Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File: Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier: a1i/NSP3ECIIRhL9kF5vUvSLZaIfSPJGfdcQvDSF+5Q=
Subject key identifier: 62:44:5D:CE:EB:E8:8F:5C:BB:10:FF:6A:55:15:11:4A:12:9A:72:38
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial: 019A706DF27C062DB95622B6323B2EF8A99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number: 0688
Signing time: Tue 11 Nov 2025 01:00:44 +0000
Manifest this update: Tue 11 Nov 2025 01:00:44 +0000
Manifest next update: Wed 12 Nov 2025 01:00:44 +0000
Files and hashes: 1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: 0Rfr9gMx4yyk4fQPwYTpFDKvfa3pTRBSe9jtj6qXjX8=)
2: b8AVOGW_uWiltgqsOrfUVPuVbhk.roa (hash: g14bBKv/Ezpz+JlzQJs8s4kzh2JITmna3X17wkbp61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:f2:7c:06:2d:b9:56:22:b6:32:3b:2e:f8:a9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Validity
Not Before: Nov 11 01:00:44 2025 GMT
Not After : Nov 12 01:00:44 2025 GMT
Subject: CN=62445dceebe88f5cbb10ff6a5515114a129a7238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:c7:fd:0e:94:e1:a8:78:c5:6f:c2:9a:8f:
4e:b8:a5:39:40:d2:2d:dd:6a:2f:28:d6:c6:48:c3:
e3:d1:41:fc:fe:2c:ff:b5:96:3b:69:86:10:b4:be:
6b:e6:89:a1:94:84:b6:11:52:6c:91:79:3f:c0:d1:
38:32:71:38:5f:c9:1b:cf:9c:eb:62:08:e2:98:50:
43:f2:24:72:9b:49:fb:bb:62:a4:ac:98:25:45:c1:
47:d5:f1:09:ef:78:b7:ea:8e:27:05:cb:76:a4:d1:
61:be:dc:02:50:44:1f:01:cd:ba:ec:2c:72:39:76:
2e:00:ee:25:6f:78:e5:c6:44:7b:ca:41:fe:5e:aa:
0d:7b:58:57:11:8e:7f:d3:e9:28:6b:22:d7:f7:cf:
7c:fd:10:4b:53:db:89:6f:9a:7a:87:8b:67:e9:8d:
f1:12:86:d7:ab:b7:fb:c0:44:99:61:ae:d2:b0:dd:
12:59:fd:51:b3:2b:90:26:d6:6d:08:a9:dc:4d:73:
bc:11:19:5e:c8:a7:5a:2e:f7:62:48:98:39:f8:48:
49:d9:30:fe:73:9a:6b:61:3a:f5:95:76:67:9c:02:
df:12:a1:d5:24:36:94:99:71:23:23:a3:92:35:af:
9e:5e:0e:33:e0:a3:71:c6:f0:ca:f1:9c:5a:49:e5:
81:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:44:5D:CE:EB:E8:8F:5C:BB:10:FF:6A:55:15:11:4A:12:9A:72:38
X509v3 Authority Key Identifier:
keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fe:91:a2:b0:17:7d:90:bc:a8:fc:c0:38:55:a1:f6:c0:cc:
f4:72:97:3c:76:0f:97:fa:d0:ee:a6:45:d6:20:e1:c0:5e:59:
53:b9:39:b0:d4:70:b0:81:39:68:bf:ca:41:cd:dd:f9:61:77:
43:31:db:63:b2:2b:dc:b7:f3:c8:d5:06:a3:36:69:ad:1f:45:
cb:3f:cc:d4:c1:25:19:4c:72:ca:5f:db:2c:e2:3f:24:28:5f:
f9:46:21:6b:20:8c:a6:e5:ce:ad:42:1c:4b:b1:ea:15:df:6d:
73:2b:3d:79:6b:55:c2:78:cc:ed:69:1f:2a:6e:2f:17:c3:86:
58:27:ad:52:0c:c7:68:7f:14:24:a7:73:b8:28:09:0b:00:7b:
38:61:fc:79:0b:ff:37:12:60:a1:bb:1d:ed:ad:7b:c8:92:0b:
af:8b:5f:36:fc:64:61:48:55:f9:c2:fc:1e:91:36:12:f6:f5:
e8:c7:b5:2b:33:29:4c:bc:bf:18:50:0e:6d:fe:d1:f7:4a:8e:
af:d8:f5:3e:ce:96:aa:81:f9:91:e4:6f:28:87:b1:a1:38:47:
bb:26:2c:98:31:16:08:d1:02:cb:cd:95:c9:b2:69:1e:23:5d:
4a:fa:d7:54:fa:e3:90:f6:f0:50:2c:ff:f2:ba:df:77:6e:c2:
35:67:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:25 2025 by rpki-client