:
99:03:6c:70:b7:b3:71:61:0d:04:1c:9f:80:8e:7b:
0b:16:66:ed:9d:fc:f2:5b:1e:8c:0f:92:41:72:21:
e0:ae:ff:e2:fb:d5:eb:a8:1f:07:0e:31:4d:71:aa:
87:98:a8:0d:a2:b5:fa:26:7f:66:fc:b7:db:06:93:
5e:f3:b5:f8:03:44:eb:09:b5:5c:99:11:e5:ae:11:
fd:7e:d2:3c:72:92:59:75:05:72:66:a2:3e:b8:1a:
99:d2:94:b7:e0:9c:54:96:40:2e:0a:f8:93:cf:3d:
03:cc:b4:25:36:df:8d:cb:b8:e8:69:d4:76:3d:23:
00:41:84:47:eb:92:7c:fb:9e:39:d9:a6:1d:f5:22:
9a:f0:a6:19:6c:7b:59:c1:6f:d4:a8:04:d9:55:18:
03:d7:22:4c:2e:1a:82:96:98:c1:d3:60:26:e3:42:
b2:b1:f2:f1:10:01:6a:e1:ed:19:0f:e3:a3:c5:da:
b3:48:a2:a0:c0:4b:cb:54:d6:6a:46:5e:cf:b8:4c:
38:b3:e7:1a:58:53:2a:bf:7b:a5:01:0c:ee:01:92:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:5A:E4:35:A0:44:D3:09:0C:32:7A:E8:CC:BF:41:81:64:43:1C
X509v3 Authority Key Identifier:
keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e3:b4:00:39:05:bd:41:fa:c3:49:d8:3e:5c:a9:76:3b:e7:
cf:2d:aa:da:bc:8f:55:99:d4:d2:46:5b:6d:8a:44:fc:c6:a7:
68:41:00:1a:49:0c:b6:72:a8:1d:d2:17:a1:9d:b3:ee:b0:6f:
e8:0d:a2:a1:e8:91:a9:11:98:42:09:ab:75:23:7f:dc:53:47:
69:9a:da:85:62:27:02:ff:0f:b7:de:41:fd:d4:0c:49:2d:e7:
b4:f1:0e:56:e2:f9:3b:cd:76:af:6f:f6:0e:c7:8e:4a:23:ee:
b3:75:b7:29:8e:2c:3e:91:ef:f4:2b:a5:34:e6:97:ab:20:0b:
b1:a3:0c:78:2d:b7:6c:7a:f7:41:4b:76:31:2f:90:0f:eb:45:
c6:a7:fb:90:aa:88:52:b7:d0:46:87:76:c4:c5:1a:12:2b:25:
1b:ee:54:43:8c:44:e8:dc:ef:8e:d6:26:f7:7c:06:69:9a:e2:
9d:e0:c5:32:b1:a2:65:0b:29:7d:66:56:db:42:fb:e0:3f:61:
ef:91:22:8b:d9:ff:9a:b8:65:3b:3a:18:29:3a:b7:f9:5d:18:
90:24:97:56:86:74:62:dd:44:13:ee:66:a2:ba:35:b0:0a:13:
3a:17:e7:e1:12:71:44:76:72:c0:f4:14:a2:14:aa:76:f0:3b:
6d:dc:15:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:44 2025 by rpki-client