Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
File: yABBYZAh42MorViY6Jl4cEa48Pk.mft (raw, json)
Hash identifier: QwT5KieoCaHGp3CnMy8KGZ8sF8lDGPvImY75xHfT79s=
Subject key identifier: 76:FB:85:04:B4:58:37:E3:CE:31:51:B1:BD:98:74:85:77:85:51:DE
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial: 019A4EF5746E5742ACEFCCC8868ABFB295B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
Manifest number: 079C
Signing time: Tue 04 Nov 2025 13:01:40 +0000
Manifest this update: Tue 04 Nov 2025 13:01:40 +0000
Manifest next update: Wed 05 Nov 2025 13:01:40 +0000
Files and hashes: 1: Mok6_FqiiR5wYGEWZBTs8xeaVoQ.roa (hash: FbjTDRIPu8bBy/5KLYHNgVHrWy/v2L+xeWuUUm4Xmek=)
2: yABBYZAh42MorViY6Jl4cEa48Pk.crl (hash: kPnSCsznudbARFlZa/NeQ+ZXHpmAy7Du2wVe1QA2oW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:74:6e:57:42:ac:ef:cc:c8:86:8a:bf:b2:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
Validity
Not Before: Nov 4 13:01:40 2025 GMT
Not After : Nov 5 13:01:40 2025 GMT
Subject: CN=76fb8504b45837e3ce3151b1bd987485778551de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:2f:59:e2:78:39:e6:57:5d:77:88:f7:c7:
a5:89:15:c3:e7:f0:ac:2d:11:f4:68:b7:e9:1b:74:
48:5a:27:45:79:b0:ec:d2:a1:4b:fb:4d:e9:db:91:
f3:92:b2:00:ec:38:6a:92:2c:ac:ad:0f:95:09:66:
da:18:78:39:da:55:31:41:c3:c4:4d:0f:88:8d:b1:
ff:da:af:a6:40:f8:a6:33:49:a1:3e:b1:13:c4:90:
dd:9b:69:18:09:ae:2c:64:44:70:a9:ed:56:36:e9:
b5:dc:52:c4:4b:95:22:e7:a2:f9:1b:99:24:42:3e:
d1:ca:b9:62:c0:54:ad:d4:d9:b9:6d:d6:d8:b4:9a:
aa:59:d8:72:c3:77:bc:44:00:37:cd:bd:5e:64:d4:
b3:7d:52:85:79:72:72:e1:78:63:ab:d8:fe:f9:36:
3e:44:20:07:cc:9e:a1:38:a0:74:db:6c:ac:5b:e3:
f7:6b:1d:de:85:27:3e:37:79:1c:5a:84:41:20:58:
ba:df:7f:24:3b:f1:e3:5c:2c:8d:a1:ce:46:de:5e:
4c:0e:87:9d:17:cf:07:eb:02:b6:4e:4b:7c:22:4e:
21:71:7f:6a:09:d3:88:07:24:25:89:aa:95:6b:44:
cf:ad:a3:e8:ff:ec:25:43:ab:27:f0:22:82:43:74:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FB:85:04:B4:58:37:E3:CE:31:51:B1:BD:98:74:85:77:85:51:DE
X509v3 Authority Key Identifier:
keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fd:46:1b:b6:8d:d4:b6:f0:21:d1:5e:92:4a:15:07:69:c3:
b5:96:e5:ad:b3:78:ff:8d:32:33:47:5b:7c:6f:53:95:c7:0d:
13:8a:da:29:23:cc:ba:5f:3f:59:e1:e6:fa:3d:13:24:57:f5:
ae:89:6b:c8:fb:2e:f8:cb:3b:7e:2e:aa:0b:04:ef:48:57:95:
2b:a6:74:97:7c:13:e4:d4:4b:48:f6:ad:23:47:40:6c:3f:27:
ad:a7:f9:66:33:fd:f4:87:c9:bb:65:8b:1d:cc:5a:94:6c:23:
2c:21:ac:7f:02:f0:c7:46:f1:a3:32:67:a4:56:f6:70:71:2e:
fd:c9:c8:27:83:a3:ff:60:e1:8e:a8:17:04:8e:64:80:65:7f:
58:37:31:55:a5:d5:0a:a2:21:5b:6c:8f:72:53:9f:08:db:20:
c4:3e:cc:49:48:72:8a:29:33:93:40:5f:96:53:1b:c1:46:aa:
4a:51:04:8a:b6:33:c4:51:85:34:50:82:df:83:52:73:e3:ec:
93:d8:41:0c:cf:60:20:19:96:7c:47:1e:87:b1:08:8a:09:85:
54:6f:ca:77:25:9d:06:eb:ca:d7:68:da:57:c9:8f:7a:d5:21:
d7:ac:7b:e7:17:65:50:48:79:7c:fd:51:4b:96:a5:c6:8d:71:
69:b6:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:54 2025 by rpki-client