Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: tG7mRMKsGKaRVbSu3FW75Pa/K6QV36+mXd79uEQpQH0=
Subject key identifier: 10:90:2D:FE:7A:58:40:58:9F:A3:5F:D0:5A:61:1A:66:B5:4A:69:4F
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 019A30453B0479A6BC3AB679FFCE1CC820E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0D40
Signing time: Wed 29 Oct 2025 14:00:34 +0000
Manifest this update: Wed 29 Oct 2025 14:00:34 +0000
Manifest next update: Thu 30 Oct 2025 14:00:34 +0000
Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: XP7W441IIvMjUYRMz3luXX12mm3ainmjFrZZF+4b6aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:45:3b:04:79:a6:bc:3a:b6:79:ff:ce:1c:c8:20:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Oct 29 14:00:34 2025 GMT
Not After : Oct 30 14:00:34 2025 GMT
Subject: CN=10902dfe7a5840589fa35fd05a611a66b54a694f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:6a:28:9e:a1:3a:ba:08:6c:86:d2:58:1e:
e4:e2:88:fb:ee:59:af:d6:24:4a:52:aa:8c:44:31:
93:67:5b:52:87:c3:8b:df:fd:3f:92:53:b3:9b:63:
c6:dd:04:2d:42:37:22:92:09:34:c8:32:37:ed:ce:
4d:c9:47:a8:97:82:d6:56:b7:b2:15:b1:58:e7:b6:
db:c7:6b:09:31:0a:12:c7:7a:99:fa:29:7a:88:ea:
aa:dc:9e:cb:ac:27:7d:14:e3:77:e2:27:d0:64:62:
9c:26:04:df:ef:36:0c:bf:c1:8a:31:45:b3:be:7d:
04:cd:e6:aa:bf:1b:7d:8a:53:89:b8:b8:19:9f:49:
c6:2b:c3:a1:3e:4e:2a:16:6d:f6:f5:0a:aa:8b:0f:
7a:af:79:a9:45:43:06:a7:9e:5a:c1:25:38:5a:8d:
78:0d:00:c8:9a:4c:9d:d1:2a:79:c7:10:b8:11:6b:
83:65:43:ff:f9:aa:64:f9:bd:9c:64:72:29:3f:42:
63:33:4c:89:86:8f:f5:5e:eb:22:77:83:c9:d4:be:
d1:a4:ec:49:9b:1b:eb:f3:9f:0b:07:9e:d4:ef:d0:
8b:36:d2:00:7b:6b:2e:b3:33:a7:38:25:a8:67:27:
ae:c2:71:71:72:52:62:ca:1c:b6:9f:33:f2:64:73:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:90:2D:FE:7A:58:40:58:9F:A3:5F:D0:5A:61:1A:66:B5:4A:69:4F
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:27:80:c1:df:d5:37:a3:67:8e:d9:d5:ff:24:61:58:1f:66:
17:0f:ba:f5:b9:3e:67:f2:7f:4b:54:66:d1:e5:50:e7:ab:cc:
14:8b:78:7b:0f:65:a2:b5:2a:fa:d4:b7:03:25:c8:cc:8c:2b:
c9:a8:6e:24:1e:9f:c0:07:54:b9:3a:46:79:a0:d1:14:7c:5b:
10:e9:42:e4:9d:10:3a:6a:67:ed:15:ef:5a:ee:b5:4a:05:94:
4c:5e:3d:6e:7a:80:4e:a6:e7:27:74:99:39:f2:29:8a:30:79:
61:15:e5:a8:1b:eb:63:45:77:fa:cf:8d:36:fa:91:ec:d4:c5:
a7:34:26:4e:12:74:1b:c7:0b:86:23:ad:d5:b3:b8:b4:1c:d2:
f4:a6:5c:8e:b2:82:24:a2:36:4f:fb:71:15:d0:ed:62:60:ee:
2f:3c:06:e4:b9:fb:33:d1:80:0c:c6:05:75:11:21:b7:9d:bd:
50:43:5b:80:95:d8:68:28:02:d8:35:f0:bd:f3:7a:fc:4e:ae:
d5:43:05:9a:6c:b4:36:93:0e:9b:87:0b:b3:4d:b2:6f:56:45:
39:44:8e:17:92:74:61:96:14:74:65:31:ab:1c:71:9f:2b:8e:
62:cf:d6:8b:c5:5a:1a:33:55:23:f3:cf:46:7d:95:92:55:9a:
82:05:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 18:31:36 2025 by rpki-client