Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: kFZI81vBucP04IxGfO189A33RXPpq+eMv05OC3zW4H8=
Subject key identifier: 44:BC:ED:84:A6:9D:FA:B6:65:5C:48:9C:30:7B:B3:49:25:1C:20:BC
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 019A72CAB1D8A46F741B798C3476C9A64926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 043B
Signing time: Tue 11 Nov 2025 12:01:17 +0000
Manifest this update: Tue 11 Nov 2025 12:01:17 +0000
Manifest next update: Wed 12 Nov 2025 12:01:17 +0000
Files and hashes: 1: iO6OOltzYSW2yZ_5E85X-P4mF_0.roa (hash: 2XDE+mCyZurCdSAHCb4+FLC8SwOf/SeiDXoheU8dhOI=)
2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: aIrc757iV42UTID7J38yv/ZmUT42Fxjhfg2lIqFjQkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b1:d8:a4:6f:74:1b:79:8c:34:76:c9:a6:49:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Nov 11 12:01:17 2025 GMT
Not After : Nov 12 12:01:17 2025 GMT
Subject: CN=44bced84a69dfab6655c489c307bb349251c20bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:75:fc:f1:8f:2a:d8:5d:52:94:1d:5b:a3:
27:b9:77:85:70:aa:99:cd:19:4b:b4:8a:e0:bb:19:
b7:4f:2e:b4:84:b2:7a:61:00:ae:2f:a0:ea:e3:da:
f3:be:25:96:15:06:74:e8:c2:1d:e9:29:40:b7:a6:
cd:b2:54:dc:15:8a:f9:39:76:1e:29:ef:ed:97:0e:
d7:c3:21:2c:1f:e4:29:5d:46:f1:c5:f8:5d:f0:23:
a9:98:d0:75:2b:7e:94:77:54:9e:c9:2e:4e:f6:c3:
f6:a9:dc:54:0e:b0:cc:a6:b2:94:e4:37:bb:9f:d9:
9f:4e:af:e9:93:57:98:79:13:bc:9a:68:c7:8d:a1:
ec:d0:a0:fa:7f:39:09:26:ba:1c:c3:81:8e:b3:76:
80:37:e1:8d:1b:5e:aa:2a:a6:55:4b:62:fc:2c:9d:
55:38:a6:0e:8b:4e:c8:8b:ee:df:92:cf:ed:8c:39:
ed:64:a1:1f:1f:e4:3a:24:78:0c:b1:db:0e:40:86:
92:94:9a:35:91:42:e1:18:bd:d7:1c:d3:3e:9a:ad:
b0:97:e6:d9:4e:30:c7:35:65:68:b6:a1:77:95:b1:
13:df:96:5d:df:8a:c7:ff:e9:09:36:e7:d1:00:36:
34:d8:3c:02:10:97:25:92:7f:f9:df:cc:c6:94:7b:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BC:ED:84:A6:9D:FA:B6:65:5C:48:9C:30:7B:B3:49:25:1C:20:BC
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:51:c6:1d:90:5d:72:aa:e4:e9:75:4e:6f:7b:19:cc:f6:85:
0a:0e:46:65:8b:5c:ce:57:cb:94:7a:d1:41:fb:36:20:43:3d:
4d:a9:f2:0b:c7:fe:51:c0:5b:ad:05:1d:70:45:5c:40:f6:45:
d3:1a:9d:6a:9e:f5:1e:f7:70:33:8e:b8:4c:8c:94:b0:79:b6:
c5:68:33:02:c0:d3:62:bd:ea:81:38:ab:f5:45:b9:88:11:4f:
56:c1:72:14:41:f3:58:5e:51:a2:68:ac:f2:9f:4d:d3:5e:c0:
a0:19:53:29:65:93:b9:1e:18:ad:bb:f6:ee:7d:40:15:06:6c:
b7:d2:bc:48:8e:0a:5b:28:09:58:40:67:4b:d1:4f:62:e9:b4:
95:3b:f3:b4:9a:4a:e6:e4:1e:7d:ba:2d:b7:fe:91:c9:13:32:
78:cf:2b:b8:2e:43:0e:cd:6e:17:f8:cd:20:a1:a1:51:cc:ee:
b9:50:e9:ef:56:ac:df:88:ca:bb:33:0f:22:41:11:1a:90:3f:
36:78:d3:8b:10:82:e0:40:ae:7e:7c:dc:8a:55:6b:5e:a1:c6:
30:6b:08:d8:f9:65:6f:e8:55:cd:bd:1c:db:fe:0d:86:41:16:
fa:14:dd:7f:db:19:fe:a0:52:7a:5d:c3:69:f0:32:7c:0c:f9:
f9:fa:c6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:50 2025 by rpki-client