Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier: eQShV7VxHQAWfawEFDG5ccDiiFUaP2jn4hkb/uEBIrE=
Subject key identifier: 3C:EA:86:19:29:48:5F:C2:86:CC:D9:92:3D:F6:3C:DA:5A:79:0F:96
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 019A4FD08A98C61EA9E4206BD09CDC7225AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number: 0CC7
Signing time: Tue 04 Nov 2025 17:00:58 +0000
Manifest this update: Tue 04 Nov 2025 17:00:58 +0000
Manifest next update: Wed 05 Nov 2025 17:00:58 +0000
Files and hashes: 1: KMVYfNBq8fQcPieeDn4rOXJEAQc.roa (hash: ydascvmFGyZEMeBYeWR21NuJQtwhyewDNO5cyV/mt0U=)
2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: AmQAykUq0YdznrQze7UbRbRFm2iHKpebU0ioHx0JrPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:8a:98:c6:1e:a9:e4:20:6b:d0:9c:dc:72:25:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Nov 4 17:00:58 2025 GMT
Not After : Nov 5 17:00:58 2025 GMT
Subject: CN=3cea861929485fc286ccd9923df63cda5a790f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:d5:8f:f6:80:d5:61:19:f0:3c:65:2b:08:
f1:cf:8e:37:8e:5a:7f:2a:ec:48:2f:0c:34:97:7c:
3c:95:29:29:29:9c:a7:b5:ac:ad:b0:a3:32:b3:ea:
44:19:a7:61:a6:b6:7c:cf:c5:4d:79:ea:8e:44:fb:
1f:1a:38:0e:37:e2:e9:6f:92:68:9a:f9:52:6a:4a:
ba:d8:ba:90:78:43:6f:42:58:3c:c1:93:96:92:61:
43:f0:3f:91:1e:f3:a2:d2:7e:57:ef:e1:29:16:ea:
02:1f:5d:ef:43:3c:a4:0c:7f:3d:4d:8b:85:aa:c9:
74:54:91:b3:b8:8c:de:af:6a:a4:38:c6:d4:04:d2:
d3:ba:fc:36:68:78:2d:45:c7:c4:f8:94:8e:d9:12:
f1:74:cc:ba:b2:fc:65:43:4f:9d:0a:53:c5:cc:3c:
67:3d:a9:04:b4:84:37:95:e9:1b:3a:f1:86:f3:26:
2d:58:e7:72:88:74:9e:18:99:bb:32:8b:10:4d:75:
91:ab:f2:0c:a6:6d:c5:c4:c6:6f:a3:1b:12:f6:c7:
8b:1c:27:30:9e:42:0e:8c:f8:ca:98:64:99:bc:43:
0f:d2:e7:73:fd:59:29:08:0f:65:e4:ee:64:a9:21:
37:32:77:d8:59:59:86:1d:11:be:3c:60:94:cd:7e:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EA:86:19:29:48:5F:C2:86:CC:D9:92:3D:F6:3C:DA:5A:79:0F:96
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d8:5b:bb:8f:9e:98:14:33:46:24:3a:ac:8f:73:72:d0:d6:
9e:e4:1b:54:71:08:57:fb:5f:21:ba:45:80:22:8f:89:d7:a3:
6d:d6:1d:04:97:47:46:bb:1f:04:12:36:08:af:0f:2b:be:d8:
cc:96:ce:f6:90:79:88:fe:bd:40:50:c2:2a:85:ac:95:e5:72:
65:74:b3:d3:59:b2:e6:b9:0e:81:f2:72:20:22:b8:48:a7:d7:
1b:c2:b3:ff:6f:35:48:49:2e:63:0b:47:59:a9:c9:96:7a:17:
a0:b2:89:fc:4b:39:6c:1b:5b:47:25:ae:be:3b:2b:b7:fe:4e:
fc:13:de:8e:b8:24:02:06:d1:52:c1:b4:6b:ae:96:99:f2:10:
35:3e:c7:32:95:d7:4f:dc:cb:5b:d1:26:e9:32:c4:73:6e:d4:
47:5f:9e:88:e6:48:9d:55:d9:6c:ba:15:b7:2b:b8:5e:29:6a:
20:63:75:8f:27:41:2b:95:14:8e:72:f8:95:01:42:21:09:bc:
91:4c:07:25:03:8a:d9:61:2c:ba:2e:16:47:61:20:a4:32:3a:
1b:de:3f:20:37:d2:81:d7:4c:55:3c:b7:00:77:6d:ee:71:6c:
64:9d:32:08:a0:52:04:ea:1a:41:b4:b5:f9:cb:17:76:4d:6a:
18:84:ee:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:53 2025 by rpki-client