Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: UwXQzfNdZK6yVUsJ22r6Zeeb/UGB8tZOkd+gc6WEa9M=
Subject key identifier: 7A:E7:EC:B4:5E:4D:64:02:BB:21:BF:1F:C2:94:83:3A:47:9C:92:D2
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 019A4E18E94F566C992B86953D4650F60A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 0789
Signing time: Tue 04 Nov 2025 09:00:46 +0000
Manifest this update: Tue 04 Nov 2025 09:00:46 +0000
Manifest next update: Wed 05 Nov 2025 09:00:46 +0000
Files and hashes: 1: 6eOqvZGDKFDuA6yXPPPze8WOsrA.roa (hash: ERZvSVqw/o5/S8YL0KRBFbpGBsSfCd4T3Hhjomrg6eY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: zeIaatQxvKSr4T4/06HoO/32p4EbR4A+LCU1OS3yG8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e9:4f:56:6c:99:2b:86:95:3d:46:50:f6:0a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Nov 4 09:00:46 2025 GMT
Not After : Nov 5 09:00:46 2025 GMT
Subject: CN=7ae7ecb45e4d6402bb21bf1fc294833a479c92d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:71:05:e2:ac:41:ac:31:e0:eb:95:d5:35:
89:89:53:ae:d4:68:69:d8:82:8a:87:c0:fa:21:ba:
ac:aa:9a:16:65:b5:24:b4:f6:98:d0:bd:66:b0:96:
fb:5c:0d:52:16:4b:f9:b4:6b:a2:63:b7:04:26:f3:
6d:b2:ab:16:a2:84:07:7c:75:18:22:68:77:f4:7b:
4a:b2:eb:2f:38:9d:e7:78:da:f0:ac:a2:35:1a:79:
62:46:2c:18:c8:3a:73:15:a7:f8:59:10:74:bc:62:
5a:62:57:b7:20:3d:45:21:0a:97:1f:2f:fb:57:46:
c3:56:cd:9d:22:c3:8f:2f:5c:a1:3c:df:19:c5:f3:
fb:45:ab:0d:18:53:c2:08:1a:53:a7:5c:40:c2:9c:
4f:18:be:61:92:87:4c:ea:6c:57:48:c3:1f:5c:51:
ae:f5:3b:ab:70:77:0e:8c:c2:e5:61:e2:3c:a3:55:
38:a6:76:cd:b2:75:0e:24:f2:e1:99:7b:ee:5c:a8:
1f:2a:49:42:96:96:d5:d5:c7:5f:de:ea:48:cd:16:
e3:d3:79:c3:3a:3d:76:f4:4d:c3:18:f0:83:6f:3b:
d5:a5:b5:10:4b:f4:7d:9a:81:d5:49:b0:2c:8e:c6:
20:d3:92:e0:0d:48:60:c0:b1:12:0c:f3:14:f9:9d:
b0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E7:EC:B4:5E:4D:64:02:BB:21:BF:1F:C2:94:83:3A:47:9C:92:D2
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e4:70:51:90:ad:cc:d9:16:b0:93:68:59:fa:c6:11:f4:30:
74:88:97:1e:31:fe:d4:0c:95:20:99:69:73:3c:07:1c:66:b7:
1d:a5:66:e4:8e:ab:f3:84:a7:dd:a0:fe:6d:b0:fe:0d:47:fe:
ef:e5:87:50:4c:bb:5e:3b:e9:8c:e9:9c:2e:03:1e:bd:df:e2:
79:37:a4:c7:18:34:1b:b1:ab:9a:cf:c8:64:9d:5a:a3:d7:2e:
5a:c2:09:c7:f7:8f:f2:ff:8b:54:b7:8b:90:73:92:07:5b:0c:
21:0d:6a:c5:83:c3:b3:db:5b:62:b5:fc:97:1a:13:eb:97:9b:
b7:b5:d2:9d:07:bc:7f:e3:a2:bf:2f:b6:85:ce:49:80:c3:f1:
2d:34:80:3b:62:2a:1a:8f:48:bd:3b:d0:21:f3:fa:6c:7e:b0:
c2:e2:fc:3d:2d:da:05:6a:c0:c8:e1:e9:b3:5b:d4:5b:95:d4:
17:b5:71:10:11:26:c7:f3:36:88:af:00:71:67:70:af:1b:65:
1b:1a:fc:8f:fc:c7:6f:7b:33:b6:1b:c8:fb:5e:bc:43:be:70:
bc:f2:c7:df:7c:43:fb:b3:6b:82:bc:8f:9b:79:89:9b:71:25:
70:7e:28:0a:f0:d2:27:24:db:89:e0:bc:c3:98:35:50:cb:fb:
f8:42:2d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:09 2025 by rpki-client