Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json)
Hash identifier: gaH2UZZmiB27gihy79U+2cZs02qG6bbjSoBXGxcwxg0=
Subject key identifier: 98:E7:92:0C:3C:34:0B:F0:F8:90:60:74:AB:23:E1:FC:72:F2:EB:1C
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial: 019A5006D6F05308F22481D39D0A5D673D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
Manifest number: 0C9B
Signing time: Tue 04 Nov 2025 18:00:16 +0000
Manifest this update: Tue 04 Nov 2025 18:00:16 +0000
Manifest next update: Wed 05 Nov 2025 18:00:16 +0000
Files and hashes: 1: eiXFhQbxCQpcEPNruQeHmSAD-Z0.roa (hash: MfMam3uqTveTnOv++uzEyTkwTSJ0lTcdAkWlcL+odNo=)
2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: B1mRozVVjERp5K89JpmVq8N/7gxODSScYfciuxxMLsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:d6:f0:53:08:f2:24:81:d3:9d:0a:5d:67:3d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
Validity
Not Before: Nov 4 18:00:16 2025 GMT
Not After : Nov 5 18:00:16 2025 GMT
Subject: CN=98e7920c3c340bf0f8906074ab23e1fc72f2eb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:7c:83:32:50:06:04:23:e9:a2:b2:ce:73:
e7:fc:56:6e:8d:fe:d7:6c:3d:f2:a0:ec:d3:9c:36:
ed:ac:4b:cc:f7:6e:1c:22:97:3f:be:f6:18:65:5d:
cc:c1:49:02:83:42:19:e4:c7:cd:42:6c:3b:81:02:
e8:04:71:98:6f:e7:5b:d2:e4:71:42:a9:54:72:7f:
24:83:b0:cd:3a:ed:bd:3d:7c:68:dc:d8:a4:10:5e:
35:43:e8:93:40:0a:08:8c:99:ca:eb:6a:d8:4d:30:
3b:92:98:76:a5:5b:35:f5:7f:ca:62:f2:c9:01:34:
2e:39:c8:08:02:50:e2:fe:0a:b4:40:a7:10:70:d9:
a6:4d:35:e0:47:63:26:3a:01:e5:3a:ac:40:4f:b3:
45:db:b6:c2:c0:60:18:70:3a:67:1f:cb:a3:3e:cb:
68:27:fe:29:45:e3:a8:ab:6f:53:70:6f:76:85:b0:
5c:75:93:5d:ca:38:92:79:c2:43:71:94:a2:0f:44:
75:68:4b:8a:53:6a:2e:4f:2c:0e:93:8d:f5:22:f2:
82:cb:95:ca:db:5c:d4:fd:ca:94:1e:99:6f:ad:1a:
c1:26:eb:b6:68:03:8a:5a:d7:c5:69:b3:17:c5:9b:
d9:ef:25:25:f5:36:44:fe:c9:0a:b0:20:04:29:01:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:92:0C:3C:34:0B:F0:F8:90:60:74:AB:23:E1:FC:72:F2:EB:1C
X509v3 Authority Key Identifier:
keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8c:78:f8:5a:90:ae:c5:95:d3:f8:42:97:8f:c6:af:cb:6e:
bd:aa:c8:a0:f3:f9:4b:4b:7f:4d:18:29:27:a9:49:d0:07:19:
95:dd:77:0d:aa:3f:b2:76:e9:16:40:a0:26:f9:e1:29:6f:5e:
fc:48:1e:0b:98:92:cb:8c:a5:47:01:f1:33:8c:90:70:7f:ea:
b3:e3:af:55:60:00:f4:4b:1b:c8:04:b5:f7:90:23:04:c5:39:
f3:d6:ad:c0:ed:bc:67:c0:3c:94:29:a1:8c:31:84:74:38:89:
8c:6c:72:10:a0:da:31:1f:f8:f2:00:4f:75:6a:f8:31:a2:86:
6f:49:29:39:ec:ca:49:f5:8d:79:20:1e:65:3b:e1:e1:10:8b:
59:ec:aa:50:50:2b:74:3b:f9:9e:68:a2:56:ce:3e:06:e0:a3:
a6:1a:1d:9c:6e:bd:5a:0c:48:b3:d4:9a:33:81:26:dd:be:e9:
72:49:47:39:b9:2d:f2:84:92:22:76:7e:79:fa:0c:12:87:72:
40:45:53:9f:d9:91:15:a9:be:8c:16:23:fd:ce:42:82:f8:79:
af:30:ea:7e:c8:a8:f6:c0:d2:e3:71:fb:c5:48:2a:be:a6:28:
8d:69:68:bc:cb:86:74:65:4a:3e:94:8b:27:42:c5:09:39:0c:
ad:d3:83:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:46 2025 by rpki-client