Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier: GGrCHGq1TM71OzlbRaSR5qhxBFogI7B1qwmbqR75BKo=
Subject key identifier: 25:7B:74:D7:16:98:7B:3B:F7:96:62:3E:61:CE:6F:FF:B5:D6:26:AF
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 019A71B9446DEAD2F27EE5DD06C132B18557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number: 0B78
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa (hash: OdCH0xAebcoZtMG/wZGi9eDKxyAg95m1InonEHGGddU=)
2: ZevzjSVvulMbqdJtY8B4bnQMQ18.roa (hash: W1po1ozIsux5yOEXy/FIuleWTHBIh+Vuq+plxlxVu8s=)
3: _xVJ1hQmic9FLrcgVmh-KAZfgtA.roa (hash: psme/h2vzp67q25AbH+m68R73Xe8GmTvYaqc5PS4Y/k=)
4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: GWlD+KoZYGf2uD4BYXGLte8bGNEdZQtYTwxVfGuGNHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:44:6d:ea:d2:f2:7e:e5:dd:06:c1:32:b1:85:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=257b74d716987b3bf796623e61ce6fffb5d626af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:14:97:45:da:99:00:f8:db:64:ea:2d:16:
66:7d:7e:6e:24:26:e7:ca:ec:ba:3a:05:61:f6:73:
1f:f6:b6:9a:8b:f8:64:bd:bb:54:6c:05:b6:7d:d1:
ce:9d:d6:cd:8e:6b:6c:49:af:be:27:7a:f9:d9:63:
71:11:df:75:57:c6:4e:f0:d7:c3:e1:49:11:41:11:
b7:e4:40:23:4c:30:29:c6:e7:6b:0a:27:9b:53:d7:
01:35:b4:c8:a4:cf:89:d1:47:f3:6d:61:43:c2:34:
5b:64:9c:b6:38:04:32:b2:61:92:f7:80:8a:a9:2c:
dd:d4:72:a2:5a:16:a9:35:2c:ae:12:67:56:6f:11:
a3:d7:7d:69:92:67:de:4e:9f:58:1f:79:35:d7:54:
af:d4:12:12:c8:09:11:ef:9d:18:37:00:ae:e9:0d:
e7:12:d0:90:d2:a5:05:80:0b:ff:d4:d1:bc:15:f2:
f2:e2:a5:35:6f:14:9f:d8:ee:50:fc:c6:29:b7:61:
52:1e:8b:d3:ef:61:90:26:dd:17:aa:be:0c:e4:35:
94:40:af:04:e2:41:f1:e3:9f:ce:57:c1:0a:a4:bf:
f1:4b:9c:ac:6c:ac:b7:6b:90:09:83:ee:0b:f8:9c:
29:80:1e:20:25:9e:b1:65:45:f5:1e:f6:34:bd:bd:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7B:74:D7:16:98:7B:3B:F7:96:62:3E:61:CE:6F:FF:B5:D6:26:AF
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6c:45:90:51:55:06:ad:52:f6:3e:81:34:57:e3:b2:8e:3c:
86:eb:66:37:f4:05:78:25:1e:49:aa:9e:b7:b6:1b:74:f3:ad:
d8:05:0f:20:b5:43:2a:c1:05:3d:41:d3:5d:e7:5e:98:8b:1b:
4e:ea:be:e1:35:be:a7:d6:ac:ad:7d:61:ad:81:41:28:c6:df:
66:fc:9b:3f:06:0d:7d:20:44:09:f5:6d:0a:e1:10:4d:9b:39:
03:6a:91:ab:57:d2:9e:55:9d:e6:1c:1c:eb:ae:e4:d1:d0:c4:
b8:56:3c:58:95:9b:8c:2a:93:9b:23:b1:3d:c4:6e:22:bc:f1:
2a:56:7e:ac:23:67:19:01:4d:ff:6e:5e:e3:e4:5e:07:b2:4f:
c7:5b:db:64:1d:b4:50:ce:a3:6e:a4:85:a6:d5:9a:76:fb:51:
65:96:9a:d9:cd:3c:a0:6a:2a:c9:50:50:68:7a:fa:ba:61:d9:
35:70:68:ce:48:bd:e8:cf:d7:6b:db:07:34:ca:09:43:2c:6c:
06:f9:3a:b0:16:f7:ff:63:11:a1:f9:e0:56:72:8a:49:fe:6e:
d2:c4:c8:c3:19:2f:5f:a0:da:8b:d8:ed:ee:17:9f:a8:3b:36:
e5:e0:04:d1:30:8e:aa:09:9e:84:b8:e8:06:06:ff:82:37:69:
0d:cc:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:49 2025 by rpki-client