Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: KevG2tH2Eimclt95bAgnGfJutt86xo7NhBfQhzBRcEA=
Subject key identifier: 79:BB:9B:8B:47:A8:50:B0:C1:C7:5D:74:9B:5E:47:3E:66:72:F0:E6
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019A4EF5CA1F8F6A16A9DBEA861D6BD28A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 0ED2
Signing time: Tue 04 Nov 2025 13:02:02 +0000
Manifest this update: Tue 04 Nov 2025 13:02:02 +0000
Manifest next update: Wed 05 Nov 2025 13:02:02 +0000
Files and hashes: 1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: oHE+VwmahbVe8h1Np+CaK2YbZrOOTKi1tCnhly7y9+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ca:1f:8f:6a:16:a9:db:ea:86:1d:6b:d2:8a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Nov 4 13:02:02 2025 GMT
Not After : Nov 5 13:02:02 2025 GMT
Subject: CN=79bb9b8b47a850b0c1c75d749b5e473e6672f0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:dc:35:ab:b6:8a:37:c5:57:2f:97:6b:6c:
e6:b2:e5:f3:c5:5e:cb:25:82:2d:9a:c0:e4:d7:dc:
ba:b9:fa:8a:5e:49:eb:89:0e:7d:9d:63:5e:d5:91:
e8:02:ee:94:bb:89:b2:fa:41:f9:87:c2:9a:d7:3d:
9c:33:8d:5d:cb:db:02:5f:59:7b:f9:d9:f8:c1:e7:
38:11:ad:a8:e2:f4:cd:8b:65:18:d5:0c:4b:8b:c6:
e8:48:6f:1e:e8:2d:d3:ce:87:63:e3:49:2b:8a:1c:
8c:62:02:b4:57:a1:9b:85:f5:53:a9:34:74:ca:47:
08:a9:7f:b8:92:a2:2c:51:d1:35:13:fb:87:4f:c3:
c4:92:e8:45:32:0b:55:f0:8a:3b:a0:43:fb:0d:62:
1e:80:bc:e0:cb:c7:7b:e2:03:1a:ab:6f:cb:4b:25:
3b:6d:d5:de:7a:0f:d6:5d:a0:83:9b:b5:c0:65:4d:
84:2e:78:25:90:f2:d1:5a:05:e0:7f:24:94:75:ae:
a0:94:0a:5a:d7:dc:bd:5b:18:6c:51:6b:37:e1:73:
04:a2:17:3e:53:b8:7d:ec:3a:ad:35:50:5d:f9:ca:
e5:18:98:80:5c:a7:91:24:25:40:d8:bf:6a:fe:95:
a1:35:db:9e:5b:d9:b1:6e:83:c7:71:34:2f:ef:5d:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BB:9B:8B:47:A8:50:B0:C1:C7:5D:74:9B:5E:47:3E:66:72:F0:E6
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:00:17:57:88:a6:d9:80:e3:8e:08:42:1c:ea:70:29:e6:75:
a0:6f:c2:b4:19:80:2d:6b:a1:49:4a:51:89:23:78:a1:be:df:
92:a9:e1:b7:c5:9a:8b:71:17:4b:f2:9c:59:0a:4b:4c:9a:91:
da:9b:79:8b:8a:1d:4c:a8:6a:b6:b5:98:0b:20:74:60:84:e5:
20:c6:41:2a:a1:33:8d:f4:7f:cf:14:63:0e:af:e8:9a:e8:0f:
69:c0:6b:cd:a7:59:1f:a6:49:92:ee:2c:28:3b:b0:d6:3b:0f:
6a:6c:f2:a4:42:8f:9a:a2:c0:03:17:31:07:de:43:1b:d7:0e:
8e:73:53:25:71:99:69:99:8b:7e:a0:7e:d2:94:fb:4d:9e:2c:
63:8f:fa:a4:bc:b5:02:f2:7e:74:59:1a:c5:b3:79:a6:25:03:
68:c3:19:eb:cb:d8:29:92:09:2a:8f:08:5f:29:e5:c9:d2:74:
be:1d:5d:6d:02:1d:4d:49:8a:c3:61:83:18:03:7f:77:1e:28:
86:42:96:22:5c:1d:90:34:06:c7:5d:3f:00:92:a1:9b:27:e9:
2d:ca:04:ac:82:cd:b8:4c:ca:bf:ad:b6:37:83:d0:2d:3f:e9:
73:04:7f:f1:bb:24:bb:db:99:c7:8a:79:45:da:2a:c2:13:67:
8a:df:f6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:46 2025 by rpki-client