Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: j4Nv6zWk7+M1AHAve+6A0DUjKawu45OsYmOQsiKRrmI=
Subject key identifier: 20:2F:6D:07:A8:97:7F:D8:26:65:86:7D:03:37:F2:40:E8:6C:89:47
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 019A71B76E18477A575A5A853C2D617314E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 066E
Signing time: Tue 11 Nov 2025 07:00:37 +0000
Manifest this update: Tue 11 Nov 2025 07:00:37 +0000
Manifest next update: Wed 12 Nov 2025 07:00:37 +0000
Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: +MKnsfe0SP9rhnP4LhH74QgQ7ZhwVRkhFKQ6y6JNp44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6e:18:47:7a:57:5a:5a:85:3c:2d:61:73:14:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Nov 11 07:00:37 2025 GMT
Not After : Nov 12 07:00:37 2025 GMT
Subject: CN=202f6d07a8977fd82665867d0337f240e86c8947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:76:fb:de:06:33:5f:fe:21:6e:bf:82:0c:
43:c4:4e:9a:25:99:b2:2a:20:9a:d0:c6:71:f4:6b:
04:27:2f:81:d8:fc:38:d1:d2:f1:17:25:0a:c9:1f:
25:06:ad:29:86:5f:03:69:95:28:0b:4e:30:1e:47:
68:b4:00:df:64:da:cd:0d:3f:62:6b:ee:6b:7b:14:
1c:9d:91:d7:d1:0d:7f:1e:ad:17:1b:11:9a:e5:46:
89:67:dd:03:7e:94:33:ed:0a:48:b2:91:41:37:61:
6e:2c:b8:84:08:7a:9f:1b:04:7b:e1:a4:7a:6e:71:
cf:a0:70:60:c0:8e:af:b0:34:37:14:16:32:33:5b:
9c:ad:8b:89:6b:44:a8:7f:41:91:be:2c:51:0b:9e:
01:d1:b9:44:59:cc:99:3a:d8:a1:be:53:c0:23:78:
55:46:84:0c:8e:25:c4:c4:64:32:59:2e:ca:87:fe:
32:76:b2:89:c5:60:86:82:21:2c:57:5d:fa:a7:80:
fb:9f:34:a9:05:59:a9:b7:3d:88:d0:5a:bb:3b:2f:
9a:10:2d:6e:88:84:90:1b:24:d3:2e:5d:ff:78:0b:
84:65:ff:98:4d:aa:09:8b:06:01:4f:6d:ac:d6:2b:
6f:ec:25:8b:08:7f:fc:6b:66:7d:89:e3:73:1f:48:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2F:6D:07:A8:97:7F:D8:26:65:86:7D:03:37:F2:40:E8:6C:89:47
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a2:c7:91:60:dc:43:eb:f9:20:6e:88:7c:96:d7:1c:f6:aa:
60:09:21:c4:2b:49:70:78:1f:f7:3a:98:6c:1c:4c:73:bf:33:
ef:a9:9c:93:bd:67:67:c8:88:06:f9:6b:01:35:0e:58:78:fe:
43:cf:60:ee:96:65:7d:aa:4e:46:3a:24:7a:34:19:0f:c5:01:
1f:51:30:3d:5c:8b:54:3a:15:12:91:9d:1b:0d:00:7f:6b:77:
55:09:74:33:fa:09:d8:c4:5c:da:0a:68:75:86:80:8c:42:60:
e5:b2:80:c4:bd:1e:43:8a:bb:86:9d:b4:44:93:f5:60:d9:93:
61:a5:12:2e:03:dc:a4:8a:d9:4a:48:da:c5:85:18:ed:4c:37:
39:7c:63:6d:49:ef:01:d7:80:47:95:db:ce:37:5d:a2:fd:9b:
a2:6e:8a:61:9f:8a:38:8a:f6:61:d6:d9:00:9b:77:f9:ce:e4:
a7:62:64:01:ee:1d:53:ae:04:f4:b0:05:01:20:54:49:b1:06:
61:e9:86:85:6c:00:2a:93:f9:5a:32:d2:c9:12:59:1b:a4:5a:
62:d8:bc:88:d4:5a:4d:88:c5:b6:75:2a:89:83:5e:f1:f0:04:
a4:c4:b8:8e:14:fa:07:1b:70:5e:e8:dc:33:6c:38:c9:1d:60:
26:ae:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:59 2025 by rpki-client