Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: nmcdhODxFRTmIk24AtWB5icPUkx5pzwHKpd0Z33nvPw=
Subject key identifier: 2C:9A:74:82:1F:FC:81:8D:1E:48:59:5C:DA:B4:53:66:39:6D:AA:EC
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 019A71B825A718989946A667802AEF1CC414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: 71dyRe5sAVLBDCzeAaVfrK8Dfyuxfm+zArYrD1SxIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:25:a7:18:98:99:46:a6:67:80:2a:ef:1c:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=2c9a74821ffc818d1e48595cdab45366396daaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:7b:30:94:83:79:41:c2:f6:7e:e9:11:37:
c9:55:f9:91:1d:fe:71:9a:af:3b:dd:da:e5:7b:7c:
a0:2a:70:17:5c:b9:69:b1:a1:21:92:d7:5a:98:44:
67:06:76:23:f1:f5:84:cc:68:c3:c0:c3:7b:ee:05:
eb:75:0c:be:fa:2a:b1:36:2b:7c:2a:bb:d4:15:5a:
6e:57:a0:3d:2f:ec:40:04:50:9a:4b:5f:11:92:df:
83:f6:ee:ef:e0:69:86:65:34:e4:45:63:c9:95:d0:
6c:0e:01:06:a8:1b:75:bb:03:31:f3:6b:15:b3:32:
93:ad:d6:eb:04:0c:28:2a:88:4b:ba:f9:e6:60:fa:
2c:67:b5:e9:83:eb:8d:ce:38:1d:31:c3:1b:ba:79:
ec:b6:48:cb:5e:72:3e:3c:3f:f1:29:e4:90:08:2f:
da:84:6c:f5:ce:8c:bc:e6:aa:5e:99:a9:8d:06:15:
a3:80:3f:63:76:28:8d:65:b5:4d:a9:ec:72:a8:88:
0a:86:67:39:26:4b:1d:8b:11:cf:46:3b:e3:a0:6c:
b3:e2:9b:83:77:86:bb:38:ba:e9:7b:56:dc:4e:56:
94:47:e9:91:70:72:94:60:74:08:fa:82:df:a3:39:
31:01:5e:9d:56:50:f2:77:e0:f8:8d:a6:c9:fd:9b:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9A:74:82:1F:FC:81:8D:1E:48:59:5C:DA:B4:53:66:39:6D:AA:EC
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:85:31:57:93:42:7c:77:39:b7:8e:84:d8:c6:7e:5f:79:e6:
f8:1b:06:08:e8:33:06:ab:53:08:e8:07:81:e5:86:c5:c2:93:
f8:73:59:cf:67:79:e6:18:f0:88:aa:fd:74:d3:47:29:8b:2f:
20:3b:6d:f3:86:67:cb:43:25:11:02:38:c2:7c:23:b1:46:ab:
f1:38:2e:d4:63:e4:bd:46:58:e7:22:d8:58:d0:59:b8:6b:bb:
55:fa:48:5c:b8:ab:0b:33:27:83:88:f4:60:dc:87:c4:38:d4:
bb:c6:17:dc:d3:64:d1:a4:a2:cd:0a:c6:36:e2:6c:72:bf:19:
72:fa:7d:f0:5e:74:e1:90:d1:a0:a7:b0:07:94:c4:5e:2b:78:
22:2d:04:64:e3:92:21:9e:4a:4f:2a:c5:74:b4:54:81:16:62:
4e:9e:10:e0:7d:8c:1a:96:51:58:85:c8:9e:b9:3f:15:71:af:
7c:51:9a:a2:3d:64:a6:80:ca:47:f0:a0:fe:20:cb:c2:fa:34:
c6:a8:ad:4e:54:67:33:36:2c:84:1c:6f:b8:89:f9:bd:ce:f7:
62:93:ce:83:db:2e:c7:77:2b:50:9f:8e:ff:2c:24:36:31:bd:
91:66:f2:d7:0b:50:57:d4:36:d6:5b:a7:e9:06:14:ae:b8:27:
22:37:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:19 2025 by rpki-client