Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier: Tu1lmkonsw/h+ssQI9IzyyloItBf2BRIYgKUT+tNwXc=
Subject key identifier: 5A:85:01:00:8C:82:74:BD:4F:AA:F4:03:BC:48:C7:C0:50:84:EE:81
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial: 019A5007617B05205AAB78FCB50A4FD56002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number: 0214
Signing time: Tue 04 Nov 2025 18:00:51 +0000
Manifest this update: Tue 04 Nov 2025 18:00:51 +0000
Manifest next update: Wed 05 Nov 2025 18:00:51 +0000
Files and hashes: 1: TV9MBnLCdq0YXMlS7n0N6-374eE.roa (hash: 29vVPe5fMsq8wMs3CBPsJgBaxcV4vylFIV1zsoy0JlI=)
2: nGx1SbHdnrm1rX0qlOFShwhhrvk.roa (hash: vTyHGstj9RMJZ9VP2y031XxQBN2W9t1AKq82ozdPQVw=)
3: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
4: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=)
5: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: Ki/1OrOnX76sBRd+H2/QYqQLyaDScFI8/8NASCMPSGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:61:7b:05:20:5a:ab:78:fc:b5:0a:4f:d5:60:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Validity
Not Before: Nov 4 18:00:51 2025 GMT
Not After : Nov 5 18:00:51 2025 GMT
Subject: CN=5a8501008c8274bd4faaf403bc48c7c05084ee81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:1b:ed:8d:ed:d9:4a:42:b6:79:08:37:62:
eb:4c:7c:91:68:6c:d2:11:40:4d:7e:93:2f:52:74:
b5:4d:7c:06:5d:df:47:e5:67:b5:08:5d:49:3b:e2:
0a:72:42:88:f5:15:e7:d1:d7:0a:96:e2:2c:32:cb:
ca:db:ae:25:3a:9c:0f:7d:4b:9d:1f:c8:97:74:13:
84:fc:85:38:0b:2b:00:50:b9:e6:56:78:33:7d:4a:
67:df:f1:19:79:8b:48:de:da:1a:17:87:f4:4a:82:
08:7a:cb:49:20:bc:cf:65:d8:30:51:c3:41:9f:a9:
0f:70:a2:1d:d2:a7:2a:ec:11:0a:de:41:b4:06:ed:
13:d5:56:91:39:91:a2:74:ad:1a:d6:2f:38:c2:0d:
f5:e4:4e:44:86:c1:4a:91:90:dd:24:11:3b:47:bb:
4d:38:25:34:10:c2:e7:50:59:75:e5:c8:bf:b5:87:
cb:91:e4:06:a4:cb:19:89:ca:e2:44:c7:ab:68:04:
7e:42:e1:0a:d5:db:92:38:42:9b:32:a2:d7:aa:97:
21:7e:b2:68:34:d3:40:c9:b1:e5:e2:84:ed:da:07:
b9:72:47:d5:f5:59:31:9d:f3:e7:d0:8f:37:65:fd:
b6:cb:58:b6:80:31:ce:71:0c:d5:00:74:61:05:63:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:01:00:8C:82:74:BD:4F:AA:F4:03:BC:48:C7:C0:50:84:EE:81
X509v3 Authority Key Identifier:
keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d5:a6:eb:8b:27:2b:16:9d:5b:1d:a6:69:ec:85:30:4e:2d:
bf:b2:be:dc:3a:3a:84:e9:be:25:91:4f:14:86:f0:08:f0:d4:
53:08:d1:69:e2:d1:c5:98:38:33:0c:f6:22:9c:d4:f8:de:94:
55:22:c2:cd:1b:e9:68:14:18:ac:b8:1d:56:6b:37:ae:92:09:
2b:08:f7:33:42:4d:4c:fc:8e:a3:fc:10:35:f5:86:7a:3f:f2:
c0:96:bb:22:0c:42:81:d5:02:cb:40:c9:a1:03:0b:0a:3f:d1:
87:64:eb:01:2a:f6:de:a3:39:15:56:51:d9:e9:9f:48:99:ee:
79:49:19:d4:2b:4f:89:f3:d6:f0:8a:86:b7:3a:08:3f:1f:b1:
30:f4:05:a6:1a:ac:e2:16:8f:c3:90:55:ac:86:15:4b:94:25:
12:10:96:74:44:be:6a:f5:66:d1:f5:91:3d:6b:9a:54:bf:2b:
82:d9:6e:26:b3:cc:78:1a:eb:5f:05:13:cc:25:e1:d0:90:ca:
8b:1d:26:bf:ab:6b:8a:1f:f7:cb:11:0f:c9:ab:67:fc:67:93:
77:9b:73:17:fb:95:1c:d9:20:67:e3:66:ac:7a:11:e7:75:ff:
21:0b:46:01:5c:e1:58:14:6b:f3:88:f0:72:f4:d1:89:21:5e:
f1:a6:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:59:06 2025 by rpki-client