Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: u/Kl0Uw+VxO6/Tq/T6hGGykasJgcHUoqsk0cyjmwC8M=
Subject key identifier: 9C:BF:3B:B3:CA:FE:1C:F6:63:CC:4B:80:CC:60:81:1F:BB:47:18:9E
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 019A4D3CB1752EF2644967D4707A24438788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 05:00:14 +0000
Manifest this update: Tue 04 Nov 2025 05:00:14 +0000
Manifest next update: Wed 05 Nov 2025 05:00:14 +0000
Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: E+sDBWzpcU+FSZDVi9MSgbsvTjz+gwzGpFyWtgnDOQY=)
2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b1:75:2e:f2:64:49:67:d4:70:7a:24:43:87:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Nov 4 05:00:14 2025 GMT
Not After : Nov 5 05:00:14 2025 GMT
Subject: CN=9cbf3bb3cafe1cf663cc4b80cc60811fbb47189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:93:3a:b5:b5:13:7a:5a:04:25:bf:df:e3:
26:fc:1b:1a:a2:dc:1b:f5:10:1f:ee:d8:93:30:dc:
5b:aa:a5:76:86:de:f2:20:0f:d6:a6:71:21:f9:10:
64:56:c9:35:b4:6f:2f:6f:ef:dd:09:8c:7b:be:20:
4b:56:83:55:fa:be:35:39:f3:3b:39:31:c2:da:61:
a7:da:4a:07:20:53:e8:c1:7f:43:13:a0:e3:4d:90:
a7:62:d5:4c:81:21:15:a3:72:a3:04:4f:3c:a8:a3:
1d:ea:22:77:09:ae:94:91:a6:25:db:8c:36:57:a3:
4e:d8:3b:b6:38:19:4c:8f:5e:47:f5:27:15:8c:b6:
fe:fd:2a:8c:f1:2b:6c:82:31:ff:46:82:bf:8a:43:
25:34:b1:00:20:d8:f4:4f:ae:21:cf:0f:e4:8b:d8:
43:62:d9:27:74:1c:0d:fa:f1:46:ab:1d:48:a7:6b:
10:07:cc:71:86:f0:e9:5e:52:de:97:bc:00:26:7a:
ed:71:5b:5c:20:53:6e:fa:31:50:53:7e:8e:d0:d7:
ff:88:6e:30:6d:e8:c6:4e:3c:c2:b0:2b:77:90:31:
2b:c5:5d:d6:a1:0a:f3:58:ca:86:22:77:85:69:23:
4f:e1:4b:6e:8f:7e:3c:85:4d:04:ab:79:6a:4c:35:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BF:3B:B3:CA:FE:1C:F6:63:CC:4B:80:CC:60:81:1F:BB:47:18:9E
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2d:65:a4:d9:35:6a:33:29:08:9c:b2:ef:67:74:29:ee:e9:
48:5e:71:17:8b:85:a1:67:4d:73:3f:30:69:a0:86:43:19:8e:
6f:11:24:73:63:49:89:2c:cc:f5:27:9a:59:8b:59:8c:4c:fa:
c0:52:53:a2:c6:4e:df:0e:99:e8:ff:02:17:82:6f:1c:ef:1e:
d2:f8:75:c5:de:92:5d:c2:63:44:72:c1:e7:f1:eb:07:3f:a1:
00:b0:b8:0d:6c:19:98:97:05:01:5e:68:c9:f9:1e:74:7a:3a:
43:22:fa:83:2b:c0:9c:5e:7f:91:66:27:b1:a1:c5:33:c8:e2:
f7:97:96:06:70:78:f0:ae:f5:f6:3d:f1:8c:e9:3d:d3:8e:51:
ce:2b:33:a0:5c:4e:d3:b9:a6:d5:bd:19:f4:7d:60:9c:d8:d7:
5a:94:bc:11:63:52:0d:e4:34:4d:9b:76:8b:9c:f1:04:99:bf:
6f:14:01:88:86:58:32:75:09:86:2d:95:fb:7a:f2:df:93:b0:
1f:a4:06:d8:ae:b3:5a:d4:58:c8:df:30:23:85:0f:d7:53:37:
03:11:8f:0f:e4:c3:19:e0:92:d8:0c:56:2a:0e:fd:50:db:6b:
b3:ae:98:f2:cc:70:4f:93:f1:fe:fa:a3:1a:2e:63:18:b4:e6:
0f:15:58:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:49 2025 by rpki-client