Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
File: yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json)
Hash identifier: a7HMnXwouzFissiEF8y3fEQyrLX0uvlLK57L4vNgWwc=
Subject key identifier: 5E:35:21:E7:26:37:A7:7A:85:21:A4:03:31:47:AC:EA:7F:0A:AA:18
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial: 019A72CAB84C6FEA3051E673AFBBAF8515FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:01:19 +0000
Manifest this update: Tue 11 Nov 2025 12:01:19 +0000
Manifest next update: Wed 12 Nov 2025 12:01:19 +0000
Files and hashes: 1: usN8GZVfJ54q0l8hKewfBSWmGHw.roa (hash: IakOdZo+PiFdg1ApCygqDDOunMse1hhehFbuFFIfZ5o=)
2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: JbORdTDeckHR0YqYY3z0N9ocyqVzwTgj7A5vglsRYMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b8:4c:6f:ea:30:51:e6:73:af:bb:af:85:15:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Validity
Not Before: Nov 11 12:01:19 2025 GMT
Not After : Nov 12 12:01:19 2025 GMT
Subject: CN=5e3521e72637a77a8521a4033147acea7f0aaa18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8d:2d:9b:8a:ff:3b:b7:a3:2a:3b:f8:62:69:
bd:63:89:e5:34:89:25:fd:5a:57:01:33:d9:47:6f:
d2:02:92:27:a0:93:16:74:6c:99:fd:b7:b4:a8:a2:
30:9a:ab:62:42:99:aa:8e:8d:73:15:2a:b5:f2:e1:
ba:a9:eb:15:75:a7:de:e1:60:61:c4:5a:be:3d:67:
00:bf:23:ea:df:6a:16:e5:5c:f4:9a:6a:9c:2c:b2:
f6:03:8d:9d:e0:60:8e:d7:33:d4:f1:a4:59:d0:88:
2a:6a:39:28:69:89:2c:7d:ec:4a:56:4b:e7:d9:bc:
e8:b3:80:3b:89:16:59:72:af:21:78:52:21:66:31:
d6:3c:e0:f6:a3:54:ef:ef:b1:3e:54:f9:1c:31:a3:
ef:c7:da:55:67:5a:a9:f3:b8:a9:02:92:f9:3a:d5:
a4:a0:59:45:d5:54:09:3f:ff:f8:79:ff:03:b9:a7:
ba:4e:05:ac:95:19:9a:62:4f:e6:82:7e:b1:a3:c3:
1a:90:db:55:49:95:c0:cd:74:c1:78:b8:4e:78:ad:
25:30:d4:ca:94:85:84:88:8d:bb:a6:f9:3b:2a:61:
57:8d:00:8a:9e:03:f8:cd:9d:fe:cb:d4:a9:06:bb:
89:20:cf:be:34:fb:98:c7:d3:e0:54:03:19:2b:7e:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:35:21:E7:26:37:A7:7A:85:21:A4:03:31:47:AC:EA:7F:0A:AA:18
X509v3 Authority Key Identifier:
keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0f:72:d5:4a:b5:9c:80:a3:eb:cb:b7:a2:6d:b7:43:d7:05:
59:e0:41:5d:5e:b9:06:46:a5:8b:3a:59:b2:e1:23:92:ba:58:
de:11:c6:4a:34:df:b4:96:d0:04:8a:8d:35:06:36:7e:24:b8:
18:66:79:9d:23:5d:5a:1d:45:d1:1e:54:ee:55:b2:32:39:04:
e3:91:64:d2:a9:82:c2:79:50:d3:a6:00:91:cf:1e:fe:29:dd:
79:dc:2c:1b:82:6d:f8:7d:68:0a:24:f9:60:66:72:19:ec:1b:
ac:a3:5b:36:b5:d5:7a:4b:73:ea:d7:76:a4:54:b6:a6:04:41:
f6:a2:0e:bd:3c:92:a1:68:d4:74:ea:ce:6b:83:66:34:a2:a6:
44:38:76:7c:dc:33:9d:0b:04:c3:ef:36:5b:57:a3:97:ba:49:
90:1b:91:4a:9f:ea:f9:11:ca:29:a8:aa:23:c1:4c:0a:eb:91:
ee:16:05:c9:7c:b6:d1:67:0b:9f:a2:32:df:02:04:f5:1c:be:
85:c0:24:7b:72:3d:b5:88:2a:85:0e:d3:eb:66:04:6b:37:9a:
56:11:b8:72:73:aa:65:0a:05:91:bf:50:4a:6a:4d:47:1b:0b:
87:fd:42:26:28:76:f8:ac:91:7d:01:c0:fb:f6:bd:0c:b5:18:
1b:6a:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:06 2025 by rpki-client