Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File: yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier: x1/A98G9PITf787/eN7LjO1lu2AZhRMWb/++QQmmLDE=
Subject key identifier: 55:6B:70:38:31:6A:46:0A:ED:90:C0:A5:C9:03:1B:F9:7B:BA:54:97
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 019A714A25B52F37C5309AB207769B7D886C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number: 0C24
Signing time: Tue 11 Nov 2025 05:01:15 +0000
Manifest this update: Tue 11 Nov 2025 05:01:15 +0000
Manifest next update: Wed 12 Nov 2025 05:01:15 +0000
Files and hashes: 1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: CbfZOo8vUhxJQBbiTPOKIxHiogBuvBFYnkfG9mOf7Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:25:b5:2f:37:c5:30:9a:b2:07:76:9b:7d:88:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Nov 11 05:01:15 2025 GMT
Not After : Nov 12 05:01:15 2025 GMT
Subject: CN=556b7038316a460aed90c0a5c9031bf97bba5497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:09:34:d2:9d:0b:3f:43:29:c8:40:30:26:
9b:41:54:52:8b:86:8d:eb:78:a0:c1:8a:af:03:f6:
98:19:8d:87:0c:c9:04:fd:11:71:4f:f7:8f:c3:6f:
8e:c4:9d:26:df:80:26:92:29:03:13:a6:c3:cf:0b:
88:85:68:3d:fb:9c:9d:e1:a5:29:a9:96:fe:c8:eb:
0f:18:5d:a8:a0:28:36:f4:b5:b9:a3:96:90:b9:d0:
ac:8e:cc:25:27:24:13:c1:92:ee:4f:59:85:a5:4e:
e9:df:10:41:3c:7c:ff:93:c5:c9:88:f6:8b:c5:72:
ae:fd:ea:9b:98:b5:24:08:f2:cf:c0:4f:5d:c8:ae:
1d:cb:e5:9c:40:44:b4:45:8d:c3:00:d0:8b:51:72:
6a:a3:bc:33:07:4f:d9:ce:a2:7c:5d:34:e9:a7:ef:
04:a8:8c:2f:98:74:ae:45:99:65:d1:f6:26:b0:92:
5d:2a:7f:8f:90:70:37:08:d5:61:69:28:a3:fa:f8:
3d:41:6b:67:17:b0:7c:14:00:79:0e:2b:28:49:a0:
9d:3b:13:c4:ae:89:c8:b3:2d:1a:72:0a:b1:d5:71:
d1:46:01:04:5d:ae:53:28:65:68:af:68:a3:2e:4f:
42:6b:1f:32:20:58:7d:24:9f:74:bb:b2:db:d9:cc:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6B:70:38:31:6A:46:0A:ED:90:C0:A5:C9:03:1B:F9:7B:BA:54:97
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:aa:79:df:ca:2b:c2:c8:ee:e6:18:ac:04:8e:bf:90:61:ec:
7d:e2:d4:0c:40:2f:0c:eb:1c:de:f9:38:dd:79:c5:87:67:e2:
65:e8:ff:49:bd:f7:92:b4:86:62:89:35:29:13:cd:d2:18:fa:
41:8c:39:97:af:96:ec:1b:8d:06:e6:ea:b0:32:1e:65:54:5e:
38:6d:7d:a6:80:e8:4d:5a:f1:22:a1:dd:e1:f3:a2:3f:61:fd:
54:da:1b:54:58:16:84:90:31:da:b7:d2:e0:90:18:f8:80:82:
0e:28:c4:b8:19:d1:bd:2e:ef:5c:12:2e:4b:28:f2:97:9a:41:
66:15:76:58:91:50:08:30:ec:29:24:72:9b:c7:64:15:13:25:
13:4b:8a:37:ed:33:06:9e:14:96:42:3c:71:5e:71:1f:53:8e:
2a:d1:61:16:ad:89:9c:a1:88:81:44:f7:88:51:e5:92:10:c8:
7e:e1:c2:4a:f0:d6:6a:1f:0f:69:93:56:1b:d5:46:be:41:39:
c1:93:1a:e3:63:fd:c9:77:9f:d7:fe:e1:7f:12:91:9e:12:b8:
67:0b:61:92:5b:51:54:66:95:f5:4c:71:b6:7f:8a:aa:13:8c:
2b:23:af:1e:5b:40:ac:f8:c6:05:64:84:e6:29:88:64:63:5b:
b4:c3:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:41 2025 by rpki-client