Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: qy3e7SAMoSvo0Yc1lyzj4hu+eATky6t4AaTDToq086g=
Subject key identifier: 27:00:74:AC:58:EE:EF:9E:6A:E2:A6:24:EC:FD:6E:F5:A8:95:20:2F
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 019A4EF51E9288E4BB47117206F4FC1EFE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 0FBB
Signing time: Tue 04 Nov 2025 13:01:18 +0000
Manifest this update: Tue 04 Nov 2025 13:01:18 +0000
Manifest next update: Wed 05 Nov 2025 13:01:18 +0000
Files and hashes: 1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: CAdoPtTZ/Eb3TBLRnsP6LR/cJYqf3zyY95rnds+Flo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1e:92:88:e4:bb:47:11:72:06:f4:fc:1e:fe:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Nov 4 13:01:18 2025 GMT
Not After : Nov 5 13:01:18 2025 GMT
Subject: CN=270074ac58eeef9e6ae2a624ecfd6ef5a895202f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:05:e3:74:3e:32:d4:15:d0:11:1b:c7:29:
2e:7b:62:c1:33:1b:99:11:0f:fc:6c:88:c6:2e:7c:
e6:d0:ba:01:80:5f:66:bd:c4:68:ea:1b:c7:97:88:
fb:f9:4b:77:cf:1f:ce:bc:70:2d:c6:af:ff:0e:91:
94:91:bc:2b:1a:86:cd:26:5c:cb:88:13:ab:e2:14:
5e:5e:fc:3a:a9:b1:c6:3f:94:13:98:41:6d:ff:ac:
f8:ce:aa:1e:58:06:66:9f:54:45:2c:ee:e3:bd:17:
91:1d:ec:cc:e9:4d:d8:25:64:5e:11:c5:e3:d7:43:
ad:1b:46:be:26:f0:c5:ee:8f:31:64:a1:9b:80:0d:
5f:8e:6a:f9:4a:3b:38:8b:51:ca:01:d3:b4:e4:73:
50:ba:19:e9:e1:59:c3:91:8e:82:7c:9a:b5:09:e7:
fb:f8:45:e8:69:40:50:d8:01:9b:9d:f6:f1:f3:5f:
91:77:a1:4b:38:e5:3a:3b:ab:f5:98:c3:de:47:31:
8f:0e:ff:02:ce:c6:8d:5e:b9:a1:c1:d6:98:df:08:
fd:b3:80:1f:ad:65:42:3a:9f:13:c2:cb:bd:41:cf:
2e:70:44:0a:6e:df:91:35:32:ac:8a:d9:8d:45:88:
d2:4a:6f:86:55:ec:4b:95:ac:27:57:c6:3a:99:8a:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:00:74:AC:58:EE:EF:9E:6A:E2:A6:24:EC:FD:6E:F5:A8:95:20:2F
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e8:c0:e7:1b:e4:3e:66:f1:d1:49:e2:bf:ec:90:dc:c1:cc:
73:ef:81:6f:f6:3d:3e:97:3b:e2:f5:eb:db:1e:28:88:dc:50:
5b:83:ab:20:9c:da:a2:8c:73:1d:93:1b:1d:d7:90:b7:81:c0:
db:d1:57:8a:2a:f8:70:14:c3:80:60:94:99:e2:26:42:13:1f:
0d:bb:25:58:18:db:b0:d4:5e:9e:35:e3:c1:e4:73:af:1e:7f:
ed:0d:1a:6f:99:d5:ee:28:d3:fd:00:24:b1:15:54:95:7b:69:
d3:92:a0:d0:dd:65:f2:c8:e3:90:7a:94:86:76:4e:43:a4:02:
75:0b:5b:8f:82:59:04:87:e9:a4:c9:84:89:c2:07:f0:1e:82:
54:9b:4d:7d:5e:34:dd:b1:78:a0:9d:09:5f:3f:58:25:24:e9:
d4:55:32:20:6c:c5:55:b2:fa:79:f6:1c:e4:0c:68:2c:92:26:
80:57:9f:b7:f4:21:93:2b:b9:fa:2c:f2:76:cd:72:7a:f7:39:
c2:8c:c4:6e:cd:a0:24:67:e8:b2:e4:c9:5d:d9:c9:9c:17:63:
cd:61:d0:39:33:46:c8:9f:87:cf:25:83:a1:e4:06:07:b0:1e:
f8:6f:6e:f3:af:f2:b0:74:92:f0:da:98:fb:2f:85:bd:8f:a2:
cf:a4:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:11 2025 by rpki-client