Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: UKM4LrtHPQ5AD3g55mNGvwTOeBqlora+X5oxptoL2WM=
Subject key identifier: 71:6E:CC:B9:13:E8:E4:4D:CE:48:D6:6B:11:A3:1B:D2:0C:A7:AF:11
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 019A4B4E81CA895322B91C9850252BC5D4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 072B
Signing time: Mon 03 Nov 2025 20:00:27 +0000
Manifest this update: Mon 03 Nov 2025 20:00:27 +0000
Manifest next update: Tue 04 Nov 2025 20:00:27 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: Bofs4ohNskP7oRhXntEkamcTByY.roa (hash: 2wFqF3IDJ9WWoiEwRf3HPN+kDBVLZG7FcftR+HQ+PQ0=)
3: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: QAT2l1E/TflwQmjduaG7AnnvAHwGO15jKXX2ff62Cnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:4e:81:ca:89:53:22:b9:1c:98:50:25:2b:c5:d4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Nov 3 20:00:27 2025 GMT
Not After : Nov 4 20:00:27 2025 GMT
Subject: CN=716eccb913e8e44dce48d66b11a31bd20ca7af11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:1e:59:76:e7:50:ba:85:e8:f1:a5:4c:ac:
cb:9e:7a:83:41:a3:48:b6:17:22:d3:23:22:14:05:
3d:59:20:1a:62:e7:32:fe:19:b6:06:20:d0:7f:fb:
0f:d4:30:b6:1b:cd:6c:e4:1f:56:2f:a1:e1:88:d9:
cd:02:3b:5d:33:9a:6d:fb:a6:60:a0:ee:46:ed:f3:
7a:fc:cb:d4:46:67:d4:27:af:2c:24:2a:53:65:17:
41:23:d0:3d:4a:a6:e7:1a:44:67:a7:e6:ca:21:11:
3b:2f:aa:04:18:4c:20:59:ba:9e:e2:cf:4a:75:7c:
92:a5:b0:91:08:a2:6c:97:71:4b:38:40:c0:ea:ee:
9e:96:b6:ba:6e:54:48:e7:c8:1e:6d:3a:31:a1:04:
7f:f0:4b:53:aa:4c:04:ae:98:cf:2d:96:bf:4c:80:
78:99:ad:fc:4a:8d:c8:83:c1:fc:39:b9:70:d6:a6:
dc:7b:5a:49:f9:34:db:a6:eb:b2:d3:b0:bb:b1:36:
a5:82:cd:8e:63:b7:fa:4c:de:41:e8:87:8a:d2:c3:
05:0d:88:99:68:ac:3b:19:70:1a:03:66:6b:29:2e:
3f:d6:ac:4b:1f:89:c2:2a:93:f6:a2:28:27:6b:18:
78:f0:a7:48:b0:5a:de:a8:2e:d4:df:32:55:8e:ef:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6E:CC:B9:13:E8:E4:4D:CE:48:D6:6B:11:A3:1B:D2:0C:A7:AF:11
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8b:43:4a:f4:ea:69:20:72:e2:29:20:6b:52:7a:5b:2a:bd:
75:bd:53:f4:7b:1c:b9:38:9b:61:b3:6b:ba:4b:9d:dd:a0:9f:
e8:2c:5f:a5:7c:12:75:5e:da:27:d8:69:36:8d:e3:ed:36:76:
eb:fb:dd:2c:6a:4b:be:e4:96:ef:21:78:8b:b0:33:de:85:6f:
95:c8:54:3f:60:26:66:04:89:f6:e0:f5:d9:41:64:38:42:10:
42:10:ba:72:b2:14:e6:87:bb:fd:b7:0c:52:21:4b:dd:d0:3b:
02:65:e8:bc:c0:a4:c4:d1:35:d6:a9:f8:1f:d1:3c:47:0d:58:
b2:30:4e:bc:c4:b5:77:08:48:19:6a:d2:bc:93:03:e5:6e:6d:
51:08:8d:e5:a2:8f:e9:08:88:a3:66:23:d4:44:2f:68:21:fa:
49:e6:db:71:14:e5:8b:35:51:c2:55:f2:5d:6d:5c:68:88:ad:
46:3d:a9:fb:90:7c:9d:1c:db:11:64:8e:7e:78:cd:3b:49:c7:
50:35:bb:d8:5f:a2:11:54:0b:99:fc:11:2f:fb:a6:c4:a7:97:
44:af:6a:96:62:74:71:a2:d8:39:f9:9f:31:8e:a4:22:36:d2:
8d:28:54:93:cf:94:1e:00:e6:ff:74:da:b6:6e:a4:b6:fc:bb:
7a:e7:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:57 2025 by rpki-client