Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: 6WI+RT1nzLq2EPGFB0xKGO0nmSa8giIaAEFWYb8vh+I=
Subject key identifier: 33:5C:E3:15:92:E7:44:92:D4:15:D4:B6:3D:3D:FF:D8:7B:54:77:DA
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 019A71EE7069D8B413595BCA16C7F1E287AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 0A28
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: EdKvKktbhV253248rH8OS7KgOJc.roa (hash: OVq8FxeeYttd7uYMiCGl4rm6BCNN8JrWv82y6k+zOKs=)
2: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: 0IysZ9ueH2p1l8ujALoc7bzzqO9SOmSCNLqa9H2jFkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:70:69:d8:b4:13:59:5b:ca:16:c7:f1:e2:87:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=335ce31592e74492d415d4b63d3dffd87b5477da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:59:1e:7d:0a:a6:75:bc:d5:a8:22:68:e2:
83:18:5a:97:06:6d:b8:d3:26:05:a7:e5:34:9b:69:
6b:89:4f:d6:61:92:7c:db:2c:94:f1:03:96:ed:46:
93:ee:5b:9a:75:f9:f4:da:55:74:ab:2f:a8:22:23:
78:34:c3:c6:82:02:20:51:c8:1b:67:54:62:db:99:
9f:f4:70:a7:1f:a4:a3:25:26:c9:43:07:64:41:83:
2a:3e:1f:f1:f8:5e:11:b3:ef:84:19:fc:b5:9e:89:
9a:db:3c:69:aa:02:19:77:e9:60:24:e3:4c:fc:b8:
f1:0b:a3:ee:10:a2:25:22:5f:65:3a:ed:27:ac:0a:
8f:c7:9a:0c:1a:62:5d:70:92:02:26:76:92:c0:6a:
7d:62:b7:84:50:92:b2:85:10:e5:f3:72:38:81:d4:
f0:d3:15:a2:37:5d:ed:d9:f2:d2:15:17:4f:ff:97:
d8:b6:7c:e1:1e:be:bc:5f:da:a4:78:8b:00:40:89:
6f:72:14:66:d8:31:59:21:aa:f0:4f:66:68:2b:f8:
1a:31:21:a6:09:66:6f:63:d1:8d:f9:01:cb:43:d6:
2e:62:95:b6:72:eb:3e:01:81:2d:73:7d:e7:1c:00:
09:98:7c:de:7a:aa:5e:89:36:12:9a:3f:ab:10:3f:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5C:E3:15:92:E7:44:92:D4:15:D4:B6:3D:3D:FF:D8:7B:54:77:DA
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8d:de:83:bf:52:a3:f4:cb:de:ff:35:8f:a0:3b:6b:98:74:
4b:56:e0:9d:66:74:fc:ac:1c:ef:b9:f3:e5:d0:0e:da:23:cf:
d9:22:55:20:5c:2c:f4:02:14:32:80:06:e0:bd:9d:21:8d:0d:
77:63:eb:19:2c:41:6a:34:57:00:bd:18:92:82:d1:57:88:6c:
7e:e5:96:98:5d:37:9f:f5:3f:a6:7c:d2:32:74:51:88:7e:f0:
98:7d:69:49:2e:b1:a2:75:f5:30:98:8e:da:1e:09:8b:f2:b9:
02:31:f0:51:d3:6a:c9:97:2f:1e:15:68:57:33:18:8f:be:54:
ad:8a:c4:90:c9:da:3c:75:5d:b1:48:01:b0:ca:0c:34:54:56:
a2:b7:66:a5:dc:70:c3:c2:b7:fb:91:ff:49:27:1f:c3:18:eb:
b6:19:cb:f2:a3:f7:03:83:aa:68:bd:06:d8:ac:ee:b2:dd:68:
b1:ab:e0:d3:59:70:02:4c:d3:08:ac:26:8f:69:a2:e3:cf:fe:
4a:d4:6d:57:3e:ca:c4:20:1a:bb:ce:ae:69:ad:a0:24:3d:75:
96:49:a3:83:ac:06:d8:fb:11:6a:72:19:a6:7c:a2:59:b1:b4:
ba:bf:26:d0:33:d7:2c:05:75:27:ea:c2:c5:0e:51:16:32:3d:
6a:ce:e7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:12:22 2025 by rpki-client