Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: +h8zEn9aEu5vjKm7uHdZr8iRHL+4/dftKMmlUYYlUiU=
Subject key identifier: 88:54:F8:71:1A:DC:BB:55:D9:69:EB:B2:C9:C7:FF:F2:47:4E:D3:DB
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 019A4E190A45072045F1786854A91FB1A667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 064C
Signing time: Tue 04 Nov 2025 09:00:55 +0000
Manifest this update: Tue 04 Nov 2025 09:00:55 +0000
Manifest next update: Wed 05 Nov 2025 09:00:55 +0000
Files and hashes: 1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=)
2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: MMHSEKwdXCbDJSCesYfLj4fbYOXPWf5XRsdNuL58GEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0a:45:07:20:45:f1:78:68:54:a9:1f:b1:a6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Nov 4 09:00:55 2025 GMT
Not After : Nov 5 09:00:55 2025 GMT
Subject: CN=8854f8711adcbb55d969ebb2c9c7fff2474ed3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:10:ff:10:9e:1d:74:19:c7:11:d1:68:a8:
39:f1:8c:8a:f8:36:e4:06:24:a0:41:47:67:2c:f1:
24:c4:3b:b6:46:e7:5c:af:c9:31:62:e1:2d:dc:74:
69:4f:1a:52:30:c1:f2:7d:65:ad:b3:88:ce:a3:f5:
4f:c6:ac:96:2c:ac:db:a3:e2:48:3a:e7:1c:b4:44:
0a:e1:56:7b:cd:51:ee:59:56:81:91:cd:4b:5d:fb:
e1:ac:b6:2a:8e:0e:88:b6:77:42:4c:70:8a:df:ec:
15:37:e7:46:dd:49:85:66:80:e7:a9:0a:28:f8:1c:
19:ee:58:6c:e4:b7:16:dd:0b:07:e0:e8:29:bc:d7:
15:7b:89:24:cf:43:d1:45:a7:cd:79:6d:bb:05:95:
12:10:32:6f:cf:61:6e:43:a7:d7:4f:8a:cf:d4:e9:
87:0e:a6:a9:7f:14:93:06:76:a0:41:a6:da:69:ad:
82:20:d6:d9:8d:5a:c2:e3:aa:70:53:10:4e:e0:f7:
13:4e:53:0f:63:09:2d:5e:4a:47:78:fe:25:10:c1:
fb:93:f9:56:a8:17:af:f1:ff:21:ba:3c:a7:a2:59:
c2:ec:88:db:2f:28:00:9a:e2:a6:4f:28:92:7f:4d:
9a:ac:2c:25:c7:3c:ee:94:70:bc:79:13:86:be:1d:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:F8:71:1A:DC:BB:55:D9:69:EB:B2:C9:C7:FF:F2:47:4E:D3:DB
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:77:68:ef:78:98:c4:eb:b3:08:99:9b:c5:cf:2e:a0:e3:51:
c8:e7:9e:4a:98:49:4a:b2:2c:5b:61:9d:f4:c0:f9:04:8b:13:
ff:24:6b:09:e5:89:6f:39:9e:f2:d3:c0:8d:8b:ed:c8:cb:aa:
4f:f7:b7:05:94:e1:93:28:cf:47:48:c3:74:c0:9e:13:2c:b3:
05:0e:e7:54:96:85:61:6b:ff:34:5a:de:3b:82:33:d0:1b:17:
07:17:d6:40:28:e1:c4:eb:68:76:2e:e1:89:a4:85:05:61:ee:
a9:85:de:70:95:e5:4e:60:82:84:8e:f8:19:3e:21:ef:33:fa:
a6:ac:67:2f:8b:e8:99:7f:fe:6e:38:3a:f2:f7:16:d8:5c:19:
7a:86:76:03:31:8d:b1:40:c6:4c:ec:c2:41:eb:a1:50:ca:02:
7d:72:db:20:d3:2b:92:db:63:3b:56:cb:e3:76:58:a4:be:14:
ca:6c:e5:70:57:34:1a:2c:40:6b:b6:ed:f3:07:11:28:db:7b:
15:ff:a0:27:95:92:19:cd:7b:e4:59:0f:cc:ca:ca:cf:a7:d7:
09:6e:50:97:bd:42:52:ff:95:48:0f:06:56:bc:31:6f:9a:5c:
3b:e9:b4:d5:80:ed:10:39:19:75:36:52:93:98:fb:b6:eb:d9:
41:c2:b3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:05:18 2025 by rpki-client