Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
File: yMHp4LxfXaGOMkoYEltCeAGoB_E.mft (raw, json)
Hash identifier: UVZ2PHntwkqsFLaFubyALBw0RWknPTC2lBZAvKcv3Js=
Subject key identifier: AF:D3:00:92:05:A3:E8:4D:F8:7A:E6:FA:DC:88:D0:60:06:4C:FA:9D
Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
Certificate issuer: /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Certificate serial: 019A4D746CEC6F928BFE7723ABDBE46B8DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
Manifest number: 0864
Signing time: Tue 04 Nov 2025 06:01:06 +0000
Manifest this update: Tue 04 Nov 2025 06:01:06 +0000
Manifest next update: Wed 05 Nov 2025 06:01:06 +0000
Files and hashes: 1: KzFfCDjHV6hqDoqqVxbHisFAzqw.roa (hash: EJN3VDm9IKnbYFgaxZt9SIfMAHKvU3wGx8Z5+gCSQRo=)
2: yMHp4LxfXaGOMkoYEltCeAGoB_E.crl (hash: Dm/IVp3Sx4OifI5lhT8E4xKrWNMVqiEqSVZArVuLUQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:6c:ec:6f:92:8b:fe:77:23:ab:db:e4:6b:8d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Validity
Not Before: Nov 4 06:01:06 2025 GMT
Not After : Nov 5 06:01:06 2025 GMT
Subject: CN=afd3009205a3e84df87ae6fadc88d060064cfa9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:51:14:8b:51:b4:c4:72:6a:99:80:8a:1c:
1b:a1:28:2e:9b:7a:8f:fe:45:cb:13:02:1e:2f:9a:
32:7a:8b:6f:5f:b2:6a:8e:c2:c0:ce:79:67:8e:06:
75:03:9d:90:eb:77:7f:c7:ff:18:40:18:32:aa:14:
b8:f5:21:db:69:cd:e8:90:99:dd:93:0b:3a:11:77:
2e:6f:fd:6c:1e:fa:6d:ff:16:02:53:50:8d:80:b5:
f6:87:55:46:b5:95:83:18:4d:e1:ec:3f:62:e3:a2:
0d:e5:1e:d5:d6:02:b8:a8:53:85:fe:24:09:4f:97:
6f:73:c4:b2:04:20:bd:93:6c:94:ad:be:54:93:00:
14:f7:2e:d4:8a:a2:01:fc:45:a6:69:32:94:2c:c2:
84:2a:ab:7e:b0:f9:69:44:b2:03:51:d9:e0:c3:1e:
ed:f5:f2:7d:ff:d2:5d:cc:81:62:13:fd:54:be:c4:
d8:75:5e:28:92:19:95:91:3f:2d:90:7e:4f:f4:5b:
18:fc:be:b9:85:63:a1:99:7c:1a:a0:0b:38:c3:26:
d8:b5:3e:d9:02:97:9e:71:a6:40:dd:62:7d:2b:ee:
86:19:66:27:0a:67:9e:f0:a1:fc:10:85:28:d2:0f:
6f:86:76:87:84:6f:a4:65:82:52:0b:a7:16:28:ad:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D3:00:92:05:A3:E8:4D:F8:7A:E6:FA:DC:88:D0:60:06:4C:FA:9D
X509v3 Authority Key Identifier:
keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c3:04:b6:be:98:99:00:1f:73:c3:33:33:21:6d:6f:4d:b7:
5c:b0:6e:92:e0:53:1e:3a:c3:0b:58:7b:ba:65:ef:bf:80:3c:
12:bd:82:0a:48:93:a5:05:cd:8c:03:95:34:dd:c4:a1:14:6f:
65:80:1b:42:30:a9:6c:0c:d5:83:32:1e:6d:3d:46:08:d5:78:
ba:e6:a0:b4:50:39:0a:4b:98:18:ee:73:2a:cc:23:9a:8f:6a:
08:6d:50:05:a3:ea:e6:7a:2b:7d:81:8a:9b:cf:1d:7b:8e:21:
1c:a3:3f:53:8e:4b:90:a5:3c:3d:ed:53:ca:e9:bb:2c:6e:ee:
ba:ed:0d:2f:37:47:e7:db:5c:6e:06:d4:fb:57:86:0b:2b:d4:
ad:03:c8:1a:4b:8b:bb:a6:89:0c:8c:06:23:0f:1d:f0:53:1d:
95:d8:28:fc:e1:2d:d3:73:0d:6a:31:fa:be:3c:77:d8:57:a4:
5f:2e:a4:6c:03:aa:32:ef:a2:d0:3e:41:62:78:08:f7:f7:9b:
c0:f4:11:a0:60:73:90:52:92:e1:ff:f0:8c:15:b2:c1:aa:28:
4d:7d:22:eb:4b:f0:f4:66:22:28:08:17:53:42:60:e4:b6:26:
d9:92:f0:bb:f1:6f:e5:a1:bc:fe:9d:40:9d:3c:90:dd:f1:3b:
a7:97:f3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:01:58 2025 by rpki-client