Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File: yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier: NYaaP1y2mSbTHn1TGecB782w+wXE/Pd+OsPVVg1pNMY=
Subject key identifier: 71:5E:72:F1:89:D0:53:30:D2:67:04:BB:01:CB:00:F6:8F:38:97:81
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial: 019A4F2B21A1DE614C5A64F83E11BE0D6A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number: 0339
Signing time: Tue 04 Nov 2025 14:00:17 +0000
Manifest this update: Tue 04 Nov 2025 14:00:17 +0000
Manifest next update: Wed 05 Nov 2025 14:00:17 +0000
Files and hashes: 1: kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa (hash: t72IL0Bu4xhSTiCzxaWI7CqqsPyLBuuMnaHiD42pbD4=)
2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: N8qimmuAOUvxHsVNDA7CLopHky/AKGZnBc0ggOT0qsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:21:a1:de:61:4c:5a:64:f8:3e:11:be:0d:6a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
Validity
Not Before: Nov 4 14:00:17 2025 GMT
Not After : Nov 5 14:00:17 2025 GMT
Subject: CN=715e72f189d05330d26704bb01cb00f68f389781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7d:7a:d0:0c:74:f4:ec:e0:6c:b4:10:f4:c3:
41:7d:4f:29:ce:db:2e:af:71:12:c4:95:ce:48:86:
d8:19:38:47:47:0a:8f:f5:65:2d:de:82:e3:10:e4:
ba:85:ac:4f:0b:c9:d2:9c:bb:dc:79:d9:22:2a:45:
d3:88:97:f3:06:33:7e:71:d0:bf:e8:bb:42:36:84:
6a:f0:b5:b4:e6:aa:29:8b:d6:de:80:18:5a:00:33:
bf:98:12:fe:07:f0:ca:ec:b7:25:58:e9:81:4a:6b:
b1:eb:e4:80:1a:f8:db:94:bc:4f:af:1b:df:19:0e:
af:f3:53:b2:e0:d8:52:9d:e1:55:28:db:5a:f1:0d:
2a:33:25:46:fd:22:f2:fa:07:c8:f1:2e:88:35:ab:
a5:19:62:11:79:b0:d8:97:3c:c9:34:27:ed:23:8f:
a9:24:39:83:59:88:76:34:55:26:c6:63:c4:4b:83:
26:05:72:39:21:25:f0:59:58:ff:f1:01:c7:c8:3a:
90:e4:9b:c5:ce:69:2a:35:9c:57:34:7b:97:89:d4:
52:64:5b:b4:9d:a3:61:29:e2:a2:a5:60:5a:1a:26:
65:eb:89:b8:07:a1:79:9b:23:da:bb:21:31:46:45:
74:36:76:d4:35:62:36:e0:2c:e8:3e:bf:cf:89:ec:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5E:72:F1:89:D0:53:30:D2:67:04:BB:01:CB:00:F6:8F:38:97:81
X509v3 Authority Key Identifier:
keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:dc:86:6a:9e:41:b4:ae:00:b0:3c:43:1e:6e:78:94:cf:98:
1f:54:e7:99:51:74:82:78:0c:a6:fe:f1:e2:a4:b6:76:e2:ae:
fc:b4:25:da:f0:3a:90:40:0b:58:98:1a:a5:b1:be:91:57:79:
b2:6d:34:d4:d6:19:66:e5:30:cb:9f:c0:82:e1:4c:c6:92:57:
66:14:15:ea:b2:ba:b7:43:6a:a7:65:d5:8e:5c:76:5a:fb:5c:
13:ce:21:2b:2d:a9:23:fc:7f:67:4c:e5:78:3c:77:d8:e5:d6:
6b:d1:92:98:a3:23:e1:aa:2d:62:54:f6:fb:a3:50:3d:f7:ae:
8d:47:56:d3:9c:14:20:2a:be:9e:fa:04:b0:f0:cf:1c:1d:54:
84:bb:11:6f:36:23:ba:24:af:eb:cf:37:ef:07:6b:78:12:2d:
cd:0a:e6:dd:2d:df:0e:ab:38:0b:ed:80:ba:2c:e0:44:7f:e9:
c9:b2:6f:25:e2:5d:b7:da:f4:f5:75:e2:26:67:13:38:26:38:
1a:5f:eb:44:f9:32:66:9c:47:d8:4c:34:cd:69:2e:58:b8:1a:
5f:6f:5e:9d:29:c6:e2:26:5d:81:22:64:57:f4:ab:6f:35:29:
69:de:65:db:a9:21:f5:60:1a:86:39:3a:47:a1:fb:95:15:b3:
82:07:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:29 2025 by rpki-client