Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: rGe1DJe037Snd/dnw/U2aicz/dWL+EFexJOdgp8PgfE=
Subject key identifier: 4A:7B:22:61:DA:07:09:08:EA:AC:EA:8F:1E:64:CF:48:65:1A:56:74
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 019A71EEB338E4867AD8350F7A187AABD063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 09FE
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: MwOTM4NTpYgqtlsKuteambtyY6Q.roa (hash: 15PRhJOGtpjQfaXM28ile3ZgmOfmdwLuAPfdRlgIuMk=)
2: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (hash: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: 0W7hX+TCq2XTMmdhTegOnBClDCYahCgyXl+AWbOyC6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b3:38:e4:86:7a:d8:35:0f:7a:18:7a:ab:d0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=4a7b2261da070908eaacea8f1e64cf48651a5674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fd:a8:51:a3:53:ab:6f:fd:dc:26:ba:0c:96:
3e:4e:51:ef:00:f0:8b:20:e4:45:89:5f:9a:36:e6:
f4:dd:a6:2f:b2:ce:bd:7d:ea:9a:0f:6c:d6:76:16:
3e:59:b9:62:43:3d:fd:23:96:57:be:b7:38:5c:0b:
f3:a1:df:33:f6:6d:dd:76:2d:54:42:3f:71:fe:a6:
fb:51:81:3a:0c:b1:18:fe:fe:fb:3e:03:9b:43:46:
0c:e5:a1:cf:6e:9f:66:dc:fb:1e:a1:da:53:7f:06:
29:ff:fe:09:33:c5:2f:37:79:04:0d:0c:28:6f:86:
9f:11:5a:53:8a:84:a1:07:17:e7:30:25:18:f7:89:
05:54:82:2b:1b:29:52:44:f1:45:3b:00:ac:e7:ac:
a5:8a:67:06:3c:f9:10:fc:4e:de:cd:3f:eb:ac:a7:
69:1e:3c:ca:3e:d7:72:41:b7:f3:b5:2f:e8:88:c9:
ca:72:25:f2:ff:d8:39:b7:d6:cb:5f:71:32:b7:79:
73:c7:c2:c0:93:7b:26:72:ff:b8:90:08:e7:0a:75:
01:1c:e2:6e:89:d5:53:5a:e3:09:ad:9e:41:4d:92:
0d:cc:0f:51:dd:66:bb:b4:d1:e7:9e:0a:e5:89:5a:
0e:44:ed:ff:65:c8:2c:00:40:04:0f:76:e2:0c:e0:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:22:61:DA:07:09:08:EA:AC:EA:8F:1E:64:CF:48:65:1A:56:74
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bd:a3:1a:45:cd:1a:ff:a9:ea:79:3b:75:14:51:43:27:5d:
a1:60:ec:c9:60:f2:a4:1f:a9:74:3c:53:9b:c4:ce:15:9e:cf:
46:23:3d:fa:f1:56:0e:95:3e:d4:01:67:2c:dd:36:4e:9b:e0:
96:79:63:e9:47:0f:17:31:4e:f8:54:75:3d:7e:f5:db:c6:6e:
67:36:df:5f:3a:a9:69:bc:0f:78:89:74:27:fd:4a:24:93:32:
0b:01:c6:f9:cf:40:56:c5:dc:1c:60:f8:4b:2c:04:c4:5b:ae:
1d:3a:ef:af:0a:de:22:2d:93:75:7e:98:da:24:ed:c6:09:7e:
22:33:fc:2a:8c:b2:98:34:da:c0:a8:41:2a:30:ca:74:e8:39:
d6:e0:26:36:ad:ff:7d:75:b9:ca:19:de:e6:e2:88:4a:27:2b:
cd:6c:97:53:c6:aa:e4:4d:46:31:80:78:c1:2d:3d:cb:82:40:
9d:9a:cb:5c:86:24:fb:3a:64:64:ed:2e:a1:2a:41:1e:f4:32:
36:c5:6c:18:4b:0c:8b:7f:a3:a1:12:c7:a6:45:a7:9d:29:d5:
a5:14:eb:8b:34:24:dc:8f:a2:d1:5c:ed:d5:87:4a:a1:2b:61:
2f:96:bc:7c:9c:79:eb:3f:be:59:c2:6b:5e:b0:96:af:04:57:
36:0c:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:35 2025 by rpki-client