Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: KUtt+qAWIcw3Sc879pbKbGch9Sb2P6sWJPJTU+UT2RA=
Subject key identifier: 46:8F:82:8D:B1:C5:19:1B:52:5C:0F:E3:C1:49:7F:DE:B8:45:AF:B9
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 019A725CABAE46ED0DAB2A4A487102DE7FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (hash: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=)
2: 9Ddwg04k-x748SWw8ZAq8FwjEC0.roa (hash: hAsF5Dd97oXArWDCgchVp4XLtAVACH5ddk2EH9+qQDM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: cQxfDBEay0wkiSt3jvQuE4xBjw+Px9Q64IJdN3yehQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ab:ae:46:ed:0d:ab:2a:4a:48:71:02:de:7f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=468f828db1c5191b525c0fe3c1497fdeb845afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:c7:eb:6c:fb:92:65:2e:ed:13:51:22:16:
30:80:43:64:0d:3c:28:07:76:13:48:4f:4f:91:79:
f2:e0:2b:6d:7a:e7:90:58:13:bc:9a:8c:e2:02:10:
26:48:f7:9e:ea:25:7d:a8:71:2c:34:5a:ae:b3:45:
da:a7:fb:83:e8:c4:fb:5e:f6:c8:23:a7:ac:0f:ba:
a3:55:7c:d7:08:d1:42:1e:bb:ac:a4:a8:d2:60:90:
a1:32:e7:9b:17:71:c1:f5:0b:18:92:77:bd:8b:a6:
9a:cc:aa:f3:7f:59:65:60:4e:74:bc:01:9d:18:84:
9f:84:0b:03:7b:f3:08:9e:b5:7c:39:83:17:c4:e1:
b1:09:2b:e3:8e:cb:06:9f:b3:bb:97:b6:88:97:5d:
18:ba:6f:a0:5b:87:95:46:66:0c:38:a5:64:74:ef:
69:c7:f4:94:0e:1b:35:17:f8:dc:d4:e5:fd:ad:d9:
47:6a:70:2f:3b:ce:96:19:f6:44:08:a2:c6:4a:3a:
2b:c5:d0:0b:19:ad:69:fe:9d:fa:1f:84:44:eb:43:
be:5e:19:3b:f8:a0:ff:70:22:58:16:97:fb:9c:1e:
88:ce:ad:9e:67:23:24:35:a2:2f:9f:fa:7f:7d:5c:
c2:25:9d:0a:26:58:ae:38:32:ee:b4:1b:3b:06:05:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8F:82:8D:B1:C5:19:1B:52:5C:0F:E3:C1:49:7F:DE:B8:45:AF:B9
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:40:d8:e3:b5:d5:d1:70:8b:39:30:30:13:14:ea:41:b4:b3:
a4:d6:da:9a:d7:7f:1d:38:e7:f8:64:17:77:e5:91:2a:84:54:
c9:18:48:30:a4:9a:68:01:e6:96:0c:73:8e:47:9b:d9:a9:e9:
d3:8a:09:ee:e7:b4:e8:fe:dc:44:51:a8:86:7d:4c:4e:0e:de:
1c:e7:74:0e:35:e8:8f:51:4e:fc:aa:0e:a6:40:04:f6:58:21:
ad:2a:ca:f6:21:0e:e4:b2:5f:5d:61:86:18:94:fa:37:fb:f7:
50:28:bd:95:79:d2:a2:f3:55:9c:a6:77:29:c6:84:ee:29:b8:
3f:df:7c:6b:ad:cc:60:ea:56:2e:18:a8:03:90:88:e4:af:4f:
85:8d:af:33:0f:b3:75:c8:8c:1e:3b:7c:d0:f6:1d:45:2c:ea:
7b:f7:b9:29:43:22:84:d8:4a:2f:48:1d:e8:0c:9e:07:d8:92:
13:ad:75:97:82:a6:2c:39:16:62:a7:16:06:e6:4e:19:77:9a:
4f:58:1c:c3:53:0d:b5:cc:73:11:2f:4e:f5:60:bb:11:b1:7f:
6b:e2:3b:b1:f0:8c:bb:aa:b8:e4:62:21:8e:6a:c8:da:02:c2:
35:55:f8:14:73:6d:0c:aa:7e:cb:79:b4:29:5f:17:69:08:34:
c0:ec:44:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:26 2025 by rpki-client