Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
File: yu79CETrE5qyH4DUByzguO3MBrU.mft (raw, json)
Hash identifier: 35cr+69cozYI0jUoPA4996yJRtY2KmwuTG+YwSBo10g=
Subject key identifier: 9E:C7:10:DF:63:64:CF:87:3E:3B:71:79:F9:07:84:5F:17:99:F4:71
Authority key identifier: CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
Certificate issuer: /CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Certificate serial: 019A729370A3EF45599BE267D04FC60FE924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
Manifest number: 0370
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: Zja22H7huKyd4DPgiFnlD1La7Es.roa (hash: AXLErsCzJc/qr3Tna9lN0B3Ap4Vz9K2Svk3Dy2hJER8=)
2: yu79CETrE5qyH4DUByzguO3MBrU.crl (hash: pqIjAljKGGfVYq9mNCwd2tSgMRcLvRIYzjmxQe3hR60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:70:a3:ef:45:59:9b:e2:67:d0:4f:c6:0f:e9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=9ec710df6364cf873e3b7179f907845f1799f471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:65:a3:3e:69:e0:50:5b:a6:7b:66:b2:48:
cb:3a:23:21:61:49:70:80:ce:e9:0d:26:e3:62:57:
30:f6:33:fe:09:02:39:a3:6e:53:b6:54:f3:86:42:
31:c9:78:f3:bf:7f:58:eb:20:23:04:a7:3e:a3:3b:
b0:9e:24:01:dc:26:eb:d4:c0:9e:2d:3e:8a:9d:db:
86:17:3d:74:5b:19:62:f2:93:18:2e:e3:b2:d1:d2:
1d:e9:85:20:8f:57:78:0d:9a:92:f4:4c:f7:ff:94:
0d:e6:12:49:13:ce:18:e2:88:bf:56:d9:b2:99:e3:
7c:c4:29:20:25:ca:11:06:ca:62:32:7f:53:c0:91:
8b:1b:7b:28:06:86:49:62:e3:4c:db:e8:03:ac:f9:
d6:a7:30:d9:84:b8:e0:00:f8:5d:77:ed:91:23:49:
cd:83:98:4d:96:ba:9d:99:80:ed:1b:66:09:c4:4e:
d8:43:d0:28:5d:da:99:65:19:36:db:09:45:a2:80:
9a:4e:e8:7d:12:3d:ab:8a:3f:f0:ec:73:41:e7:3d:
34:31:8e:ba:20:cd:9c:3a:da:8c:d4:63:9f:35:c9:
15:dd:ea:c8:ae:dc:60:f1:22:f5:e2:a0:51:fd:7a:
1c:82:c1:2b:6c:52:3d:a7:83:18:5a:05:e4:0f:94:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C7:10:DF:63:64:CF:87:3E:3B:71:79:F9:07:84:5F:17:99:F4:71
X509v3 Authority Key Identifier:
keyid:CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:62:e4:b8:ab:e4:0b:56:d2:f0:6c:93:13:1a:8e:66:82:fb:
a8:4c:5d:bd:1e:0f:40:c4:95:b5:bd:42:2f:3a:fd:f3:38:d0:
59:fe:18:55:ad:4e:69:2e:93:67:45:9c:9f:df:ee:b6:8e:ad:
b9:af:ad:99:3f:11:b8:dc:fb:51:b3:b5:aa:99:dc:eb:13:86:
90:f3:b7:11:92:a3:68:37:08:e2:3e:b5:20:23:a4:bf:ef:cf:
17:29:a3:ee:14:74:7c:74:eb:2b:e6:71:5a:d4:b5:cf:ef:15:
75:f1:e2:e8:3a:9f:f1:c4:0f:5e:8c:81:5d:76:d3:2d:ba:16:
1c:82:f5:9f:9d:c3:cc:51:c3:7e:ed:79:d7:8e:a2:68:f6:73:
13:40:2c:fa:f1:f6:2b:90:ff:9d:36:f6:fa:e3:9b:b3:2a:91:
51:50:0f:da:5d:11:02:63:a8:0b:ee:e3:57:49:9a:11:b8:ae:
01:54:c2:69:d3:ff:f3:fa:68:b2:0f:c9:e9:9f:3e:fb:b7:19:
1d:79:34:d4:0c:d1:6c:95:9c:46:90:7a:50:90:a1:e1:96:1b:
4c:0f:41:c0:24:32:7f:39:eb:a7:65:1f:a9:2f:82:ff:18:a3:
26:dc:55:ec:5a:c7:6f:f9:84:85:ab:bc:53:a1:2a:d1:c9:15:
08:ec:cc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:18 2025 by rpki-client