Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json)
Hash identifier: M2LHqHXBbJkAOQeXZNwBkBvGVB3LaWtMngL4Lu31SVE=
Subject key identifier: 54:D1:B4:D1:13:DB:58:F4:24:F8:DD:08:A7:5E:7C:50:B7:9A:DC:84
Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Certificate serial: 019A7337FBC0BA0CFE91E753D08C2FDDCDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
Manifest number: 046D
Signing time: Tue 11 Nov 2025 14:00:39 +0000
Manifest this update: Tue 11 Nov 2025 14:00:39 +0000
Manifest next update: Wed 12 Nov 2025 14:00:39 +0000
Files and hashes: 1: 59CnxlbcT-ZaaTX2J23S31L7ijw.roa (hash: b+AnFw3X9M74fTji1fm9+zA2kxxckPu0ywAdpSQ21NA=)
2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: GgbqYwPy4xbW6q2NareX2U6Cso/FB/sBxYrna52ehuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:37:fb:c0:ba:0c:fe:91:e7:53:d0:8c:2f:dd:cd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Validity
Not Before: Nov 11 14:00:39 2025 GMT
Not After : Nov 12 14:00:39 2025 GMT
Subject: CN=54d1b4d113db58f424f8dd08a75e7c50b79adc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:7e:0e:1f:30:5d:1c:47:78:3a:d6:d4:f6:
1d:1f:13:cd:99:a6:1b:22:ea:4c:a1:fb:a8:12:af:
60:4a:18:c9:9b:62:25:c8:e7:37:f1:da:7e:bd:8b:
c8:9b:0f:7d:2b:da:c2:f6:4b:75:63:e6:e7:d3:b8:
50:eb:07:77:21:ce:b5:6d:7f:e9:30:7e:8b:df:2f:
87:67:24:7c:60:d8:f6:9d:c6:c7:23:9e:4a:84:7b:
ad:9a:b2:a3:5f:87:71:88:81:44:1b:d5:29:d6:8f:
4c:9d:33:45:85:55:b9:34:6f:26:3b:ca:28:81:95:
41:89:a1:42:55:13:0c:76:8d:a2:57:6c:2d:08:3c:
37:ba:7d:eb:91:c9:e1:91:11:78:74:9a:44:b9:3a:
3e:59:3c:f8:70:78:e0:0c:41:61:73:88:2b:93:c4:
57:ad:f9:a5:60:55:2f:09:ba:90:22:14:8d:52:15:
49:ac:d8:14:27:bf:54:0e:7b:f5:d7:4e:9d:ba:ef:
41:0c:d1:dc:70:0c:92:e5:32:22:a6:c2:4f:71:91:
d7:54:ec:16:ee:06:e4:4c:76:4a:06:d2:db:74:37:
d3:1a:10:ea:86:14:95:4d:62:e9:c9:1d:db:8a:48:
73:06:23:40:68:77:b0:1b:a6:62:68:ea:f6:d4:ab:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D1:B4:D1:13:DB:58:F4:24:F8:DD:08:A7:5E:7C:50:B7:9A:DC:84
X509v3 Authority Key Identifier:
keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2f:7c:7c:9f:e1:df:e8:f2:92:06:eb:41:db:f3:04:55:6f:
85:af:c3:e8:6f:09:35:cb:fa:2e:20:3c:37:91:aa:73:f7:81:
de:c5:a9:9f:64:14:25:6d:b9:89:c7:0b:dc:02:79:d1:4b:26:
5b:ba:ff:b2:bd:ff:c4:eb:1a:21:b4:d5:3d:04:af:a4:67:b9:
cc:ff:6d:b4:6d:e4:b9:df:30:d1:a8:2b:d3:f1:1f:f9:e3:90:
d4:15:7e:0c:69:e6:3d:0a:da:20:a0:9d:86:69:c9:b5:70:14:
41:1f:8c:c5:ae:25:16:69:e5:e0:f5:25:b4:8d:9b:02:ac:9c:
9a:03:c3:68:9f:e4:6f:4c:c6:48:cb:95:2a:6b:60:37:fd:6c:
43:f2:ad:81:20:0e:34:7d:c8:69:52:f7:9e:ba:e8:32:40:0a:
d1:fb:13:ef:33:5b:70:66:1c:ba:30:7d:a2:93:a3:1f:ef:ea:
d5:e6:42:a6:d3:d6:b5:05:92:b8:66:ff:20:d1:bc:9f:a6:71:
43:6c:b0:ac:6b:86:d6:82:19:03:17:5e:e1:4a:b4:e9:a2:0e:
20:1a:c8:81:e7:5a:2c:59:04:30:49:e9:4e:72:1a:95:78:6e:
dd:34:09:4b:87:1f:7f:c9:c9:ba:00:5f:07:27:2e:74:fa:d0:
fa:db:ca:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:08:35 2025 by rpki-client