Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: ZCcfmiARNItkrOIe9vptWg4dsu8ClERdiJCJjqzi3NA=
Subject key identifier: 9E:20:2A:9D:79:9A:E1:F3:9A:1E:C5:49:4E:C0:A8:C8:5F:F9:25:D9
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 019A4E86A0D1270A830FD78F3A35A2418F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0C12
Signing time: Tue 04 Nov 2025 11:00:37 +0000
Manifest this update: Tue 04 Nov 2025 11:00:37 +0000
Manifest next update: Wed 05 Nov 2025 11:00:37 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: WYrpdLH4XS5LhN85XTybzFVD/sKl0k94Va6tXxXZbOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a0:d1:27:0a:83:0f:d7:8f:3a:35:a2:41:8f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Nov 4 11:00:37 2025 GMT
Not After : Nov 5 11:00:37 2025 GMT
Subject: CN=9e202a9d799ae1f39a1ec5494ec0a8c85ff925d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:0a:bb:00:9d:54:93:de:bb:90:35:ee:5d:
cf:a4:b8:32:df:c5:4d:d1:6c:16:63:c0:c4:9d:5c:
09:bc:19:52:b7:9d:65:e1:db:77:01:dd:12:b6:de:
cb:2a:dc:65:7e:d8:bc:bc:f2:04:6f:3d:00:99:d6:
d8:e4:3a:05:5f:49:8f:e2:0e:28:96:a4:5f:57:2a:
26:aa:3c:6e:c9:8c:94:aa:84:7b:1a:3a:d2:7f:71:
cc:be:97:6b:af:30:b0:81:4a:d8:ad:a0:b9:36:81:
d0:c4:0d:25:a5:4e:3a:f7:f6:6f:db:5f:f4:31:ab:
f1:c8:9b:f2:d5:87:5b:fc:9a:b7:78:74:b5:a9:83:
50:8e:71:08:88:8e:4d:ab:cf:b4:32:80:6d:e1:a7:
49:9a:0a:12:1f:d7:67:50:fa:20:e3:d8:9a:4b:28:
09:6a:a9:d6:9f:8d:31:74:b9:f3:13:a7:89:55:25:
76:08:75:d2:5b:e2:f7:dd:33:cd:46:98:a1:93:9f:
cd:7f:5b:b2:b4:6d:7b:0c:cb:74:d2:01:62:6a:3e:
45:9f:27:1e:ca:fc:a4:20:65:60:84:1a:5f:4a:81:
1d:3c:ba:31:10:fb:86:f5:84:e0:70:f2:85:61:2d:
0f:83:ed:02:8a:ae:f0:5f:3a:c9:74:38:44:99:c3:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:20:2A:9D:79:9A:E1:F3:9A:1E:C5:49:4E:C0:A8:C8:5F:F9:25:D9
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:47:24:ac:28:ff:7b:35:2c:b3:d6:38:57:5e:99:72:68:a1:
ee:02:d5:68:84:9c:ee:9a:54:de:cc:af:fc:59:ba:15:bb:27:
10:09:88:75:4f:f7:66:2e:fc:a9:24:4d:49:e3:f7:2a:ac:1f:
da:9e:9b:97:e7:f9:a7:98:f4:05:3d:f1:f5:fa:9d:be:76:7b:
b9:0e:f5:bd:7c:d8:a4:6d:5c:ca:fe:e1:9f:3f:49:de:22:5e:
00:f9:14:50:82:c7:83:43:d0:64:28:cf:05:b5:1e:c8:ab:23:
38:f5:91:e6:94:bb:b0:a6:70:c0:2d:fb:e3:95:ad:31:06:72:
f4:8c:48:3c:2c:63:33:c6:37:e4:60:a8:66:b2:93:f1:b6:69:
80:84:2c:59:52:0f:f2:ce:d8:76:cb:7c:d8:4e:08:a9:5e:d6:
44:22:5c:8b:01:2a:96:e6:c8:9d:e4:b6:79:77:bd:ad:dc:31:
d7:74:66:24:4b:02:33:fa:c8:e8:a5:05:b8:fb:57:91:f4:33:
9a:e0:1c:0e:70:91:bd:5f:b6:96:cb:29:98:8d:f8:1f:74:a3:
36:4c:34:79:e9:0a:77:4f:dc:ac:96:dd:99:a8:b6:b9:04:e7:
69:a3:e5:e1:93:7f:cb:fd:88:ad:21:f0:84:4f:70:e5:52:cc:
a5:08:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:27 2025 by rpki-client