Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
File: yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json)
Hash identifier: lVS6XG1sAKGylXepZFlOte6u2Pt5HrQxJtNz8dfa+kk=
Subject key identifier: FB:7A:53:5A:1D:55:74:6E:86:4F:1E:FF:06:0B:2F:44:5C:A3:4D:6B
Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
Certificate issuer: /CN=caf23362dc1a714536d8b5e143f79dada002713d
Certificate serial: 019A4DE1DE01E98F1BFFA696441B13BB3B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
Manifest number: 07F1
Signing time: Tue 04 Nov 2025 08:00:39 +0000
Manifest this update: Tue 04 Nov 2025 08:00:39 +0000
Manifest next update: Wed 05 Nov 2025 08:00:39 +0000
Files and hashes: 1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: wR7qrq6AZDszPo2kIIPCLhy/zO4jV/+xuQ+BNrz2Axg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:de:01:e9:8f:1b:ff:a6:96:44:1b:13:bb:3b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d
Validity
Not Before: Nov 4 08:00:39 2025 GMT
Not After : Nov 5 08:00:39 2025 GMT
Subject: CN=fb7a535a1d55746e864f1eff060b2f445ca34d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:19:d8:3b:d8:17:29:ea:09:94:15:56:31:
b1:39:8c:96:aa:94:16:86:b2:89:90:2d:1c:1f:2d:
e2:66:86:97:19:b9:1d:ad:c9:69:c3:39:4d:c6:b3:
36:84:b1:ea:71:39:0c:0f:fd:cb:b8:45:b8:23:4b:
11:2d:10:76:b2:1d:47:38:61:d8:da:01:04:ea:b1:
23:3a:81:13:00:43:fa:3c:e7:25:8a:c3:fe:30:e8:
df:30:a1:b4:36:37:8e:15:da:8b:63:1a:af:f2:f7:
4b:51:d9:5b:ab:1e:6f:a2:8e:c4:30:f3:ba:9c:a4:
af:b7:90:67:a4:07:2d:c1:fa:05:e2:e8:2c:1b:57:
af:b9:23:84:7d:34:08:c4:c0:9b:71:88:9f:78:f2:
aa:4f:87:c9:59:8f:b6:7f:50:44:b9:cf:a8:94:6a:
19:37:8c:fb:0e:5d:78:e8:66:ac:ef:30:d3:b5:5b:
14:a9:35:01:f5:25:f3:44:a6:d0:52:0b:cf:68:f2:
86:b6:5f:b2:aa:a2:29:f2:ce:16:c0:bc:15:94:a2:
36:55:0c:63:4d:23:c9:d8:91:70:5b:e2:81:f7:ef:
05:51:1e:a7:b7:5f:cc:f2:ab:b2:fb:64:c7:c0:82:
f2:d1:2e:7e:41:10:da:03:d4:94:02:d3:61:d1:4b:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7A:53:5A:1D:55:74:6E:86:4F:1E:FF:06:0B:2F:44:5C:A3:4D:6B
X509v3 Authority Key Identifier:
keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4b:06:42:0c:2f:be:57:70:d9:db:ab:30:d0:fb:43:9b:1e:
79:2f:02:68:7f:62:b4:52:d7:ce:0f:ab:d6:ab:4b:e0:72:a1:
64:dc:f8:df:19:5e:50:32:e0:61:b8:2b:cd:11:b2:c0:a9:c1:
6f:6a:c5:8e:56:40:8b:f7:52:4e:5a:22:98:46:0b:87:90:af:
64:24:d0:ac:b9:6d:bb:fa:95:15:49:a2:35:05:08:88:ed:48:
bb:ff:ef:79:65:1a:ff:4a:66:76:f6:0d:b7:e6:4a:3a:0e:55:
4a:cc:30:68:e0:eb:ad:28:17:94:74:a2:00:62:3d:c7:91:8d:
3f:8d:8c:3e:30:e1:e3:e4:d4:a3:6e:fe:f6:d8:38:ae:5a:f7:
17:63:ad:66:31:f5:2b:bf:b0:a0:87:36:28:9b:f9:e6:ff:e2:
cd:8e:d3:33:a7:77:86:e5:0c:31:70:8d:76:64:1a:49:2d:eb:
b5:7d:3d:73:9b:11:0c:3f:ee:cb:f9:04:49:f4:66:d1:63:1f:
70:a3:93:2c:86:55:66:af:5b:2b:e2:4b:17:d0:4d:d3:c2:d0:
6f:de:fd:62:80:89:65:d8:48:9f:d7:13:bb:b1:dc:37:45:a6:
6e:c8:fd:38:e7:32:0e:74:b1:ab:99:84:e9:6c:f1:f6:4f:2f:
f0:fc:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:49 2025 by rpki-client