Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
File: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft (raw, json)
Hash identifier: ifaPktuqlc2A+Gm/uMU2BIab9DpaQT7L9Tw4Cz6Kuh4=
Subject key identifier: 78:55:C6:E2:B4:BE:DE:80:1E:15:80:4C:DB:CD:8B:98:C5:1A:A1:29
Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
Certificate issuer: /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Certificate serial: 019A71EE9F48587C1BAB542E6A9F32B0AB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
Manifest number: 029A
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: hGnhNt09WVSvAvlRb80VOz0njRw.roa (hash: reYotro4wzpVN+aJarCV//yL8yhlq3gQQiQttC9Xbrk=)
2: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl (hash: wRTCP5ehOZKsl7iG0r2IeVK9+MXvZakc3HHoeFLDgNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9f:48:58:7c:1b:ab:54:2e:6a:9f:32:b0:ab:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=7855c6e2b4bede801e15804cdbcd8b98c51aa129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:be:94:94:3d:f8:89:2d:25:72:e2:c4:3f:
81:d0:a2:39:cd:2e:7e:96:c1:42:c9:ce:86:a6:8f:
53:26:0d:77:78:33:1f:03:cf:1f:6e:c0:5d:cc:79:
23:7a:f4:70:e7:18:1f:0d:b0:9f:bd:cf:1f:7e:61:
45:1f:fc:d7:c1:f3:d9:e7:d8:18:f0:6d:e4:f7:14:
fb:fb:ed:58:f6:d2:7a:aa:fb:ce:5e:ba:7e:05:4b:
87:b5:c8:b6:ec:1c:d0:06:5c:bf:ab:a8:69:49:75:
11:dc:6e:53:79:64:47:ed:fd:e5:78:91:b9:bf:8b:
25:62:6d:1d:5f:49:fb:a6:7a:99:37:39:d1:ef:24:
4b:39:47:7b:35:3a:29:10:c1:2e:89:40:fa:82:e2:
ee:d5:bd:4e:c8:ef:2b:5e:33:a0:34:18:b2:c0:b2:
91:05:49:7b:61:e0:66:60:1e:f2:e5:29:26:47:62:
3c:9b:bc:2e:da:40:12:99:73:0f:48:b9:ce:52:c8:
8a:88:3d:b4:f1:9f:ea:f6:74:7e:ad:f7:a6:11:60:
f8:ba:20:f6:f8:3b:08:fc:d2:83:74:9d:da:1c:d8:
5d:fa:8b:0f:27:68:54:08:bc:14:93:39:17:18:8b:
59:00:75:1f:de:d9:76:98:33:25:12:6f:91:2f:85:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:55:C6:E2:B4:BE:DE:80:1E:15:80:4C:DB:CD:8B:98:C5:1A:A1:29
X509v3 Authority Key Identifier:
keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e4:8f:17:bb:ef:06:2f:18:78:66:87:fc:87:dc:cc:ca:e0:
22:31:a3:63:e6:e3:b0:d1:89:69:f0:b4:c3:31:55:c1:59:85:
38:00:a2:44:1f:c1:c8:94:44:7a:46:f4:4a:45:08:d2:91:10:
ba:69:6f:9b:19:2c:58:3a:a7:ca:e9:e3:df:68:76:e2:c2:7d:
24:f6:fc:4a:51:a0:3b:ef:91:47:51:de:2a:7a:56:cc:81:ec:
7a:b2:c5:21:06:42:dc:32:1e:a7:e1:b4:03:a1:f6:84:ac:e6:
76:7b:3c:7e:97:d3:2b:27:95:d1:e0:aa:e8:49:fa:f9:aa:55:
b7:26:bf:ae:76:a0:34:28:6e:40:37:f1:43:70:ab:2c:8f:97:
6d:d7:53:54:f7:6a:a8:a2:29:d5:52:d9:3f:6d:30:cc:a8:2f:
ff:b8:65:cf:2a:97:a6:59:38:60:2b:40:9d:5a:13:68:4d:12:
1c:65:4a:1f:af:0b:50:63:32:f9:36:5c:72:80:53:e5:f9:8b:
f7:5f:6f:05:71:ab:2a:d8:c0:0a:a1:4c:5c:d2:6f:2a:fa:b4:
bf:a8:d0:4b:2a:12:b9:01:37:45:a7:c2:d5:ab:56:b0:da:d3:
37:b7:2e:85:e4:12:46:27:91:71:8b:2f:6f:a8:9a:23:a7:8c:
f2:e2:2b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:33 2025 by rpki-client