Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: t6ILpwg4MO9Q9/DpSS4h2sednkqZ3g+gCtpWryFY27E=
Subject key identifier: 7F:B0:54:72:F0:C5:B0:5C:89:A3:6E:97:44:77:0E:64:54:8E:4D:BD
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 019A73A6A06C97312DC7366C219DAA28B98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 16:01:31 +0000
Manifest this update: Tue 11 Nov 2025 16:01:31 +0000
Manifest next update: Wed 12 Nov 2025 16:01:31 +0000
Files and hashes: 1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: p/NYklazWyq859jTxGBUaCOgLqiA13oCYt0WpQ80vDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:a0:6c:97:31:2d:c7:36:6c:21:9d:aa:28:b9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Nov 11 16:01:31 2025 GMT
Not After : Nov 12 16:01:31 2025 GMT
Subject: CN=7fb05472f0c5b05c89a36e9744770e64548e4dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:b5:89:87:72:94:e4:3a:74:7b:9e:77:2d:
24:94:66:9d:36:69:ff:be:cf:58:43:42:1f:5c:3e:
05:9a:0a:f4:c3:07:cb:cd:e4:3d:c2:8a:10:1f:60:
d7:5d:92:76:07:bf:a3:e1:e0:99:d8:7d:33:f7:85:
8e:fe:c2:5c:b5:ab:9c:73:7a:f0:95:1c:28:17:cc:
4a:34:16:6d:44:ec:4e:1d:1b:53:cb:7c:22:85:c1:
9f:53:c9:84:b1:80:9d:c2:37:d6:c4:2e:d2:17:6e:
a0:76:d9:39:28:8a:a2:91:3b:e3:3c:84:ae:06:05:
96:a5:09:03:50:db:d5:e7:9f:08:7f:dc:0e:bd:8f:
54:df:4c:da:28:72:f5:e8:3a:d6:a3:ab:14:f5:72:
15:a1:85:e9:1a:4e:c0:a0:95:dd:0f:85:be:57:74:
15:07:ec:d8:84:16:58:8a:44:0e:a1:5e:7e:3b:fd:
10:d4:6f:6a:a0:e6:54:02:0b:83:7f:a6:84:53:4f:
a6:6d:80:9a:b0:ea:88:25:e0:c2:76:c6:6f:56:0a:
f1:4c:56:37:68:da:fb:c4:d1:1c:a2:4a:02:0a:dc:
a5:95:1a:55:7c:b5:31:63:17:b5:ae:b6:4c:48:7b:
b2:5b:24:87:2c:ed:8a:76:45:de:af:c4:b7:60:c4:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B0:54:72:F0:C5:B0:5C:89:A3:6E:97:44:77:0E:64:54:8E:4D:BD
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f7:e1:cb:72:78:6d:b5:2e:c4:47:b2:bc:db:18:b0:61:1a:
f1:0a:1c:6b:3b:d8:2e:f5:8e:27:33:87:6d:f9:60:f8:91:8d:
99:e1:89:a7:3e:49:34:6b:70:67:d1:44:4a:07:ef:1b:4d:69:
e6:cb:61:8f:48:da:4e:e1:51:2f:d5:c3:92:f1:ee:7e:66:6b:
d3:98:2f:61:94:04:78:f9:94:6e:46:23:4d:ad:0b:4a:36:2c:
3d:99:be:65:b3:c7:d3:cb:2d:76:51:5b:8d:0a:d6:0e:b0:5f:
b0:40:78:37:0b:99:64:58:11:2b:79:c3:27:13:23:d8:a6:c0:
7c:b0:2b:c0:ae:30:10:23:c9:c2:b1:0d:40:f1:31:9a:02:ee:
42:80:e5:f3:55:40:57:2b:12:90:c2:b2:51:a3:0a:b5:5a:90:
69:b0:ca:95:4c:b0:89:6d:3c:7d:44:cb:af:61:cb:a8:1a:a5:
cc:ab:b6:55:2b:9d:ce:49:a5:4d:6c:00:e7:c0:f9:02:ac:81:
a5:6a:b2:42:12:b6:ca:93:02:52:12:a3:e3:0c:2e:4c:0c:6a:
57:7f:1a:4a:74:d0:3e:22:01:b0:63:af:30:a7:05:db:0c:08:
86:c9:ea:41:51:b2:ff:86:12:54:c0:37:54:92:81:2e:fd:b4:
6a:04:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:47 2025 by rpki-client