Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier: m8zGyVohSUR6snZYTZ4vlojBLVRTHMsZf4ycj5064hM=
Subject key identifier: D6:96:8D:74:34:93:C6:20:4B:4D:11:F2:E5:31:BA:DC:B2:05:CE:4D
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial: 019A71B86B29A98E8EB81B88738BDC56F442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number: 16B2
Signing time: Tue 11 Nov 2025 07:01:42 +0000
Manifest this update: Tue 11 Nov 2025 07:01:42 +0000
Manifest next update: Wed 12 Nov 2025 07:01:42 +0000
Files and hashes: 1: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: oP09Ol0F08UuFX3bONEchfWZ8g7X25shyL11t5q1lYI=)
2: z9zEGi_XQqptGezSebT8w5b6aS0.roa (hash: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6b:29:a9:8e:8e:b8:1b:88:73:8b:dc:56:f4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Validity
Not Before: Nov 11 07:01:42 2025 GMT
Not After : Nov 12 07:01:42 2025 GMT
Subject: CN=d6968d743493c6204b4d11f2e531badcb205ce4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:6a:5a:06:18:c5:56:9f:6e:ee:a5:0e:a2:
4f:a2:0a:99:d2:29:3f:90:a5:52:52:36:6f:51:98:
8c:84:50:35:ec:aa:70:6b:ff:15:83:c8:ca:0a:bb:
bf:93:19:02:54:ba:38:9d:b7:e8:3d:e2:b6:f2:95:
ca:ee:6e:f6:6b:df:59:aa:ca:c8:ad:6c:8e:31:c2:
e2:53:67:dd:a2:c2:4e:71:4a:99:24:9d:24:57:18:
99:5e:42:d8:a6:72:90:15:71:89:b4:ed:35:1d:60:
a5:1b:8c:04:87:8c:a3:f6:a0:11:d0:f0:d5:0b:7a:
38:a8:85:fc:b5:a3:d7:e6:91:90:24:1f:c9:07:a2:
d9:f0:87:13:9a:9a:f2:0c:7d:59:05:c5:d6:60:b8:
e6:4e:1c:6e:49:14:dd:8e:5d:b8:a1:96:d2:6f:30:
74:e0:5d:4d:86:e5:60:60:5a:c0:1a:53:11:86:4c:
a6:0e:0d:d5:04:f5:eb:bc:08:6c:1c:6f:75:2c:19:
d6:22:21:29:ea:56:5e:1b:91:15:2d:8e:e2:89:3f:
2f:48:a1:80:89:4b:7b:4e:f5:40:2d:d9:56:59:b9:
86:54:60:e9:ba:a3:81:7e:6a:85:3d:a4:13:01:23:
f2:99:40:a6:cb:1b:28:f9:87:de:e7:a8:b5:a7:ec:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:96:8D:74:34:93:C6:20:4B:4D:11:F2:E5:31:BA:DC:B2:05:CE:4D
X509v3 Authority Key Identifier:
keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:03:d6:0f:e1:20:fb:46:8c:46:b0:02:d2:c9:49:50:b7:02:
14:a9:83:e7:e0:41:b5:10:45:c0:33:62:53:fb:96:5d:bb:a1:
8c:14:fd:b9:8d:93:35:77:0d:ea:b5:3b:97:50:79:8d:b2:09:
5c:20:68:65:07:eb:b6:8e:c8:27:2c:83:90:08:a6:0a:2c:e9:
bc:f3:dd:60:2d:21:6f:5c:72:16:f0:cf:0d:1e:81:bc:2d:a9:
13:41:13:03:08:1d:cc:5b:64:14:dd:c8:86:db:e8:32:9d:2a:
e4:cc:93:5f:6e:db:96:64:7e:b5:94:ce:14:85:e0:ef:66:eb:
50:64:e7:fb:e5:6b:bc:82:85:8d:d7:20:f0:33:e6:40:f7:a6:
79:85:c6:32:76:82:e9:70:7b:ac:b3:11:82:1d:60:25:e1:6a:
f6:18:c1:c8:a0:f8:96:d4:b9:2e:68:1b:78:31:01:e4:ce:5c:
54:5f:72:ff:21:45:72:04:f2:85:0a:1a:31:8d:2c:5d:95:2a:
c3:5c:78:d7:b3:c0:f8:45:0d:8c:51:d3:a1:3d:17:e7:78:35:
99:5c:ed:cc:6f:e6:c5:de:3a:24:4a:2f:f3:f1:fc:e8:6a:8e:
52:f7:0f:7f:e3:0e:f7:dd:fd:fb:45:1b:5c:58:7a:b9:57:af:
fd:ac:37:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:00 2025 by rpki-client