Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File: yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier: n6ieY2EtqTefMxtt9K65JGIdSyl1BZqJyO74wQhDaMw=
Subject key identifier: 26:8F:2B:5B:6C:98:94:D5:FD:6A:07:14:50:A4:9A:4F:8D:44:7C:4D
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial: 019A27788E00113495E570DCB4070722009D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number: 023C
Signing time: Mon 27 Oct 2025 21:00:03 +0000
Manifest this update: Mon 27 Oct 2025 21:00:03 +0000
Manifest next update: Tue 28 Oct 2025 21:00:03 +0000
Files and hashes: 1: qP-gsAFmgVOc4H-oZTo26Ptp5vw.roa (hash: QT6Tbak41BDvyGiXFOwS3KI7ZlriOjq7qFbGvl+22Ak=)
2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: rFk/FQFGuuxGF24KMTZ4Q6Svu1WTz0rr5Tv3QY5IgmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:8e:00:11:34:95:e5:70:dc:b4:07:07:22:00:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Validity
Not Before: Oct 27 21:00:03 2025 GMT
Not After : Oct 28 21:00:03 2025 GMT
Subject: CN=268f2b5b6c9894d5fd6a071450a49a4f8d447c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:fc:03:07:dd:70:d6:57:ac:b8:77:52:2e:
6d:c1:2a:3f:3f:d2:83:02:a6:fa:f2:98:b8:6a:c4:
fa:11:c2:ef:59:e9:b1:31:b4:3b:a9:21:16:5e:20:
92:7e:7e:82:36:69:8b:e0:4b:58:10:c8:ec:82:0a:
56:6a:4d:cd:81:8a:8c:7c:40:da:b4:5d:bd:6d:bd:
3d:36:ab:33:bf:fd:65:ab:fc:25:50:9e:0f:39:e1:
fc:9a:d6:a3:a3:d3:0e:9f:4c:56:e1:2c:91:0d:c7:
18:ae:5c:eb:a7:72:23:a0:40:a0:65:8c:e9:2f:8b:
27:b3:59:c9:6c:56:94:6d:3d:12:d4:33:0b:96:14:
ab:c7:cd:2b:2c:15:0b:49:d5:e2:a5:50:3a:58:a6:
ba:8d:61:bf:62:b0:74:b3:b9:83:e0:cb:dc:c9:9e:
93:7e:32:49:13:f5:c8:bf:6e:eb:32:2b:1d:83:a2:
5a:1f:c7:cb:cd:dd:63:2b:80:9f:ae:e2:82:04:e2:
59:53:da:42:db:d9:63:9e:d9:e0:fe:eb:ca:71:bd:
98:d6:34:9d:b8:d2:94:67:c0:15:44:81:fd:d0:12:
25:11:6c:02:5a:78:a7:48:e1:30:7d:78:00:6c:4b:
a8:1d:23:a1:43:56:20:d2:63:00:16:cb:ba:f1:31:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8F:2B:5B:6C:98:94:D5:FD:6A:07:14:50:A4:9A:4F:8D:44:7C:4D
X509v3 Authority Key Identifier:
keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a6:72:c7:25:6b:f2:bf:38:f5:c8:33:83:d9:51:2f:58:44:
b7:30:e5:82:f8:d0:7d:3d:83:42:aa:b7:1b:08:66:66:aa:3e:
24:12:dc:f6:d6:b9:f9:0d:c3:96:1c:ab:75:c5:2a:52:28:3e:
a5:9d:ba:bd:bb:a4:6e:cc:5b:f9:32:dc:17:12:15:84:b7:55:
8b:ba:c1:e0:fd:51:4e:d9:84:41:e8:28:e6:a0:c5:c2:8b:cc:
0e:40:44:ee:e0:7a:4c:cf:35:95:e1:7e:b4:41:ce:95:89:a1:
a5:45:e5:0e:48:2a:1b:10:5f:fe:1a:e9:28:ca:35:71:dd:5a:
6c:85:e1:f9:e0:4c:e2:c7:8d:51:a6:31:55:2e:92:12:2b:61:
27:74:ad:68:7f:f4:a4:0b:6d:cd:f5:a1:fa:b2:13:e8:38:6d:
09:35:f3:06:7f:39:0d:dc:20:f5:fd:18:6c:b3:15:53:e2:d7:
d3:24:09:9b:70:fa:33:2a:5d:d3:d1:47:1a:8e:9f:d9:57:33:
4b:c4:77:1f:11:18:73:78:fc:27:34:51:d3:18:2f:3d:de:34:
8d:f6:8d:5b:b9:b5:22:a7:e9:b7:08:de:66:74:54:03:39:ee:
53:85:c6:98:4f:ef:70:03:46:fb:2e:a8:d3:a8:07:e9:4d:f9:
fc:a5:6e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:58:24 2025 by rpki-client