Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
File: yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft (raw, json)
Hash identifier: yBIzgH/C8fYDb6Oo/+gui0LnaK/OxknriCCej/nh3RQ=
Subject key identifier: 3C:6C:EF:A2:6C:D5:73:7A:E4:8A:6C:E8:9E:55:B0:DC:10:CA:A9:F1
Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
Certificate issuer: /CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Certificate serial: 019A71B84E89A9EF5E0286A51F84ECAB233C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: fewPOq5Sy5alJvzpYZYieD6pmV8.roa (hash: nQVFjlDzgmj3SLHG29wBX3sEI4Pk0MW5juplwGFMB6g=)
2: yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl (hash: VU6IaTGamElwOvi6PVH+wA1zBvTMnEwzqqY8VpIoiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4e:89:a9:ef:5e:02:86:a5:1f:84:ec:ab:23:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=3c6cefa26cd5737ae48a6ce89e55b0dc10caa9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:1f:cc:0a:7a:03:90:a1:78:00:08:c0:89:
55:ba:df:44:ba:ab:32:c2:c5:30:f9:6f:54:15:a3:
3e:46:4c:02:6e:bc:f2:72:79:16:f8:7e:ea:94:57:
f5:cc:e1:16:17:b3:67:5f:54:63:ba:8e:2c:d5:99:
62:bb:49:f2:4c:9c:a1:7b:4d:9d:85:e1:e5:ec:fe:
b0:9a:ac:c4:17:1b:b5:cb:cb:e2:06:e4:a8:88:90:
0f:e1:18:f2:0e:47:c7:e1:fb:29:5c:33:63:05:a9:
bc:f6:9b:c8:ba:6a:a8:8a:bb:af:22:a3:b1:2d:3b:
4d:54:f1:2c:86:53:55:cf:db:08:83:55:34:21:98:
71:33:e3:e5:92:d6:36:c0:fd:29:9c:b1:5c:b9:b2:
fd:28:f1:7b:c4:0a:09:3e:39:db:4b:e6:1a:30:b5:
02:b8:72:d1:33:e3:03:0a:0b:1f:60:b1:2c:0c:e3:
b9:5d:db:35:43:dc:3a:4f:06:4c:eb:e3:23:76:0f:
f0:31:4b:20:a7:7c:fc:1f:9c:77:76:98:98:ec:aa:
7c:41:b5:8f:8f:ac:48:2f:b2:43:2f:b8:02:a9:7b:
71:78:3c:87:6e:9a:ca:f9:93:81:6f:6d:74:f8:82:
8f:f3:ec:6e:4c:6e:a5:02:d8:35:2e:f4:14:05:c8:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6C:EF:A2:6C:D5:73:7A:E4:8A:6C:E8:9E:55:B0:DC:10:CA:A9:F1
X509v3 Authority Key Identifier:
keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6e:69:69:67:e6:ef:32:9d:96:3e:ce:53:9f:b5:82:d0:d0:
e8:a6:7c:17:0a:da:b6:e1:40:76:a9:53:0d:71:2a:fe:1d:4f:
b3:27:43:d4:07:7e:59:e2:66:02:dd:75:8c:5d:09:7a:64:67:
85:25:80:3e:9a:44:dc:16:26:dc:25:3d:eb:b6:89:e9:26:a6:
ed:31:ed:3a:bf:fb:f4:a4:3a:cf:bd:0e:7b:f0:a0:49:8c:c0:
73:61:9e:8c:ab:40:42:5f:6b:76:64:96:a6:3c:0e:8c:6a:80:
b0:91:44:f9:aa:a7:d1:c5:57:97:4a:70:0f:3e:6a:22:59:38:
3c:69:35:bd:fe:91:e1:ad:c0:d1:08:ac:20:87:6b:a8:f9:0d:
1e:1f:ea:81:e9:f7:85:ee:1f:b5:6a:f3:86:1d:92:29:2a:04:
81:f2:49:dd:23:5b:86:b8:d1:43:39:d2:fc:7c:70:05:75:80:
eb:91:44:db:3c:fa:2f:07:4c:f5:5d:75:d1:06:07:c3:e1:9a:
23:3f:d0:3a:d3:03:99:6f:ef:06:43:bb:2d:64:a6:9c:16:8a:
ec:6b:70:bf:c6:78:be:0d:6b:4e:19:5a:a1:b3:0e:a2:9c:d1:
94:79:e5:8a:81:4c:16:8d:53:8e:32:4a:3a:ee:07:77:48:1e:
25:70:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:35 2025 by rpki-client