Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: 1bj6ujvXp22U4GzIbHXL6Zcmdb3nD4mJzjJ10ylAmTw=
Subject key identifier: F8:D1:73:11:B7:A8:BC:E4:6E:7E:D3:8F:32:EF:8A:EC:55:43:68:CE
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019A706E465EA46193BF623BD0D5BF581881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0E0B
Signing time: Tue 11 Nov 2025 01:01:06 +0000
Manifest this update: Tue 11 Nov 2025 01:01:06 +0000
Manifest next update: Wed 12 Nov 2025 01:01:06 +0000
Files and hashes: 1: E7M-AYn157coR3NcaUllny2UPvo.roa (hash: V3zuwIj7KMTNA/2kj/Rg0T1KwXF19AZk9pNIoN8T7eM=)
2: I6C9OUy79kypN0-jFqEW807fCi0.roa (hash: 1Hel0O7FmPuldt5t71KSS/2qCERXV6+QisRzagvf8w8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: USjQxvTmLJDGLMXMM4iYrv9m2d7lch13YpOg6XKtbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:46:5e:a4:61:93:bf:62:3b:d0:d5:bf:58:18:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Nov 11 01:01:06 2025 GMT
Not After : Nov 12 01:01:06 2025 GMT
Subject: CN=f8d17311b7a8bce46e7ed38f32ef8aec554368ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:40:fa:90:f0:c5:9d:22:1e:7b:7f:12:fa:
57:8c:64:3b:0c:a7:8e:9d:73:6a:d3:0f:66:5a:ff:
b6:8f:e8:35:1b:87:57:41:31:0c:97:fb:d1:37:98:
63:05:6d:6e:fa:21:13:4a:13:09:7f:7d:a0:93:2e:
af:0c:d1:08:fd:bf:47:43:7a:3a:4a:94:c9:72:ff:
15:d7:f9:58:a6:17:9d:9e:23:1c:87:a3:64:5d:49:
ba:51:47:cd:9e:99:08:20:ad:a4:72:10:36:59:4c:
a2:d3:24:47:9a:a4:dd:b0:c4:14:11:bf:b8:3b:6e:
37:ae:68:85:7f:90:f0:72:f4:2e:63:43:8c:e8:f9:
1d:b6:c9:4a:de:25:3a:e0:9f:ae:f1:c1:8d:82:b4:
81:35:83:db:eb:f6:fd:74:78:91:9f:fc:bf:4c:b5:
b0:88:b7:fa:14:8b:56:11:41:15:e5:d3:10:0e:63:
e7:bb:bf:e9:53:ce:4a:8c:de:14:fe:36:a8:92:07:
bc:e5:71:d2:5e:a6:ea:48:0e:90:56:29:91:3b:a9:
07:ee:ac:87:86:f5:07:27:6f:1a:b0:e2:1f:dc:44:
e1:82:02:0e:c3:0e:7a:5c:ea:b3:30:82:79:d9:2c:
1b:0c:bc:54:5b:ed:1d:a4:b4:ca:61:bd:46:38:13:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:73:11:B7:A8:BC:E4:6E:7E:D3:8F:32:EF:8A:EC:55:43:68:CE
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:02:f2:25:4f:25:db:f0:ae:3e:5a:27:58:1a:87:5c:df:b0:
c3:60:b1:31:5b:05:5c:6c:86:44:f5:65:d9:9b:11:82:49:af:
e9:1c:d0:53:32:90:84:1a:77:d8:fd:99:b8:96:7b:69:75:d2:
6d:d4:ef:fe:16:08:22:f6:82:f7:c4:11:01:be:a4:e3:20:00:
cc:68:a4:88:0b:fe:34:6e:4c:95:46:ba:2a:84:50:8f:0d:88:
cf:24:8f:1e:a1:43:f8:51:f8:05:e0:8b:47:f3:fe:b0:85:f2:
f0:f8:3a:37:0b:c0:12:f5:15:60:59:9f:36:f4:df:11:31:e6:
40:16:bc:62:65:4b:8d:e1:ab:e2:55:41:73:64:35:59:31:1e:
19:02:ae:8c:54:9e:fb:9c:db:80:41:c2:fe:e1:bb:12:54:96:
a3:f3:5d:fb:ea:44:6b:80:46:2d:e9:f9:60:13:a3:ca:07:29:
06:06:fa:92:6d:d1:ae:69:42:33:cf:9f:fd:85:2d:e8:9f:43:
e9:d4:0b:df:a9:d4:ca:3e:9d:ea:6c:a2:c7:5e:c5:15:a8:0d:
2c:e5:02:f3:7b:19:4e:f5:83:85:ee:a6:31:98:2c:50:b8:fe:
b1:64:3a:d8:20:9a:f0:09:e1:d0:c6:cd:24:cc:26:bf:54:64:
4e:e0:1b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:10 2025 by rpki-client