Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
File: yWncvDPoAQQ4EpKC03rU6L-EuB8.mft (raw, json)
Hash identifier: fKNayXF2hv8lv93iNb7YBbaI58H+M42KWKgRrtsIlio=
Subject key identifier: D0:50:9B:D7:83:BB:BD:72:79:75:EC:7E:B4:06:B6:F3:D2:B5:90:DB
Authority key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
Certificate issuer: /CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Certificate serial: 019A725C5EDD1839B8C1C261EA19D5A37B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
Manifest number: 164A
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: FU1o4K68ASMHjxslt5agTXMw1Z4.roa (hash: cFpnMXx4SNy55YthuxgRWkF2I8U6u41jmzS8UiT8Yts=)
2: yWncvDPoAQQ4EpKC03rU6L-EuB8.crl (hash: dtK7cjA86vzPxGNjDDbZKCFIbGuHUUg9/taHdiKnG1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5e:dd:18:39:b8:c1:c2:61:ea:19:d5:a3:7b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=d0509bd783bbbd727975ec7eb406b6f3d2b590db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:38:45:d7:8d:f4:9c:c9:23:36:ca:0c:1e:
16:de:89:54:92:e4:ab:f4:e0:e0:91:69:46:e4:fa:
01:2f:36:af:71:34:d7:75:de:94:fa:52:0f:f1:a1:
82:b4:fa:60:dd:ac:ce:d8:90:6f:7f:1f:23:6f:e9:
bd:71:f1:fc:0d:8c:8a:41:ee:aa:f6:9c:5e:89:4d:
cf:de:8e:17:6d:fb:5e:75:d5:1f:e4:a2:71:0b:5b:
fb:f9:49:38:ed:34:ec:8a:64:c6:f8:76:cc:fe:1a:
b3:7a:6a:3a:39:ea:20:b1:2d:f1:f0:1c:b5:d3:d8:
95:71:bd:c4:f6:28:47:a6:93:ce:84:83:59:17:41:
fb:b8:44:7c:bf:95:f0:15:22:03:f7:c4:69:12:47:
bd:ed:06:6d:98:4e:88:2d:c0:c5:88:98:9d:77:c5:
94:47:7d:19:25:54:3c:ee:4b:b0:af:2b:c6:cd:5c:
2d:d1:0b:fb:1c:54:12:34:19:54:59:d2:4e:1f:63:
3c:5c:8c:5e:d8:91:be:a5:b8:4b:73:8e:21:7c:05:
bf:75:cd:ee:1c:77:34:df:27:66:47:8c:72:12:e8:
fc:2f:90:20:e7:20:26:79:ac:f5:39:0d:47:86:44:
ea:ed:2a:93:54:fb:22:7d:fd:c0:84:5a:f4:45:e3:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:50:9B:D7:83:BB:BD:72:79:75:EC:7E:B4:06:B6:F3:D2:B5:90:DB
X509v3 Authority Key Identifier:
keyid:C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d4:d9:2b:41:eb:d7:50:49:5b:50:f5:67:67:fe:ac:ca:6a:
3f:b8:05:04:d6:15:b3:cd:0d:3c:f9:ac:25:f6:36:f1:97:cd:
b5:f2:82:45:65:81:b3:e2:62:4f:82:ac:48:45:35:69:2b:c0:
f5:67:80:d9:5b:29:1b:7b:8f:78:5e:8a:56:a9:08:8f:bd:af:
3b:0d:27:40:34:cb:29:a3:6f:fb:f5:52:de:15:52:8c:24:9f:
26:ea:49:9c:b0:96:cf:01:4c:f2:dd:fd:42:15:2a:dc:9a:08:
cd:16:ee:36:6f:55:4e:d2:91:7c:cd:86:a6:55:02:c7:7e:27:
98:74:d2:60:6c:9f:a3:dd:31:63:8a:60:68:86:17:c2:7a:87:
45:23:6a:67:4a:fd:1d:f5:bd:15:f6:f9:ef:de:2a:40:7f:21:
34:4c:fa:47:79:90:27:55:77:6a:8a:04:3b:65:3e:4b:11:a2:
eb:7c:5a:34:f9:60:cd:3e:6d:e0:99:d6:3b:db:02:74:c4:ec:
9e:b2:99:ad:df:c0:f4:31:70:1e:91:81:6e:31:36:49:c7:e0:
5f:8e:6e:c6:a7:50:fa:cf:af:16:ec:df:cf:db:fe:d5:d5:80:
e3:ae:d5:45:82:14:61:04:f6:d4:17:01:1c:e5:b4:5b:62:bb:
ce:e4:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:38 2025 by rpki-client