Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier: s/RRPNEoHXmev98iHVArOgEiEZJyW34t8FEETPkpuSs=
Subject key identifier: A4:55:76:9F:16:03:66:26:E6:4F:76:62:50:92:2E:CB:CE:02:B1:E2
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 019A4EF5D8F80568A306E602B4EE07734AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number: 07E4
Signing time: Tue 04 Nov 2025 13:02:05 +0000
Manifest this update: Tue 04 Nov 2025 13:02:05 +0000
Manifest next update: Wed 05 Nov 2025 13:02:05 +0000
Files and hashes: 1: Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa (hash: xjrK/sVAC5wf26/BaujuTP3RD5GR/bbBxu4fokZn8xY=)
2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: 7zLtywwF2MawwTjVP+z8Ma8GxhdVKlp3mrksd9j2cwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d8:f8:05:68:a3:06:e6:02:b4:ee:07:73:4a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Nov 4 13:02:05 2025 GMT
Not After : Nov 5 13:02:05 2025 GMT
Subject: CN=a455769f16036626e64f766250922ecbce02b1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:ab:a2:b4:f6:4e:e2:fc:b6:42:f4:6e:13:
64:75:a9:99:03:dc:bf:6a:7b:72:bb:2e:cd:c8:e3:
b4:3f:69:de:30:57:5f:79:ac:02:07:40:0b:72:57:
e4:1d:fb:bd:2c:2d:1c:d9:dd:e9:11:a4:6b:87:9e:
bd:0b:8a:ba:48:cd:25:86:2c:15:1b:94:8d:0b:14:
ee:1a:16:7a:3b:91:59:c5:12:8f:01:cf:81:23:a4:
0d:3e:1d:35:3c:98:e0:fb:cb:c5:3c:e2:dc:29:cd:
ef:bf:cf:f6:71:70:da:6f:25:11:b8:ce:f6:5a:3a:
1d:87:d0:7e:0c:2b:cf:52:0b:e0:fc:1d:75:f1:32:
44:d2:d5:38:f1:0e:a0:ed:7b:6c:9e:f0:d5:ed:9a:
16:e2:94:4f:3f:02:54:49:91:b5:fe:69:24:25:80:
89:09:e2:24:18:54:73:86:db:63:0f:90:9c:d7:0e:
20:12:57:62:e1:07:66:5d:48:3d:57:79:a3:3b:09:
fa:91:07:27:d7:1b:f7:32:bd:0a:41:d3:47:c3:d7:
26:c1:80:63:05:44:56:58:5d:64:64:f4:75:71:47:
b9:d3:7e:ca:5e:1f:21:b3:22:ba:17:a3:b9:27:25:
e6:5e:ad:4c:03:17:85:a6:90:6e:b6:00:9c:18:7c:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:76:9F:16:03:66:26:E6:4F:76:62:50:92:2E:CB:CE:02:B1:E2
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:03:32:c1:29:61:59:48:ab:a5:02:3e:fe:ea:fb:0e:37:9d:
10:28:02:39:9b:61:03:c6:af:aa:3e:a2:ca:42:64:a3:54:cf:
39:a3:08:eb:af:47:31:42:72:55:10:f8:52:eb:79:75:87:57:
74:c9:9e:bb:3f:56:49:1d:8b:2c:d5:6d:fb:8d:68:14:1e:96:
68:4b:7b:06:33:55:fe:1a:0e:cb:46:64:f7:da:40:cf:83:b9:
08:ad:7c:9d:ed:43:3b:be:c9:83:7c:c3:4d:39:9d:1f:21:5b:
c0:8c:18:96:20:11:80:49:46:f6:6b:6d:f3:88:f0:ea:51:eb:
02:6b:54:df:0b:f7:75:68:12:88:57:4a:30:b9:0a:18:5e:7c:
64:2e:95:e1:f9:3f:bb:91:72:05:1c:f5:20:5e:46:52:7c:65:
82:02:cb:43:45:fc:8c:0b:29:29:5b:cb:68:9b:30:0d:a8:21:
96:2d:c6:7f:8a:73:6c:db:fc:8b:ab:03:7b:c9:a3:28:b7:2e:
dc:57:5f:fd:f0:82:e2:a5:81:d1:60:29:7b:9a:a5:20:86:57:
e6:03:6e:df:f1:6d:1b:8f:0c:45:bd:ab:5d:15:60:ce:f5:42:
9a:8d:54:35:2d:5c:22:f4:81:a8:32:78:d2:a3:7b:21:20:63:
93:c0:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:19 2025 by rpki-client