Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: w3k+sJ3p9/TrxsDcB6ySkO8+LjjB0hplgkPjpP8uUwE=
Subject key identifier: D8:51:46:22:39:9A:B9:A7:78:69:57:13:F3:55:51:7A:A3:DD:0A:49
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 019A7149969C9136F6CB479F99AA0E7D39C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 12DB
Signing time: Tue 11 Nov 2025 05:00:39 +0000
Manifest this update: Tue 11 Nov 2025 05:00:39 +0000
Manifest next update: Wed 12 Nov 2025 05:00:39 +0000
Files and hashes: 1: 3ir5WkvJIRxtwZei2sctSN0sCz0.roa (hash: kbUd9aHqn6kQ8QUhYDDaCsn+6zI4AKFQfFGDo83vd6o=)
2: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: l82SNGX8aFAi8ApGTM0BvU3otYHBrUujZfR+43MOyIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:96:9c:91:36:f6:cb:47:9f:99:aa:0e:7d:39:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Nov 11 05:00:39 2025 GMT
Not After : Nov 12 05:00:39 2025 GMT
Subject: CN=d8514622399ab9a778695713f355517aa3dd0a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:28:bc:94:48:85:b6:ca:99:3f:6c:35:cd:
ef:3e:59:73:75:5b:a5:41:09:53:ef:6e:f8:ad:f1:
be:58:24:7f:3e:5c:5c:ba:c1:9f:cc:1b:58:15:38:
c8:48:b4:06:f5:e8:44:aa:69:d5:6e:3f:75:99:5c:
10:3a:80:6e:6b:d9:15:f7:38:a9:32:7c:1a:72:f6:
e2:ee:12:9a:fe:de:e1:12:d1:17:01:3f:f2:34:2d:
d9:59:bc:43:c3:33:5f:80:84:3a:27:28:96:61:8d:
d3:a9:73:c1:f5:3f:da:8a:a6:69:4c:d3:2e:52:07:
fe:dc:60:6a:79:0a:f0:72:be:c7:c8:73:31:ed:b6:
0f:9e:7b:e4:47:e3:f2:cc:10:3f:ee:5c:b0:d3:f5:
74:25:e5:f8:91:d1:14:8f:4f:a7:ab:d4:87:93:12:
a3:0a:3c:0d:ab:3f:d4:27:99:89:8a:7c:f0:52:1a:
5d:b8:15:49:d6:32:57:0f:d2:af:ed:c4:dd:b5:68:
5e:bc:f8:71:d9:c9:fb:1d:fb:c5:63:9d:03:e2:93:
6d:37:93:d0:f2:e4:31:43:23:ac:9a:f7:08:4d:68:
1e:82:59:e7:46:5c:0b:86:dd:86:4f:cb:7b:f8:cf:
db:15:fc:d6:a0:b6:98:6b:6f:56:af:15:a1:3b:fb:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:51:46:22:39:9A:B9:A7:78:69:57:13:F3:55:51:7A:A3:DD:0A:49
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:d3:7e:9f:23:db:b0:dc:1a:b2:46:42:66:37:36:74:d2:e7:
8e:19:4a:0d:e3:53:59:00:04:96:a6:4a:2c:4a:5c:33:f6:ae:
2f:24:bd:d0:09:15:2c:f8:52:60:71:88:c4:ca:e8:8f:a4:93:
bb:66:cd:09:ef:da:d3:62:2d:b4:9a:8d:5c:c7:e8:8c:2e:78:
4c:d9:e1:34:42:e1:1d:7f:c4:da:39:ac:99:77:c5:bc:b0:0b:
0a:c7:9c:b2:14:85:92:ca:e1:e9:9b:f8:f7:f9:bf:44:87:90:
30:9b:8e:3a:6a:44:86:7c:55:c2:1c:dd:66:fb:ea:3f:a6:af:
c3:23:34:61:76:6f:a1:2b:7e:4d:55:eb:b0:70:6d:14:e4:98:
c8:5a:1f:de:99:29:90:b2:8b:06:7a:3b:02:81:40:18:16:33:
e3:01:65:fa:6c:8a:cb:fd:b4:5e:6c:20:23:c5:10:e7:dc:1c:
7b:8e:42:f2:b1:5f:e8:47:62:5d:92:3b:7b:3c:6c:c8:3f:eb:
31:20:a5:b6:1b:5b:16:16:eb:54:d9:80:d2:7d:3d:6d:e5:7a:
e5:16:f5:5f:d2:b3:0d:f3:31:06:7a:61:9d:09:ca:8f:1b:8e:
da:34:82:1c:ad:57:3d:e6:79:1b:95:10:f9:2e:c9:ff:5e:06:
c1:88:7b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:18 2025 by rpki-client