Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: QBIrLfb5KbqTqjJ9w2b5ptwr8UeRpitQjHzF9GEjaGc=
Subject key identifier: 79:E2:FE:FA:1C:E1:CF:18:F9:F4:B3:66:6A:E9:5A:25:14:36:6B:8C
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 019A5375B8D315F2896820DC6DB620EB4883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 10:00:15 +0000
Manifest this update: Wed 05 Nov 2025 10:00:15 +0000
Manifest next update: Thu 06 Nov 2025 10:00:15 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: l73zMpldfkwlsPKcrw514FRLuVv/FkCSkXPcnRjvH1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:b8:d3:15:f2:89:68:20:dc:6d:b6:20:eb:48:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Nov 5 10:00:15 2025 GMT
Not After : Nov 6 10:00:15 2025 GMT
Subject: CN=79e2fefa1ce1cf18f9f4b3666ae95a2514366b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:cd:47:df:e1:25:ea:ac:85:5a:8a:e2:2e:
34:dd:f0:b8:79:ae:9c:73:48:f1:a1:6f:b0:69:25:
a8:b7:43:f3:23:54:e8:c5:72:32:98:52:ff:2d:29:
b8:e8:cf:30:63:87:24:7e:54:e3:a3:07:e9:14:17:
cd:b2:7b:40:5f:fe:84:dd:62:79:1b:74:4a:11:61:
75:c6:1a:7f:db:15:d0:bb:bd:6e:11:d3:42:cd:55:
cd:53:5d:1f:38:fc:9b:dd:85:f4:22:f1:e7:3c:92:
43:de:fb:4c:b9:ea:94:82:ac:6a:03:47:7f:21:d0:
82:37:74:89:34:26:8a:72:c7:98:36:e4:c9:79:35:
86:b6:c2:99:c8:00:65:d4:c9:8c:80:f5:f3:3e:af:
f6:a5:ba:30:91:b5:39:ed:eb:52:c6:9a:04:1e:4f:
38:f8:2a:2b:87:80:e2:56:72:cb:e1:8d:42:43:ed:
c5:08:70:7a:04:40:5e:ca:9f:a8:29:1b:69:89:94:
96:06:04:4d:fe:c1:b3:cd:ef:52:41:c0:36:17:87:
e4:d6:bc:0c:4c:a3:f2:8d:a3:55:b3:d7:00:f0:95:
25:44:c4:ff:fa:a0:19:63:14:20:1f:c9:d4:39:df:
8c:cc:83:c0:c3:c1:e2:2b:b7:22:6d:2e:db:28:a3:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E2:FE:FA:1C:E1:CF:18:F9:F4:B3:66:6A:E9:5A:25:14:36:6B:8C
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ea:0b:b0:50:f6:67:14:01:65:ad:05:90:1b:11:3f:54:86:
73:7b:48:de:1e:1d:0d:1d:cf:a1:b0:89:57:23:6f:a7:c3:fb:
b2:89:9f:0d:20:33:98:7a:e8:cd:98:c3:ec:ba:1e:77:c7:9e:
e8:3d:05:66:cc:3d:59:cd:5f:c9:3a:aa:c5:63:24:cc:81:51:
a4:17:1b:0c:0f:1b:9e:95:52:32:74:a2:82:54:d8:3b:35:50:
41:76:77:76:97:62:a0:61:fb:6a:6e:50:60:47:d3:a6:f2:ef:
9a:80:e1:f3:72:e2:5d:0e:9a:63:14:8f:af:20:4a:2a:f7:b2:
23:01:11:94:88:65:06:be:b6:b8:41:c8:d2:ad:f1:d3:aa:a2:
51:35:43:e7:87:6a:1c:36:d3:f8:39:8b:74:f9:e5:c4:b3:32:
57:01:70:47:83:9b:a3:f7:24:dc:e4:16:80:ce:25:92:3d:9d:
98:cf:54:9b:f1:07:26:41:b5:a0:bd:dd:66:04:85:19:5a:7c:
ec:49:a3:82:ab:b0:66:73:23:db:8f:24:c1:4d:ca:cc:a6:83:
65:a4:38:9a:39:d5:f2:a7:ee:11:2b:85:30:6f:51:8c:53:9b:
5a:af:f8:f9:9f:2f:0b:16:15:26:9a:6f:8e:a7:c4:89:55:e9:
23:f2:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:22:13 2025 by rpki-client