Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier: GvDVfAWaJrCuFI5XbcRZUy59M8tLVi68FJaX0YoW9mc=
Subject key identifier: E0:FA:38:70:AA:2E:FF:4C:E5:35:0E:62:D5:A2:1C:8D:81:30:AA:BE
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial: 019A51F5B6D2E13EA851351A1D93CE265F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number: 0252
Signing time: Wed 05 Nov 2025 03:00:48 +0000
Manifest this update: Wed 05 Nov 2025 03:00:48 +0000
Manifest next update: Thu 06 Nov 2025 03:00:48 +0000
Files and hashes: 1: qP-gsAFmgVOc4H-oZTo26Ptp5vw.roa (hash: QT6Tbak41BDvyGiXFOwS3KI7ZlriOjq7qFbGvl+22Ak=)
2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: tjrGpYXgzlCNpgOFX7sszl4Xvtulim/pzcZDnjvIL9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b6:d2:e1:3e:a8:51:35:1a:1d:93:ce:26:5f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Validity
Not Before: Nov 5 03:00:48 2025 GMT
Not After : Nov 6 03:00:48 2025 GMT
Subject: CN=e0fa3870aa2eff4ce5350e62d5a21c8d8130aabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:69:b7:60:f9:50:f5:bc:33:de:8f:a1:b7:
8b:de:b9:27:57:3f:5f:c7:69:2c:cf:cd:6d:47:e8:
df:6c:70:33:af:d3:46:14:ee:4c:06:26:a0:6d:91:
96:75:b5:ae:11:ac:62:aa:44:f2:c6:44:6f:d6:2d:
ea:bb:9f:8c:37:de:a1:f1:43:04:f7:c5:6f:a9:6b:
44:6a:0e:b8:25:c9:21:d2:a1:b6:f4:1f:9f:0b:54:
4a:fe:37:8a:52:09:5a:45:c1:a0:44:cb:55:0a:11:
94:97:39:2f:e1:6d:30:37:1a:7a:3f:c5:6e:52:d2:
62:1e:ff:48:e8:5c:30:c0:f9:1b:c1:62:08:bb:76:
a6:9a:70:4d:ed:d6:cc:ca:94:4e:fa:8a:ab:1e:d3:
6f:57:c7:73:83:9b:58:3d:23:13:6c:ba:73:07:8c:
5a:b5:cf:07:94:fa:36:cf:55:a0:d4:f2:70:03:b9:
1e:3c:76:f0:cf:4c:ce:cf:87:ee:5f:1d:bd:c6:03:
34:46:20:10:d6:03:c3:15:ac:84:a9:51:56:ed:b1:
00:52:11:68:23:12:8b:f8:80:60:31:28:9e:2a:b7:
40:f5:2a:bc:0d:85:5c:f6:be:91:da:b3:71:e3:1f:
39:23:f4:3e:21:89:f0:29:29:83:13:74:59:d9:fd:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FA:38:70:AA:2E:FF:4C:E5:35:0E:62:D5:A2:1C:8D:81:30:AA:BE
X509v3 Authority Key Identifier:
keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:dc:95:df:d5:17:82:f3:4b:45:90:20:b4:2c:02:d4:a3:8a:
a7:94:d5:7e:dd:05:ff:8d:cd:6c:54:c5:f5:f8:e2:e4:58:b2:
3e:38:75:b6:0f:01:63:d3:b9:32:e3:fe:cc:fd:62:7f:cd:a3:
cf:7d:b6:03:8d:72:6d:9d:60:02:48:25:2c:38:f0:69:14:f2:
bc:8c:09:bf:ca:2b:b6:c4:e1:ba:8f:ca:db:1c:26:1f:ff:4e:
29:71:73:59:17:0d:d9:50:f4:65:19:88:7a:f0:49:9d:60:1e:
da:9b:ba:25:47:a1:e5:97:cb:23:f2:e1:76:5b:04:bc:76:2d:
66:74:b0:c6:8d:98:67:c3:ff:c9:80:60:79:d9:4b:da:77:e6:
24:03:bf:e2:88:67:03:6a:3e:f4:98:01:bc:34:42:2e:6a:97:
de:99:0f:0b:2a:a9:e0:c6:57:e3:99:97:73:f3:b6:19:ef:d0:
32:c2:30:44:5a:4c:a4:ec:d1:6b:9d:db:65:90:a2:8d:df:87:
c4:3c:25:34:61:71:3e:e4:17:73:fd:d7:af:10:6e:1f:da:f6:
3c:b3:1a:87:c7:ad:67:a9:f5:c5:28:e3:50:77:70:6d:23:ce:
67:dd:d3:6a:16:79:1f:2f:89:18:c3:c0:91:df:ee:a3:68:c1:
c6:2a:2a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:53:43 2025 by rpki-client