
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json)
Hash identifier: fY4iVPVQyu+ROFyH9tvHr/98gnkuNPqKHaRj4reSp30=
Subject key identifier: 91:FB:39:3C:CB:13:FF:CA:F0:3E:4E:B6:65:19:F0:92:B6:B2:92:86
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 019A500730A851E8044E3698B089EBC45E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
Manifest number: 0927
Signing time: Tue 04 Nov 2025 18:00:39 +0000
Manifest this update: Tue 04 Nov 2025 18:00:39 +0000
Manifest next update: Wed 05 Nov 2025 18:00:39 +0000
Files and hashes: 1: 2rSo3-q09N7iB7jaYOjneDrv5u0.roa (hash: SeBUuABk516SvykaHeAgwtcJvEimuVjuj4HjynLJdB4=)
2: 7LJP4TTrnOvYHrxDIcD68WvMpkk.roa (hash: lLcekHLAvj7EJiZGkNr9eVZ0bS3xvv53hGQkkk7vZH0=)
3: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=)
4: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=)
5: JP20HQEng-usG2Tg4OvQmMsT8lE.roa (hash: 3rAazc1ah93oj3YYeUuAqyDzX9FMmIEaFnXDdVjLfD0=)
6: RcvJDa-cbOmIaa4og35Ma3bmLs4.roa (hash: GGKEWRmYEZ5B7wJ/8LINfgpwU0+7mRGdZ5NWQrU75S4=)
7: SjCQ27rNVhM2kv9MDXbr5G3C5OQ.roa (hash: bS2aY9SSb6IOrmNW4CZHgTqDFoSe2nxj0DM5OSdweZ8=)
8: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: /kSvc73mHEqbHQxW7lMEtMPnrA0B58I0+FQARxcFWmY=)
9: Zo2MKi4GCxnbJnp8EPKQOkB00vY.roa (hash: pyL4Qp4gKAsCiz/ZUbA9+rYxUHWbV6CV8D6/DG2NZAE=)
10: bfGAioHYnVCwURtmCUj955sCQiY.roa (hash: LAys+jZEOLTjTbxBgUViTiDI40ywquJv6pzZYNrFeD0=)
11: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (hash: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=)
12: sshGfE0PHQJIsMjWQ6xCwAfL9ss.roa (hash: NRl6+hvMuRUovTUsdUnT3sLoBJp473sUMroon6ol0SE=)
13: t4KmAsN3n5hvYH7SrJ3ol5Me5m4.roa (hash: MXA7Vri5dzrq8tShc6Jw5y5UGeZgcbY1ukge4h+UeLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:30:a8:51:e8:04:4e:36:98:b0:89:eb:c4:5e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Nov 4 18:00:39 2025 GMT
Not After : Nov 5 18:00:39 2025 GMT
Subject: CN=91fb393ccb13ffcaf03e4eb66519f092b6b29286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:b9:1f:de:88:b3:18:8f:36:30:c5:0b:8d:
3c:ff:3e:6f:90:16:f5:a8:94:06:0b:ae:5b:d5:33:
5b:80:bb:64:42:59:a2:10:37:82:5b:74:57:b9:31:
3a:9f:fe:be:a1:bb:99:c7:03:c3:2e:cb:ac:4c:34:
af:24:77:50:65:da:a8:2e:e6:6b:41:90:ec:af:d9:
68:a1:a5:33:eb:0c:c9:0e:56:51:23:78:b6:a2:cf:
11:ae:ff:3d:37:71:ee:f5:ae:d8:52:f3:86:73:39:
44:f4:ae:d6:3d:7b:7d:7e:e4:5e:d7:e4:ff:22:cc:
34:76:32:48:9f:1f:3d:1c:05:78:6d:32:80:f8:5c:
6c:29:dd:b7:e5:88:c4:a9:38:8c:27:f7:c4:0c:ff:
1e:75:5c:d4:58:63:4e:01:1a:c1:31:3b:66:35:c9:
49:13:21:37:f0:94:00:ab:06:f9:53:47:52:e7:3e:
6c:90:b9:cb:93:8d:98:98:21:10:90:61:46:aa:e7:
73:29:db:3d:fd:60:a4:08:65:5b:82:9c:29:99:1a:
7b:4b:0d:78:7b:71:aa:a3:91:a9:9b:d8:e0:97:15:
bd:9a:f1:6c:bb:e1:0b:50:d1:22:2c:b7:f6:ce:fa:
0e:42:18:5b:a2:44:66:aa:bb:97:9a:25:4c:52:b4:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FB:39:3C:CB:13:FF:CA:F0:3E:4E:B6:65:19:F0:92:B6:B2:92:86
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5e:54:b0:a1:8a:8f:75:b2:a9:3b:27:69:31:36:fe:76:34:
79:fa:65:8b:30:31:d1:bd:0c:b5:4d:da:15:3d:2a:50:1a:40:
79:95:17:2c:81:9a:ec:9b:87:e5:25:a5:dd:02:7d:93:e2:11:
44:9e:8b:3f:c7:24:df:ae:94:20:34:45:67:f7:5d:68:c3:d2:
7b:c0:0f:68:b2:67:7a:a4:cd:9b:ca:8e:41:23:51:73:bf:82:
29:d5:7d:bc:84:57:c1:61:4f:2c:23:a5:56:57:8c:be:9e:c6:
c5:59:1b:d7:a2:fb:72:23:a2:71:53:46:36:06:25:f6:74:86:
ff:04:6f:ca:5e:84:4c:83:55:b8:2c:61:98:df:24:c7:45:c4:
7d:9b:16:ca:56:6a:ae:e7:fa:1d:20:9e:97:49:17:d2:e9:11:
6f:88:7a:d7:89:d3:7a:a3:d7:fd:e8:b9:7f:a4:27:db:a5:83:
1b:22:88:3d:6e:28:c5:94:32:c2:23:ed:73:76:f2:9c:0e:dc:
3e:74:a9:70:30:07:15:5f:9b:be:df:aa:a3:81:d6:a1:a3:ee:
2d:9c:a7:4a:20:d5:cc:8d:4a:a8:98:9f:9a:62:bf:6d:8b:ff:
4b:86:86:cf:2b:e7:99:a0:c7:a2:97:37:e2:02:ae:99:75:83:
8c:0d:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:54:05 2025 by rpki-client