Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: qV/FDlOUzUvCq/U6L369dgDobnzadjulv8NcXE76HJY=
Subject key identifier: CF:11:3D:74:5C:AA:03:8D:12:A5:A0:A7:DA:D7:A4:B7:32:2D:60:68
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 019A4D3CBF7FCDEAC466E85FBEF285381B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 072C
Signing time: Tue 04 Nov 2025 05:00:18 +0000
Manifest this update: Tue 04 Nov 2025 05:00:18 +0000
Manifest next update: Wed 05 Nov 2025 05:00:18 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: Bofs4ohNskP7oRhXntEkamcTByY.roa (hash: 2wFqF3IDJ9WWoiEwRf3HPN+kDBVLZG7FcftR+HQ+PQ0=)
3: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: Ve2wOOzvWc+1a02AR9lL1xiS5yuji4koZk+zn7eS6NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:bf:7f:cd:ea:c4:66:e8:5f:be:f2:85:38:1b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Nov 4 05:00:18 2025 GMT
Not After : Nov 5 05:00:18 2025 GMT
Subject: CN=cf113d745caa038d12a5a0a7dad7a4b7322d6068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:13:44:fd:40:2b:ea:40:37:49:de:9a:74:
59:48:6e:98:35:86:05:90:24:51:c4:8b:60:b2:59:
e2:3b:73:8d:40:5a:a1:e0:b8:65:a7:61:68:d0:b8:
bd:bc:35:20:c4:0d:2f:b8:d4:d1:de:ab:ed:1d:01:
17:5d:99:e1:0d:30:c4:60:65:60:9e:d3:3b:07:ba:
0d:4c:5d:03:b3:4d:3b:88:51:b3:65:f6:9a:04:fb:
28:a4:58:a7:75:f7:96:ad:8d:5b:4f:32:5b:bd:8d:
d4:1a:4f:2c:46:5a:ca:19:de:56:74:b6:a7:77:4b:
df:dd:43:be:40:1f:0b:73:2b:4f:30:1c:c0:a5:e5:
10:48:88:bf:85:f7:38:df:a2:5f:86:fc:72:fd:b6:
7b:80:02:c7:94:1e:a8:7f:1e:69:70:66:98:99:ad:
a9:33:0f:fc:04:ba:9b:5f:7e:bc:10:1a:9c:a5:6b:
1c:fa:b2:01:58:af:83:a8:05:c5:13:b8:f7:70:31:
68:af:0f:5f:b9:4d:41:da:bb:3c:77:3e:6f:88:ed:
eb:4a:2f:07:5f:81:bf:ef:6b:2b:e8:5d:80:16:4c:
83:fa:e0:d5:1a:ce:76:dd:cc:14:1a:0c:30:a3:f9:
6d:47:c1:4e:1f:92:e9:8d:cb:69:61:ae:01:39:0f:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:3D:74:5C:AA:03:8D:12:A5:A0:A7:DA:D7:A4:B7:32:2D:60:68
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:30:32:66:06:33:83:f3:ab:2b:5f:23:9c:4b:5f:a6:b2:82:
46:52:a5:26:99:c6:87:b7:39:f4:5f:89:7b:ba:b9:a0:50:a3:
35:fe:6e:5c:c0:e0:20:3d:3d:37:94:e8:0c:ea:c9:64:7f:94:
22:e0:33:57:37:93:87:a9:e2:3c:4d:b8:c2:23:83:a2:e5:08:
21:1f:06:09:76:81:54:f7:fd:67:40:ed:cb:c8:f7:5c:0c:57:
d2:3e:59:2c:35:c9:0b:11:fe:5b:18:ce:3b:9e:c3:46:17:f2:
fd:c9:da:e4:cb:62:94:4d:65:61:0d:84:ca:6a:4b:7f:22:c4:
8a:e4:02:75:cc:24:b2:1a:27:00:65:e8:3a:e7:ab:ec:24:f8:
3f:34:a9:06:49:46:f5:be:2c:b9:49:cb:b0:15:a2:56:6a:47:
4b:5c:51:d9:f1:0b:3d:dd:e9:f9:10:7f:cd:35:8c:b9:88:27:
53:7b:a3:0c:c4:56:4b:d0:1d:75:bb:19:f0:81:5c:01:91:08:
5b:b8:4d:32:0a:5b:90:b7:5b:72:bf:28:3e:8a:e7:1e:ff:25:
c2:1b:eb:9e:44:86:b8:36:ee:06:72:d3:86:46:8a:fc:56:d3:
48:e1:3b:28:8b:bf:85:e3:d4:94:f7:6b:f6:54:e0:ab:a3:a9:
34:42:fb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:32 2025 by rpki-client