Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: vqYkfuAqYlQCbVZNT/MB2XvoW0gv99SQACx1bmVILp8=
Subject key identifier: 28:BF:38:38:40:2F:04:B5:20:A8:98:2E:AB:12:21:42:66:E2:CF:4F
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 019A53760B825E0984971D8E7B6FEBC1C575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 0843
Signing time: Wed 05 Nov 2025 10:00:36 +0000
Manifest this update: Wed 05 Nov 2025 10:00:36 +0000
Manifest next update: Thu 06 Nov 2025 10:00:36 +0000
Files and hashes: 1: YSlfWP3DY80Smx0TIqkuPzTOoec.roa (hash: zxri6NDPBUgI6E9l7vT1svBXNo7QAt30+iiVihETiFE=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: xtGSahuxdHJSRhECB+DjB4PPaVwhVMowCXUD2tPTvJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:0b:82:5e:09:84:97:1d:8e:7b:6f:eb:c1:c5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Nov 5 10:00:36 2025 GMT
Not After : Nov 6 10:00:36 2025 GMT
Subject: CN=28bf3838402f04b520a8982eab12214266e2cf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:ba:9a:90:67:60:4e:b6:23:1d:cb:c2:1a:
67:1a:d2:61:c9:9c:a1:b8:9f:bd:89:2c:54:7f:eb:
b7:46:ca:63:74:da:24:82:8a:22:99:69:5b:7d:d9:
85:c8:ba:a2:27:a2:83:62:43:8e:c9:48:18:75:c9:
9e:fb:54:48:51:38:8d:eb:8e:f1:d1:a5:ca:c2:15:
86:31:27:12:ff:8e:0a:dc:a2:1c:1d:a3:4c:09:8a:
ad:cc:53:24:e6:6b:3f:36:fc:52:d8:9d:d6:f5:5e:
82:5d:4d:ca:dc:f9:0d:e1:c2:53:d1:68:29:37:2d:
ab:a0:e9:d4:04:52:4c:f5:6b:e1:97:30:f0:af:d0:
b0:72:c4:80:a2:58:d7:76:cb:33:85:7c:83:f0:be:
ab:81:60:4b:13:ae:ff:77:5b:92:07:04:28:13:e0:
50:f1:66:57:7b:24:c7:4e:c5:00:85:29:0e:ae:e0:
59:4b:5b:e1:3b:6e:bd:34:26:e0:ed:98:f5:0d:d1:
09:65:a7:db:f6:36:6f:30:f4:d5:e9:e3:49:53:e3:
06:de:90:0d:a5:80:4b:a0:8f:8d:60:6a:d3:73:67:
c1:46:eb:02:4f:78:d4:03:e0:5b:5b:f5:39:97:b1:
f4:26:5b:7b:b6:b8:0b:bb:86:5e:39:47:30:28:34:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BF:38:38:40:2F:04:B5:20:A8:98:2E:AB:12:21:42:66:E2:CF:4F
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bf:b7:9e:71:d0:0f:ea:91:fa:60:9e:f6:00:e4:77:99:37:
ab:af:14:27:43:ae:51:49:d1:bf:ba:e7:94:f1:1a:18:fb:93:
b8:41:ef:68:30:5c:e8:66:e2:ea:20:50:6c:58:67:5d:8d:97:
be:b5:7e:ab:e2:3f:c3:21:92:d7:2b:aa:82:08:43:20:d7:ae:
a1:4a:33:d8:dc:c9:09:f7:cf:f2:af:09:55:90:b5:7b:f2:c8:
f8:4a:78:cd:f8:9f:55:d3:22:71:2f:c5:b9:6a:ac:34:15:a9:
44:93:5f:bc:25:e2:55:fb:5a:9c:82:81:92:3e:42:82:38:9a:
a7:ba:98:9a:55:83:02:f1:5f:90:5a:56:e9:b1:21:da:3b:03:
c1:51:04:07:38:2b:f7:b9:74:2d:fe:af:bb:05:d4:42:1c:21:
19:58:7b:03:6c:ca:00:b9:b1:5e:8f:3a:5e:48:31:af:f5:79:
91:8f:d9:43:df:d5:fc:1d:49:da:59:56:99:0d:f7:a0:11:38:
ac:73:a2:be:a3:dd:09:7d:26:25:0b:05:88:43:2f:45:57:77:
3c:b4:1f:bd:b0:21:c1:d9:74:3f:17:ab:db:d3:87:72:8b:ac:
29:13:dd:ba:73:1e:ec:06:44:50:cc:2a:55:99:82:dd:3c:f0:
75:c0:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:29:38 2025 by rpki-client