Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
File: yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json)
Hash identifier: YrAsrqfSh/8n2cwxcM4kZTJE/avs13FruuingJCBnWI=
Subject key identifier: A4:13:C2:96:3A:EA:27:E5:7F:F6:D2:5C:E7:87:82:41:8E:5E:BC:4B
Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
Certificate issuer: /CN=caf23362dc1a714536d8b5e143f79dada002713d
Certificate serial: 019A70A55AEA41F80D9E4613B6133D2AA3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
Manifest number: 0803
Signing time: Tue 11 Nov 2025 02:01:16 +0000
Manifest this update: Tue 11 Nov 2025 02:01:16 +0000
Manifest next update: Wed 12 Nov 2025 02:01:16 +0000
Files and hashes: 1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: JlX+Flyb/XC/9pSRKYMj+h3I0NbbYddj+kYOUJkS6Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:5a:ea:41:f8:0d:9e:46:13:b6:13:3d:2a:a3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d
Validity
Not Before: Nov 11 02:01:16 2025 GMT
Not After : Nov 12 02:01:16 2025 GMT
Subject: CN=a413c2963aea27e57ff6d25ce78782418e5ebc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:12:cf:47:8d:f6:37:1b:57:df:19:ef:3a:
99:6b:d3:b8:41:09:9d:1b:b5:36:ed:df:23:ba:17:
e0:3c:e2:0e:40:20:3f:c1:2f:19:dd:1f:52:b6:de:
d3:2b:d0:1e:55:64:90:18:7c:14:24:03:26:f5:8d:
7d:7a:fe:86:31:2d:81:7a:8c:aa:34:10:ce:29:0d:
26:ca:50:68:9b:d2:00:0a:31:e7:08:24:e6:8f:e9:
4c:e7:aa:5a:86:0e:4c:10:99:50:08:3c:48:f8:f4:
f4:1a:40:6b:05:10:c3:46:e7:65:e1:58:a9:30:72:
ea:28:76:0a:a6:56:f1:af:29:d7:a7:cf:86:e2:7a:
66:36:7b:ac:67:03:bd:95:b3:7b:c9:d5:3b:31:91:
a8:4e:3a:10:78:56:ce:60:18:32:fa:19:3c:c1:7d:
6f:74:a0:fc:de:29:9b:a9:6b:cb:36:c5:4b:98:b7:
93:01:cc:27:b8:5c:23:de:75:64:55:1f:1d:af:c8:
3d:63:d5:76:58:21:7d:f4:df:6c:ac:8f:75:07:34:
a0:83:b7:2e:70:f1:db:51:14:79:2a:bc:29:1b:22:
dd:08:4e:d3:0d:ad:67:05:45:42:f6:5d:d0:70:75:
1c:49:b9:bb:94:b2:63:32:e9:92:b2:7c:72:33:60:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:13:C2:96:3A:EA:27:E5:7F:F6:D2:5C:E7:87:82:41:8E:5E:BC:4B
X509v3 Authority Key Identifier:
keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:57:82:45:2d:8f:d7:5d:3f:98:b4:92:9c:7e:22:0c:9f:50:
db:fe:a1:58:55:72:0a:49:66:65:7d:56:e3:ed:b9:3e:49:f1:
23:73:5f:b2:8e:dd:71:8a:10:af:0f:f5:f1:fa:57:4d:44:f1:
e9:d1:52:92:1a:c7:d0:d6:a6:b3:19:4d:1f:0d:90:a9:27:09:
a5:1c:e0:55:d5:d4:31:ef:69:c3:f2:75:c9:71:36:68:38:ed:
7a:47:e4:64:47:4a:95:34:81:cf:d1:3a:0d:d6:62:dd:6e:be:
c3:73:c8:98:a4:12:b5:04:e1:b7:4a:74:cd:cf:08:77:bc:ab:
20:e7:1b:40:e3:a5:51:15:f3:68:9d:31:f9:f7:9e:8a:fa:76:
02:a2:71:ca:86:04:5f:e6:a4:a7:7c:61:f0:bf:cf:b5:ae:39:
ce:c5:84:70:d3:f2:25:5e:b5:bf:a2:d7:56:f8:e2:19:37:51:
a3:44:26:f5:77:d4:74:1c:76:53:75:02:1b:fd:b2:10:d8:c4:
d2:76:f6:4b:ee:4f:ee:85:6a:3f:36:e3:3c:a4:b8:97:f0:f0:
3e:e7:80:5f:9f:30:23:01:0a:e3:36:02:93:8d:1d:e1:b9:90:
49:84:f7:2e:41:5f:ff:bc:f3:b8:81:d8:41:99:e1:7e:85:4a:
7d:55:bd:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpVrqQfgNnkYTthM9KqPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjIzMzYyZGMxYTcxNDUzNmQ4YjVlMTQzZjc5ZGFkYTAw
MjcxM2QwHhcNMjUxMTExMDIwMTE2WhcNMjUxMTEyMDIwMTE2WjAzMTEwLwYDVQQD
EyhhNDEzYzI5NjNhZWEyN2U1N2ZmNmQyNWNlNzg3ODI0MThlNWViYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgoSz0eN9jcbV98Z7zqZa9O4QQmd
G7U27d8juhfgPOIOQCA/wS8Z3R9Stt7TK9AeVWSQGHwUJAMm9Y19ev6GMS2Beoyq
NBDOKQ0mylBom9IACjHnCCTmj+lM56pahg5MEJlQCDxI+PT0GkBrBRDDRudl4Vip
MHLqKHYKplbxrynXp8+G4npmNnusZwO9lbN7ydU7MZGoTjoQeFbOYBgy+hk8wX1v
dKD83imbqWvLNsVLmLeTAcwnuFwj3nVkVR8dr8g9Y9V2WCF99N9srI91BzSgg7cu
cPHbURR5KrwpGyLdCE7TDa1nBUVC9l3QcHUcSbm7lLJjMumSsnxyM2CkxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQTwpY66iflf/bSXOeHgkGOXrxLMB8GA1UdIwQY
MBaAFMryM2LcGnFFNti14UP3na2gAnE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYt
MDdhYmU4MzY5NDI4LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYtMDdhYmU4MzY5NDI4
LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANleCRS2P
110/mLSSnH4iDJ9Q2/6hWFVyCklmZX1W4+25PknxI3Nfso7dcYoQrw/18fpXTUTx
6dFSkhrH0NamsxlNHw2QqScJpRzgVdXUMe9pw/J1yXE2aDjtekfkZEdKlTSBz9E6
DdZi3W6+w3PImKQStQTht0p0zc8Id7yrIOcbQOOlURXzaJ0x+feeivp2AqJxyoYE
X+akp3xh8L/Pta45zsWEcNPyJV61v6LXVvjiGTdRo0Qm9XfUdBx2U3UCG/2yENjE
0nb2S+5P7oVqPzbjPKS4l/DwPueAX58wIwEK4zYCk40d4bmQSYT3LkFf/7zzuIHY
QZnhfoVKfVW9zw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:16 2025 by rpki-client