Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: KeA8Ja/SiUM0WAKGsVwT3ynENC0EZzYBM/A224wqbrc=
Subject key identifier: 9B:6D:B7:0E:1A:A5:49:D7:6B:B8:32:B1:DB:A7:28:2E:F7:01:7C:DF
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 019A4F2B9B7A68C33624D164C8E8F3C420DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0D50
Signing time: Tue 04 Nov 2025 14:00:49 +0000
Manifest this update: Tue 04 Nov 2025 14:00:49 +0000
Manifest next update: Wed 05 Nov 2025 14:00:49 +0000
Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: 5oTY4O0XQQESE4fTss27qelV7tMTYj+vnO7vpxNzW9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:9b:7a:68:c3:36:24:d1:64:c8:e8:f3:c4:20:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Nov 4 14:00:49 2025 GMT
Not After : Nov 5 14:00:49 2025 GMT
Subject: CN=9b6db70e1aa549d76bb832b1dba7282ef7017cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:f1:78:88:35:0b:5e:08:7a:03:70:09:58:
17:9a:bb:ba:e6:a5:00:c7:38:16:99:bf:60:8a:54:
01:bb:84:b7:4e:e0:4b:b0:01:e3:82:73:59:ce:7f:
ba:10:2a:bb:ff:3e:67:9a:40:c1:55:56:1e:90:92:
fb:59:15:63:7d:ad:03:b7:43:61:af:0c:cb:83:94:
03:5c:3b:a8:93:bb:1a:4f:c5:32:f7:37:55:9d:97:
c1:7c:29:4d:8e:65:78:fc:5b:cb:ec:39:6c:5b:f5:
a0:8c:ce:de:e6:39:14:c1:3d:8a:c9:e7:25:24:5d:
9f:04:1e:53:4e:cc:1a:aa:8e:82:09:b5:89:a1:0f:
00:50:0e:f5:2a:3e:e1:f2:db:19:6f:e9:0f:50:5c:
de:84:d1:6e:c9:f4:4f:76:9d:4e:6b:03:e2:71:35:
19:ab:45:16:cd:5a:74:b4:22:ca:9b:56:88:55:5c:
15:76:ab:7d:64:81:be:ff:4a:a1:d7:bb:1a:42:d5:
06:05:ad:6f:8d:a4:09:35:e8:eb:f1:49:05:2f:d3:
07:2a:9d:60:f2:5c:c9:d4:21:dd:8d:10:9b:c3:cf:
1c:ec:eb:33:f6:70:d4:f6:45:22:0f:09:55:36:94:
3e:bf:75:91:b6:ee:a3:e7:d4:6f:78:f4:f0:6d:17:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:B7:0E:1A:A5:49:D7:6B:B8:32:B1:DB:A7:28:2E:F7:01:7C:DF
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:16:5d:cb:85:5e:f4:12:dd:fd:db:36:3b:df:23:8b:18:c1:
98:c3:5b:b5:23:01:cc:ba:53:43:40:8e:d4:98:c0:92:7e:fb:
e7:90:bc:5e:c7:17:9e:90:5f:06:35:e4:87:b2:37:f8:e8:87:
88:51:29:4e:21:7f:03:f4:56:5d:50:a9:33:2b:23:e1:ad:cf:
83:5f:94:39:af:33:12:33:61:13:b3:13:36:57:4f:f1:43:06:
d8:d6:40:25:e3:b5:a7:a9:48:d2:35:79:64:b2:00:d9:07:00:
6e:b6:46:a8:28:06:0b:49:73:4a:d5:17:ca:64:7c:5c:c2:00:
df:02:3d:fc:d0:65:7a:bf:33:67:23:17:07:b9:89:bf:5d:01:
83:91:ae:60:28:5c:48:3e:be:83:20:7c:0a:de:3b:6d:96:fe:
70:a9:9a:72:1f:66:60:b7:b1:63:2b:16:42:fa:ce:93:23:84:
ad:62:cb:f6:c9:cf:29:89:d9:7a:2c:c5:89:19:96:f6:ec:b4:
41:c8:07:10:d8:6a:86:7a:f9:8b:c6:e6:b8:b3:9a:3f:e3:93:
b1:6b:77:1c:a5:36:2d:5b:69:e4:b6:be:fc:67:13:a9:10:ae:
cb:4c:78:50:59:ed:05:7e:5e:50:0a:4a:1d:5a:79:f7:34:6f:
7f:2c:9e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:08 2025 by rpki-client