Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
File: ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft (raw, json)
Hash identifier: emy3l4jyT7VCgiVMlddduhJYVFKymKgOHkn1Yk7N8T4=
Subject key identifier: 1F:68:32:B8:13:FD:76:21:C1:79:59:51:6A:4E:93:8E:B2:A9:AB:87
Authority key identifier: C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
Certificate issuer: /CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Certificate serial: 019A71809C99854B977CE5CF05D9C58367FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
Manifest number: C3
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: pPj0AN_LbIG5edwMDA59ThE3RKk.roa (hash: tv9SuA0cMfqr0L1nuGX2Myng2miGRH68D2F/qwMX0QU=)
2: ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl (hash: /iTOioONH9d/tNrWwbrgfNfWmL94kfjUaj/6UPRCBxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9c:99:85:4b:97:7c:e5:cf:05:d9:c5:83:67:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=1f6832b813fd7621c17959516a4e938eb2a9ab87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:22:83:c0:8d:36:0f:3f:d3:d6:2b:92:86:
8d:c8:42:94:c9:1b:41:68:c2:44:d4:03:07:ae:3f:
11:a0:7d:da:ff:3a:98:34:68:5f:fe:78:cb:3c:86:
d7:01:fd:0d:44:75:96:af:89:1c:29:97:65:9e:02:
d0:87:39:2f:01:1f:88:25:3e:34:3f:5a:da:aa:d5:
a7:a8:14:be:f5:87:06:90:69:36:9e:ae:6d:2a:10:
47:e9:5b:f5:74:e8:c2:20:2f:e3:03:0e:1f:ec:b7:
25:dd:ed:a1:b3:1e:fc:25:ee:fe:41:01:44:52:70:
dc:78:d4:a2:5c:40:18:74:b3:bf:58:85:dc:9f:e1:
20:b1:89:82:58:e1:17:f3:d0:c8:75:db:c8:35:92:
5d:5f:02:fb:23:70:1f:a9:99:0d:77:c7:8b:a8:fd:
4b:bd:a8:14:35:f0:5a:0a:bb:83:72:39:f4:0b:ad:
03:a2:ed:86:76:62:55:98:74:09:85:20:b8:45:e2:
64:2a:2f:e5:00:3d:03:6f:0e:32:56:ab:23:11:2b:
30:e9:c6:d2:4f:3f:ef:26:8c:49:3a:73:a8:18:74:
00:5a:f0:17:23:b6:5d:1d:c1:0f:87:a6:48:ca:84:
55:c7:bc:fb:b3:6e:77:99:c4:ec:e9:d7:63:88:22:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:68:32:B8:13:FD:76:21:C1:79:59:51:6A:4E:93:8E:B2:A9:AB:87
X509v3 Authority Key Identifier:
keyid:C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:4d:f8:7b:aa:cc:9c:e0:f1:a8:47:77:26:58:20:9f:51:c6:
3e:46:ed:63:0f:0b:d4:63:e3:ab:c5:bd:ff:cf:20:b2:b8:0a:
5a:d2:1c:08:f3:eb:41:47:fb:f3:a2:02:71:20:8a:fe:b3:2f:
75:e7:23:60:96:73:a1:3f:48:78:51:3a:98:90:01:bb:f8:fb:
96:64:61:e3:86:46:25:6c:e5:72:13:31:90:04:9f:96:43:3e:
fa:5b:4d:bb:d5:61:a5:ff:6a:e0:a4:b8:af:8e:25:fb:94:3b:
68:05:69:96:04:14:f4:10:80:e7:5d:12:c9:28:23:4b:ff:ef:
a8:ca:e7:de:a4:a2:4c:43:11:41:3d:91:3e:fd:6c:5c:f5:05:
a9:e5:c4:8f:f7:ad:7c:9b:41:85:13:b1:6c:3c:b4:da:3b:91:
92:2e:f4:d0:c5:da:31:92:a2:34:c9:09:77:26:73:68:84:6f:
f0:f8:52:d6:1a:24:88:da:96:ad:b1:e5:76:36:ab:73:2a:d4:
92:22:1a:45:93:44:6a:d1:37:22:a6:23:05:a5:6d:3f:9e:85:
bf:0c:82:f2:09:47:34:af:7b:e3:8f:2b:21:b9:01:08:26:83:
41:55:38:b6:37:3c:6c:1a:48:de:fc:d2:09:bb:03:a6:b7:4f:
54:c8:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:38 2025 by rpki-client