Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier: Xi8Pkpvk1l6T44DdZIIxI4YfHEVoJIsPUYb6+UNkCRI=
Subject key identifier: B2:77:45:52:AE:B1:21:52:F3:2D:D5:C0:9C:76:43:29:AE:B5:AB:E4
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 019A53ACEE6F8947A9F56A803C360DEA6293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number: 0CC9
Signing time: Wed 05 Nov 2025 11:00:33 +0000
Manifest this update: Wed 05 Nov 2025 11:00:33 +0000
Manifest next update: Thu 06 Nov 2025 11:00:33 +0000
Files and hashes: 1: KMVYfNBq8fQcPieeDn4rOXJEAQc.roa (hash: ydascvmFGyZEMeBYeWR21NuJQtwhyewDNO5cyV/mt0U=)
2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: 7M38YnTBssoHZpgPh+V7G+FJPG9a/W6zQu2Yr66NeAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:ee:6f:89:47:a9:f5:6a:80:3c:36:0d:ea:62:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Nov 5 11:00:33 2025 GMT
Not After : Nov 6 11:00:33 2025 GMT
Subject: CN=b2774552aeb12152f32dd5c09c764329aeb5abe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:47:f1:13:52:93:9b:55:b4:57:d0:c4:f3:
24:b8:1a:4b:da:ae:3a:ca:b3:ab:77:a4:c3:67:8d:
8a:ba:65:28:af:b0:a8:45:3b:0d:88:23:fb:c6:7d:
41:dd:c9:fa:cf:a6:eb:1f:38:59:13:53:92:fa:8d:
ad:e4:21:6c:2b:4c:e0:e4:e8:b9:40:fb:e8:78:b4:
0d:6c:f2:ca:3c:02:91:2b:11:6d:2a:f0:82:f3:f5:
30:5e:8e:79:e5:70:98:5e:42:44:61:60:c5:33:52:
53:71:4c:95:7d:d3:b9:94:98:ec:c9:85:06:a5:89:
ac:33:fc:6a:a5:4d:46:26:f2:51:20:c0:31:da:cc:
49:c4:93:9a:0d:2d:25:b6:46:0d:60:7b:78:db:f5:
5b:60:3f:aa:d5:b4:8f:bb:d8:47:fd:a6:aa:9f:6d:
46:ee:25:2c:b1:39:ac:28:07:61:66:1c:cf:e4:72:
73:1d:41:df:78:bf:63:7c:27:a5:03:da:a5:0d:dd:
80:1a:60:49:04:9a:54:27:5a:b9:20:9f:57:73:bf:
1a:37:53:16:67:4b:20:9a:0b:d7:96:bc:83:f4:62:
9d:10:c4:52:4b:30:1e:da:73:52:c9:1d:1b:3f:7c:
a7:b5:b8:21:f2:db:6d:e4:fd:4a:b3:9a:d7:29:ac:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:77:45:52:AE:B1:21:52:F3:2D:D5:C0:9C:76:43:29:AE:B5:AB:E4
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ec:1d:ce:a0:3d:ed:cd:5c:b2:81:4b:68:5b:ce:8f:bc:10:
a6:4a:cc:01:20:d0:b1:ce:11:a3:7f:aa:03:c2:71:58:cc:25:
a6:24:f6:69:e6:88:e9:6b:90:21:28:36:a7:2b:08:2c:40:69:
aa:b8:34:74:d9:19:6c:13:fc:ac:10:05:64:1a:52:8d:0b:d5:
0e:93:d4:5b:ed:e2:d5:6c:46:b3:7c:7c:35:8c:1c:00:51:2b:
f6:4e:8f:c5:5b:2b:2a:80:e9:0f:79:67:89:01:58:08:53:c7:
09:20:0b:ab:a3:36:f3:c4:77:28:a3:97:98:f9:6d:3d:53:0f:
95:e4:58:97:8b:01:22:c3:1a:cb:82:18:8a:ac:4a:8e:d5:06:
3b:2c:4b:bd:63:5f:96:ab:f3:e1:00:2b:c3:3c:f8:62:04:8f:
51:b7:65:3c:85:e8:8a:6f:20:61:ad:ce:99:f6:d9:64:cb:38:
20:e2:a0:24:af:21:07:b1:69:28:0e:d3:71:d2:a8:93:38:cb:
a7:78:12:ca:e9:eb:fb:9d:a8:ac:3f:3f:c7:cd:1d:7b:56:f7:
93:6d:c9:20:b1:79:cf:dd:68:82:cb:5d:fb:af:21:99:5d:10:
55:43:84:ac:1e:ba:83:db:57:d8:e8:a3:e9:b7:b0:15:98:79:
2b:aa:7f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:03:23 2025 by rpki-client