Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: TgJffmAmMTF2+Glpbn3dAAOGc3Vkelr2wM5OuHrSHNY=
Subject key identifier: CA:BA:F6:E4:19:8C:61:C5:76:05:C1:0D:20:35:12:6B:C3:2D:AB:1B
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019A4EBD39C0743306F7B6B87FD95E05C37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0AA0
Signing time: Tue 04 Nov 2025 12:00:15 +0000
Manifest this update: Tue 04 Nov 2025 12:00:15 +0000
Manifest next update: Wed 05 Nov 2025 12:00:15 +0000
Files and hashes: 1: 9-Jf83x4olz8Hfew1s_UNi3V90k.roa (hash: IKeSXJFCHy882FUnOTCs1ATh13Yeq7epWPgTRQh0CZE=)
2: ECPnWkDMI2_nTmbCZhDYVWDmDx4.roa (hash: Lpl7m/eZhYRN7DnJNG4Sw0QJsO8hvbMn/hQYBg/ViaI=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: 4kUhSNDuFG2UqhP1dkhcBBKUd7YSI6t5zfPgbaiU4e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:39:c0:74:33:06:f7:b6:b8:7f:d9:5e:05:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Nov 4 12:00:15 2025 GMT
Not After : Nov 5 12:00:15 2025 GMT
Subject: CN=cabaf6e4198c61c57605c10d2035126bc32dab1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e5:6b:0f:46:b2:e3:88:1d:89:e9:89:c9:b5:
04:5a:94:3e:07:7e:06:fb:74:ef:d2:7f:23:51:bf:
a9:3b:75:82:64:e7:1e:76:06:a7:71:df:6e:38:45:
87:45:d8:ae:e4:24:f6:b1:42:ff:40:5d:fd:33:4b:
ad:19:64:c7:43:68:79:f1:02:b0:dc:b2:4f:41:87:
d4:87:24:0c:70:ff:e7:09:04:67:03:02:38:40:70:
6d:89:6b:18:9b:4d:b7:ae:bf:40:8c:83:18:21:81:
01:8b:de:94:b6:c1:a3:97:22:d9:ef:f2:80:82:c9:
8c:e5:bb:67:49:8b:e2:1f:0c:da:1a:6c:5a:80:d2:
20:48:eb:0f:fe:c6:9c:01:91:c2:26:46:70:f6:c5:
26:98:82:ad:38:40:18:da:90:cc:a3:3f:43:ce:25:
4b:ae:19:c8:14:8d:16:79:cc:a7:67:86:71:eb:e8:
24:a5:74:de:2f:27:6a:67:09:cf:f4:50:ee:fa:e7:
82:64:b9:cb:40:9f:11:ee:fc:dd:49:5d:2d:e6:83:
1f:05:17:6d:d4:a3:c3:08:03:50:0a:8a:65:ac:1a:
16:af:3e:d4:f9:72:d8:ca:78:cd:ed:f7:91:7d:99:
22:3b:cf:da:d0:35:8b:85:bc:16:03:22:cf:3b:50:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BA:F6:E4:19:8C:61:C5:76:05:C1:0D:20:35:12:6B:C3:2D:AB:1B
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a4:66:bc:64:40:52:8b:56:4f:c9:3e:f3:e3:54:70:36:86:
b9:2d:1e:2f:47:94:b4:90:8f:de:6e:b0:50:42:e2:6a:d3:61:
7a:24:75:37:32:ca:56:f4:6a:c1:86:ed:55:0c:0e:99:49:ae:
39:83:2d:14:39:e7:31:da:ad:8a:09:6d:86:28:00:61:e8:dd:
5e:ec:53:65:55:03:ad:5f:b5:9a:d1:3b:f6:b3:d9:6c:ea:19:
7b:19:ce:48:46:06:0b:5a:7c:11:ab:df:c5:8d:64:cf:68:c1:
9e:02:c2:09:d9:10:b5:60:29:c6:94:4d:bf:f2:0b:58:82:26:
c0:9c:4a:b9:d0:c6:6f:fc:90:49:d6:d5:d6:c4:c9:3c:57:b7:
33:16:cb:ac:28:62:7d:af:e2:4b:d3:e1:d3:a5:e1:51:9c:39:
6b:ab:e0:ab:9d:f5:6e:42:a4:b2:12:3b:7b:31:39:b3:9c:f3:
9c:86:55:f5:58:fd:86:c4:59:15:5c:b6:6d:4e:02:90:21:eb:
7e:e0:2a:0e:b9:d9:59:ec:ff:2e:95:f2:95:6f:b0:53:ec:c8:
22:ce:24:ea:57:e8:f2:ab:ce:26:af:dd:50:08:09:c6:b7:d4:
f6:ba:a9:cd:d0:24:2a:f2:18:14:36:7f:c1:22:50:93:4c:06:
02:a6:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:44 2025 by rpki-client