Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft (raw, json)
Hash identifier: /PSRQFmEpQb5YxHwlUkrrRmzT4nnQfn4x8hjKvuf83o=
Subject key identifier: 53:73:03:76:F7:18:EC:D8:62:D8:E2:2C:BD:B5:5B:61:31:87:25:01
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 019A4D74814E8F7563B048C5183D20169D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
Manifest number: 0EB9
Signing time: Tue 04 Nov 2025 06:01:12 +0000
Manifest this update: Tue 04 Nov 2025 06:01:12 +0000
Manifest next update: Wed 05 Nov 2025 06:01:12 +0000
Files and hashes: 1: n0pJCaUiRCl5Ps5_Vu5R9Y3I9qU.roa (hash: yrWbMC7j+dM+coJf76N3ZfAw2TV7juT6B31o0/J59Ds=)
2: yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl (hash: w02lC4mYZms+NJLXtCGCz97mny9EEu1RxSe8rzdUyEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:81:4e:8f:75:63:b0:48:c5:18:3d:20:16:9d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Nov 4 06:01:12 2025 GMT
Not After : Nov 5 06:01:12 2025 GMT
Subject: CN=53730376f718ecd862d8e22cbdb55b6131872501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:e2:0a:dc:30:27:dd:61:e2:3e:f9:1a:5b:
f3:92:b2:ab:ea:a8:a7:a5:c8:f0:db:6b:87:46:9e:
c8:50:8c:66:6c:7b:3d:10:45:2c:ff:ac:d2:bb:e6:
1a:7c:c2:61:74:d9:ec:1e:bd:61:9b:df:16:32:b5:
55:ef:d7:74:74:49:21:18:e1:20:03:8f:44:e2:b2:
36:98:5d:fb:b7:c8:6d:49:12:cd:4b:61:c8:aa:70:
35:b7:b8:7a:f3:0f:a8:23:bf:40:7c:3e:ed:b0:0a:
1c:d5:bb:4a:82:af:0c:fe:9e:18:3a:23:fd:e5:ec:
a6:ee:fa:27:9a:29:a0:67:1c:f5:70:a1:98:7f:9d:
e6:3d:93:55:fb:93:04:ac:45:f5:75:e1:ab:7c:5b:
82:b2:d0:2f:b0:0b:b5:b0:f1:68:f3:f9:42:51:22:
09:70:1e:1b:03:01:3f:7a:b8:17:15:77:0b:c2:98:
9c:fc:9f:31:18:60:e2:05:45:6a:fd:b5:45:15:90:
ab:66:80:eb:6e:99:ab:ba:ba:da:95:3d:cc:02:ba:
2b:34:eb:30:fb:2b:4a:79:3b:81:29:a1:33:fa:6f:
ce:cf:9d:10:24:2b:32:9c:90:cf:6d:cc:31:4a:4c:
f0:a8:ea:a8:c4:a5:87:83:3b:7e:bc:6e:4c:f2:d0:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:73:03:76:F7:18:EC:D8:62:D8:E2:2C:BD:B5:5B:61:31:87:25:01
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c3:89:38:ab:0f:68:63:d0:04:54:dd:3b:ea:9a:99:7c:68:
e9:3d:e6:01:61:70:31:37:0b:f5:38:55:13:c0:97:ee:8f:47:
aa:07:2a:f6:85:b6:f8:cc:62:64:ff:38:a5:6b:0b:d9:04:19:
f5:b7:a8:1c:8c:40:0a:c9:9c:e6:b9:36:05:60:b8:19:05:12:
78:09:41:1a:53:39:92:76:a2:cd:68:65:c7:9b:f4:d2:c8:4e:
32:f2:c4:ab:65:57:db:99:51:1e:73:6e:72:c4:e0:53:22:70:
1f:ec:29:7f:ac:84:37:61:be:ac:45:57:01:57:9d:82:91:7a:
4c:2c:dd:47:0b:4f:92:46:cf:bf:27:6d:cc:6c:5a:62:33:3a:
02:34:9f:b8:e3:27:62:18:2a:3f:e8:e9:9c:8a:04:8c:cb:16:
88:1e:1f:e2:2b:c2:d9:88:84:a6:15:11:78:9d:48:15:5a:96:
32:22:37:aa:db:7e:d8:5d:87:51:30:8e:11:d0:fd:5c:0e:0e:
bb:a2:73:22:47:9a:6e:e6:08:b4:97:0d:19:96:33:76:e0:08:
2a:9d:6c:ab:80:f4:09:17:45:8d:59:8c:0e:da:5c:6d:fe:71:
db:3b:cf:c1:e7:e9:60:d1:93:eb:f3:4c:b9:bc:51:04:7a:0b:
0a:c8:4c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:51 2025 by rpki-client