Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
File: yQDvPdXdG-FdCLuTy91jtKyGDms.mft (raw, json)
Hash identifier: YZK7kbhX9eKIC2Cj7iX4mZx3PaVtYHyY/O3BQq1oJuc=
Subject key identifier: 81:5E:7E:57:2A:88:52:A8:3A:2E:A4:F8:3A:26:EB:C8:41:06:84:65
Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Certificate serial: 019A7112DBE3DCC57CCC13F26339B8DC3D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
Manifest number: 118F
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: kNwo0JsX3ICm84nVo9dsXQUG9kE.roa (hash: NK1ts8W0/zMpiUmbhnMjlz816+vYjFkNttYVHl02NWQ=)
2: yQDvPdXdG-FdCLuTy91jtKyGDms.crl (hash: NVrv6RuGEXDVmmVw3OlIIwNPIzAzlLiE99mDXU109L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:db:e3:dc:c5:7c:cc:13:f2:63:39:b8:dc:3d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=815e7e572a8852a83a2ea4f83a26ebc841068465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:73:b3:1b:b4:28:dd:86:3f:4a:da:09:b1:
90:3b:17:50:d3:7e:3f:c0:03:bc:d2:6d:6b:af:e4:
61:78:06:75:33:6c:47:66:8b:ef:71:d5:a5:2f:de:
83:bf:9f:ba:2e:7a:b0:2f:9a:a1:a8:a6:70:37:54:
5b:62:ae:3c:ca:19:2f:c0:ad:b2:80:b6:df:7e:6d:
5b:43:6a:0f:4f:6a:34:e4:0f:40:ab:27:e4:dd:47:
f7:f8:83:e8:0d:af:20:ef:c3:e5:87:87:c8:1a:69:
8e:f7:4c:9a:1d:b3:2e:36:56:97:66:60:f0:29:ff:
22:39:16:21:1d:fa:1e:1d:2e:85:28:37:06:db:e3:
db:22:3b:40:81:bb:d0:28:ff:c5:6a:e3:d9:5a:0a:
83:4a:05:fa:dd:b0:3a:0f:12:83:e5:e0:13:e7:f3:
fd:c2:b8:9a:59:71:1c:ed:65:a7:34:1d:5d:0b:b4:
b8:4d:c7:56:38:f1:69:22:45:0c:76:85:e2:f7:e8:
48:05:ed:b1:fe:d6:f0:c6:cb:c6:f5:72:c8:6b:3b:
1f:3a:83:a5:05:c1:8c:0d:7e:35:4f:6c:3d:7d:6c:
29:9a:ca:7b:22:75:b0:00:c5:c6:8e:67:ed:61:7b:
c5:da:39:1b:e3:32:1d:69:93:aa:8f:cd:cb:48:9f:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5E:7E:57:2A:88:52:A8:3A:2E:A4:F8:3A:26:EB:C8:41:06:84:65
X509v3 Authority Key Identifier:
keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:98:46:75:0a:e1:93:80:19:15:ce:1c:b2:1c:ec:2f:59:6b:
86:20:e4:b3:84:8b:e6:60:9a:64:bd:32:cd:f7:bb:28:71:28:
a7:d0:d8:b1:58:16:93:1d:b0:bb:bb:01:5d:82:be:9d:5d:8f:
a1:dc:17:b2:0b:02:7d:34:2d:ef:8f:9c:26:92:9b:c9:3f:b0:
84:bd:86:d4:1d:c5:89:93:e5:01:f3:ba:50:2e:c7:6c:17:49:
dd:9b:b4:8a:f0:4a:7a:b5:06:1a:eb:13:12:a7:6b:f3:ba:ce:
08:9d:e3:a5:87:78:06:4f:1f:93:b1:d0:ec:2a:1f:52:d6:33:
20:7f:1b:3e:ba:2d:78:b9:06:91:8d:a8:b3:be:22:a2:69:00:
03:8b:60:d8:fa:67:33:f1:9a:d8:ea:88:37:8e:ed:b7:70:82:
a1:a4:5f:9f:9e:20:f2:cb:99:91:4c:c2:45:7f:32:e1:78:85:
30:be:ec:6f:ff:fa:22:cf:cc:b3:f8:d0:33:3f:bc:73:ac:de:
7c:5b:f9:0a:a6:58:da:0d:0a:db:61:4e:e2:eb:1a:34:e3:c2:
a3:cd:2f:2f:33:98:80:7d:39:dc:f1:e1:bc:89:3b:bf:4c:b3:
85:fc:8a:08:7e:0e:f4:df:68:06:f0:43:4f:66:df:ba:0b:9e:
fc:33:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:01 2025 by rpki-client