Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: o3/Sd5UDML2giM96l74rV7gkBvAhqy723RexDPHoY5Y=
Subject key identifier: 3F:24:E2:74:74:5A:F3:08:BE:47:DB:6B:BA:D9:83:64:8D:7D:46:95
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 019A1D2C839A88308DE4FD0A44591956384C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 113B
Signing time: Sat 25 Oct 2025 21:00:47 +0000
Manifest this update: Sat 25 Oct 2025 21:00:47 +0000
Manifest next update: Sun 26 Oct 2025 21:00:47 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: PEigfOWl89yJ8G/4N0GZfHwLM36maV54eHKHmNDB0xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:83:9a:88:30:8d:e4:fd:0a:44:59:19:56:38:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Oct 25 21:00:47 2025 GMT
Not After : Oct 26 21:00:47 2025 GMT
Subject: CN=3f24e274745af308be47db6bbad983648d7d4695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:31:2d:f5:41:8a:27:f6:0b:36:66:e2:48:
27:c1:e3:72:b0:0e:c3:0f:f2:81:33:41:59:19:dd:
0e:3a:d6:e6:4f:e6:ce:ff:49:3e:9a:d9:60:70:1d:
8f:cc:41:1a:a7:00:d6:4a:31:4f:ff:e6:3a:c9:91:
25:b5:32:5b:c4:f8:c3:5c:13:9e:fd:20:52:b6:2d:
f8:b7:70:b9:bf:bf:42:d7:40:ea:e2:25:10:3d:8a:
ff:f7:c4:f5:07:04:c9:3c:a8:24:24:83:1e:15:77:
07:b2:cd:43:02:02:88:3f:54:30:ce:72:52:61:b5:
4d:b9:9a:f8:2f:6a:66:99:ba:0b:e1:5e:5f:cf:f3:
77:14:df:51:00:d0:08:b4:cd:db:6d:9b:47:4e:8d:
f2:49:a5:2d:33:30:12:3e:26:77:49:73:c8:d7:a6:
d2:e5:49:15:14:a7:73:1e:3c:a2:42:6d:d7:cd:46:
55:12:e8:e6:c4:70:28:11:5f:6f:ff:82:bf:df:23:
e2:5a:e6:d1:f6:c7:5f:25:c5:39:0c:92:54:31:22:
75:5e:26:31:1b:57:5e:a1:e2:2a:98:dd:56:71:67:
f9:8e:f5:ba:5f:9d:62:de:ad:68:30:b5:34:94:a8:
65:0e:07:42:73:87:98:94:23:4d:fc:43:bd:9d:83:
d0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:24:E2:74:74:5A:F3:08:BE:47:DB:6B:BA:D9:83:64:8D:7D:46:95
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b9:52:12:07:bc:a8:80:e9:ac:b8:08:dc:9c:fd:70:1b:3e:
9d:da:f7:fa:f9:d3:72:b5:f0:9a:1f:ef:4a:c8:8b:ae:07:90:
1b:d7:7e:83:99:a1:ac:13:ab:8d:73:4e:03:37:2e:c9:11:27:
26:ff:ef:70:c9:33:6f:f7:bb:99:11:2b:0d:86:40:5a:84:5d:
53:e0:63:a2:0f:b8:81:6a:8c:96:9e:f7:c3:0e:1a:66:4e:b2:
96:82:89:85:44:09:ff:cd:ac:7c:fd:a5:fd:73:7d:01:e8:f6:
8d:5a:e5:2a:db:32:39:e5:c3:15:26:96:50:c1:de:1f:f5:5e:
e0:bb:ee:11:ae:03:bd:c9:80:7b:9e:31:50:ba:aa:56:ac:ba:
f2:d6:25:eb:61:28:b3:f1:72:ed:52:49:34:42:01:58:ff:f0:
de:06:f8:b6:9a:5f:2f:f5:b0:11:af:03:a8:74:ae:75:d2:67:
c0:1f:ec:7b:47:9a:03:f6:87:a6:ef:48:32:47:a7:d8:f7:36:
61:a3:75:4f:93:54:49:65:a7:52:b4:e0:4a:c8:9e:70:77:a9:
c3:74:7c:98:62:8f:ee:9a:70:c9:48:3e:cb:ff:21:2d:51:40:
5b:2b:b5:d2:82:40:2a:15:c8:51:b4:52:1d:73:60:b2:57:4c:
6b:c8:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:19:10 2025 by rpki-client