Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: 8XAFJpC0Uatt0lCcDJJnD/04OmKx19zPikGUoS9uKJ8=
Subject key identifier: 7E:DA:B0:F8:AE:C7:9C:55:A6:4C:F5:A9:6A:9F:2A:A9:49:F8:5A:D2
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019A4DAA8460EE2FB8704FF317F7936F7D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 1418
Signing time: Tue 04 Nov 2025 07:00:11 +0000
Manifest this update: Tue 04 Nov 2025 07:00:11 +0000
Manifest next update: Wed 05 Nov 2025 07:00:11 +0000
Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: +3XbWioWr1TochDyBGehAbq/BL8GVB6tJ6NJTVkzCDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:84:60:ee:2f:b8:70:4f:f3:17:f7:93:6f:7d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Nov 4 07:00:11 2025 GMT
Not After : Nov 5 07:00:11 2025 GMT
Subject: CN=7edab0f8aec79c55a64cf5a96a9f2aa949f85ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:d1:44:92:68:45:9c:22:b2:ea:e1:76:e0:
ca:e1:32:f8:12:d8:93:a9:6b:12:82:8c:71:a9:94:
89:41:70:49:38:1d:48:a5:98:f9:fd:68:90:73:66:
7e:66:34:5a:73:54:7b:ee:b2:68:31:70:28:16:f8:
e7:49:02:20:88:34:45:53:24:d9:26:66:d6:49:97:
b3:a1:6f:33:ea:41:99:bb:fe:83:1e:97:33:55:61:
b3:79:ed:d9:1b:0f:34:19:39:f4:23:cd:f2:e3:da:
8d:3a:7b:68:bb:d4:86:ac:ae:7f:a3:91:75:3d:f0:
09:ac:05:15:35:51:db:8f:e6:81:80:f0:74:ed:51:
83:16:78:c9:0a:ea:9f:f1:ce:f3:58:b8:08:2e:96:
a7:ec:53:2a:59:07:2a:7e:10:b1:8b:39:c3:ad:3e:
b8:f5:62:67:68:25:f5:de:10:3a:4b:3c:75:0e:cb:
80:3c:87:00:7f:a6:0a:37:f6:70:b3:60:f5:51:1e:
eb:6d:8a:33:74:2e:f4:9c:e0:1f:74:a1:c0:7a:fa:
2d:9e:07:32:27:ef:2f:ea:50:4f:ef:de:a0:ff:34:
3a:d0:8d:de:52:f0:a9:06:15:19:ae:ce:a2:4e:a0:
de:b5:bb:d8:5a:16:f3:cb:92:e3:c5:5c:2c:58:a1:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DA:B0:F8:AE:C7:9C:55:A6:4C:F5:A9:6A:9F:2A:A9:49:F8:5A:D2
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:10:d1:c0:d3:a8:0d:bd:1c:32:2d:9f:83:59:fc:ac:e1:14:
c4:ca:c4:a9:9a:a0:b7:5d:3d:28:ea:7a:10:4f:51:59:52:76:
12:33:88:03:d0:71:fd:93:d0:0f:13:eb:88:c9:e2:2a:98:98:
47:84:db:12:ed:9a:86:33:40:79:21:30:6a:c1:66:06:2e:83:
d3:3c:fa:df:22:c8:f8:e5:0f:5e:57:f9:28:d0:2a:61:74:3a:
9a:75:a7:31:af:34:f5:5a:1a:a8:36:f7:8b:8f:1f:80:21:b8:
2e:96:9c:40:0b:51:1a:22:d6:3e:5a:31:91:88:c9:85:25:87:
f0:7f:da:e8:b8:a8:bc:4e:61:35:3f:cf:f8:d6:78:b0:5c:76:
b0:33:3a:48:14:60:77:d3:c8:0d:89:c9:4c:b4:46:db:1c:fb:
dd:7d:a2:b8:8f:d3:64:32:fd:3f:41:07:4e:a4:63:28:c0:39:
87:4d:c6:07:65:9c:2a:18:90:aa:d5:b4:01:86:66:93:cd:05:
6f:5a:52:95:9f:4b:c8:95:30:c4:8d:33:23:07:a8:29:d9:bc:
0f:67:0b:b3:f4:30:24:a4:7b:66:08:1a:82:c8:50:d1:39:ae:
2c:a2:0a:f0:b8:d2:bc:54:66:9e:cc:53:95:8c:5d:75:53:ca:
03:79:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:05:18 2025 by rpki-client