Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: YFuhNjgKM5gd7DJ/nCgBH2lUCtCYGz+VK4PT1KcZh8Y=
Subject key identifier: A5:9A:CF:4A:FD:B9:DC:A2:29:8E:74:28:0A:55:20:E5:95:0B:27:2C
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019A4EF59CCBE3A7BF96425176C1BA8E73A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 13:01:50 +0000
Manifest this update: Tue 04 Nov 2025 13:01:50 +0000
Manifest next update: Wed 05 Nov 2025 13:01:50 +0000
Files and hashes: 1: 2q7qFO0SAjMdaNENG8krQrfpEsw.roa (hash: MRyfRcQ3vFTbqLu3EtrXWQ8bXorq49HiuJbhIqPCu2k=)
2: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (hash: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: wgq00adw+RJp1a3VlQ/8OVu0MdEkMYKrDj6+TdXyxuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9c:cb:e3:a7:bf:96:42:51:76:c1:ba:8e:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Nov 4 13:01:50 2025 GMT
Not After : Nov 5 13:01:50 2025 GMT
Subject: CN=a59acf4afdb9dca2298e74280a5520e5950b272c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:52:8a:5f:9e:d3:22:2a:e9:d1:a5:b3:86:
27:c1:6b:2b:15:b3:43:db:1b:22:d7:fa:40:5d:61:
0f:2b:35:12:c6:28:17:2c:29:5e:96:b8:23:24:a7:
4d:69:5f:fe:cd:a4:f6:a6:ab:82:02:f5:8a:53:cb:
a0:3c:c8:69:c3:7c:c3:b2:bb:0b:e2:33:b2:be:ff:
3c:45:63:3c:97:a3:73:72:0a:2d:e7:64:15:40:1d:
99:fb:fb:15:84:ef:0a:eb:7c:20:c3:78:71:f3:6e:
61:5f:af:20:d4:5c:28:00:dc:ee:8d:ec:71:a2:da:
ce:b7:80:f0:1b:18:82:16:7a:b6:7f:9f:68:63:d9:
e3:34:d6:4a:7b:52:93:99:03:49:00:e3:6e:f7:a6:
df:79:a6:35:14:82:f8:ec:d4:16:37:a6:ca:42:2e:
c5:60:27:32:12:58:89:37:00:a0:d3:f9:65:3b:ae:
cd:30:f5:fc:22:a2:09:be:6f:c9:23:47:72:91:2e:
52:5d:dd:44:e3:a5:e3:9e:1a:4c:53:51:50:7a:38:
04:1f:9b:96:0b:64:b7:da:24:bd:dd:e6:01:80:78:
1b:76:58:5a:36:fa:77:75:4e:40:af:e9:59:63:fd:
56:bb:eb:90:1e:f8:58:cc:dc:17:88:d9:20:f6:8c:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9A:CF:4A:FD:B9:DC:A2:29:8E:74:28:0A:55:20:E5:95:0B:27:2C
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:75:88:32:91:04:33:03:2d:9b:2c:ff:86:b3:ca:09:d1:2b:
1c:c4:f6:3e:fb:7f:e1:b9:7b:84:2e:b4:51:d2:d9:0e:57:d6:
4e:b6:f6:40:ee:1e:1c:2e:b6:9c:5f:f5:cd:8d:bf:47:cb:43:
7d:aa:69:64:d6:68:21:52:7d:8e:df:e8:d3:69:3b:8c:96:e1:
71:68:2a:96:89:d5:89:42:99:65:b8:a1:95:a0:7a:d5:e6:55:
fc:79:65:ea:a5:15:83:9b:ee:16:97:c5:8c:99:47:84:43:c3:
cb:2a:ec:b9:a3:b2:2e:c0:da:06:2b:fc:e2:44:5f:d4:55:29:
cc:87:f8:2d:4d:e3:09:0d:d5:f0:80:11:80:26:52:c0:b9:8d:
cf:10:d0:86:e0:86:8e:60:0d:f3:99:4b:fc:2b:cc:41:63:24:
04:cd:c4:62:54:d6:9b:8c:01:7b:b3:91:8d:07:6e:47:30:58:
67:83:41:95:d1:e2:15:53:49:48:12:c2:00:b9:eb:eb:81:6b:
38:3e:ea:3e:bf:db:20:a2:20:d3:e6:df:87:52:29:03:1d:3f:
ed:18:d6:ed:a4:14:cb:17:77:fc:e6:41:e2:66:42:ea:62:7e:
71:0c:cb:17:6f:66:cf:2f:65:50:74:0d:d9:f5:c0:c0:73:fa:
6e:04:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:59 2025 by rpki-client