Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: XqoQ0pI2ZHRo5xRPSVmHUEVsBpYQutB+L9dxrqVVhoU=
Subject key identifier: FA:7C:AA:6B:EC:B0:B6:8C:0D:05:D3:FE:0D:1D:22:E2:45:AD:75:83
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019A71B784998AFCE51FA12A1A27F70AC9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:00:43 +0000
Manifest this update: Tue 11 Nov 2025 07:00:43 +0000
Manifest next update: Wed 12 Nov 2025 07:00:43 +0000
Files and hashes: 1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: HkLhklfIxRyL6ybqc5YFXQiHls0JMka50Zn8VfoEqJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:84:99:8a:fc:e5:1f:a1:2a:1a:27:f7:0a:c9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Nov 11 07:00:43 2025 GMT
Not After : Nov 12 07:00:43 2025 GMT
Subject: CN=fa7caa6becb0b68c0d05d3fe0d1d22e245ad7583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:4b:c3:69:71:05:c0:92:1a:f8:a5:75:44:
36:ba:5f:a1:43:ac:f3:e6:6e:cf:c3:de:eb:38:ea:
dd:a9:ac:89:29:2a:27:f7:62:ea:9c:42:52:2b:8a:
2c:e9:c6:03:18:8e:25:55:b1:db:0a:fe:54:2c:f3:
ba:6e:0f:e9:ee:9b:00:fe:79:85:55:e5:95:59:11:
c7:2e:4e:82:97:01:e9:52:23:4c:c6:e7:10:26:d7:
1f:86:5c:14:d2:ae:6b:69:2b:6d:be:34:af:88:38:
70:e3:2e:17:0e:35:28:30:b3:49:47:60:3e:f4:af:
b3:c8:50:9b:9a:f4:32:27:48:90:48:f8:18:d6:58:
14:c3:8b:eb:4f:97:cd:90:67:4e:12:bd:d6:ae:30:
6a:e0:86:af:ea:b1:8b:62:6f:c2:0a:93:eb:08:cb:
c7:e0:a0:98:4a:9f:b3:85:a7:86:17:c2:b9:23:d1:
14:1a:ca:b1:87:46:8a:76:d8:5a:6e:81:10:c5:d7:
45:20:02:d8:14:ce:ad:d8:40:31:3e:c7:dc:de:fd:
86:32:2c:e8:f8:b5:35:ed:9f:2b:3d:31:49:27:18:
92:67:84:5f:16:dc:18:b4:d7:9f:c1:27:d2:6d:06:
b5:33:92:51:7b:4b:a6:eb:80:66:41:e7:30:f6:d8:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7C:AA:6B:EC:B0:B6:8C:0D:05:D3:FE:0D:1D:22:E2:45:AD:75:83
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:21:7b:96:24:3f:34:17:51:d2:55:cc:5b:a2:21:8d:c2:04:
b1:1c:d1:dd:bd:b1:d5:41:77:41:47:b1:ed:e8:d6:8c:dd:b7:
2c:64:1e:71:3e:3e:8e:8a:7b:fc:8c:57:28:36:69:7c:ee:c3:
ac:a1:72:c8:3a:a9:33:d3:71:0e:9e:38:e8:cc:ee:83:82:9e:
cd:4a:b4:bd:e4:1e:7e:1b:65:06:df:e4:8e:00:69:14:73:84:
73:f4:22:c4:1c:53:0f:7d:3e:a6:93:d2:6c:06:b9:8a:a5:a7:
ba:1c:86:2a:5a:d9:b2:fd:36:25:be:e7:02:69:43:e0:1a:4c:
6f:c0:1c:9a:ba:f5:ac:1e:c6:0b:62:9e:26:64:68:ef:ec:94:
68:a8:44:3a:7a:28:f1:1a:a7:01:67:6e:1b:80:71:a4:31:f3:
55:a0:1b:b4:2e:f2:55:5b:a0:cd:c8:4e:7f:2a:cf:89:8f:23:
51:f2:cc:f9:d9:e5:f3:f6:cb:2a:dc:0d:45:fc:bd:58:99:4c:
cf:53:57:70:16:71:93:d3:ac:73:2b:81:8b:b4:59:d1:06:c6:
80:89:50:54:da:aa:59:f2:b3:81:13:9c:f4:74:23:90:31:91:
b4:2e:1a:e5:e3:9b:9b:85:84:46:77:ef:50:7d:04:ed:af:6a:
fb:29:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:22 2025 by rpki-client