Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier: pKgRrni5G0txYCaT4yOHR6tbzsLJb/wGNT3OlI/d0Uw=
Subject key identifier: 3A:4D:80:44:E9:87:56:1C:54:4C:67:CC:15:EC:41:32:52:B0:72:B8
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 019A71B80745B14165B453B354F2F5C6B68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number: 07F6
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa (hash: xjrK/sVAC5wf26/BaujuTP3RD5GR/bbBxu4fokZn8xY=)
2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: 7SixtxWfw3BAMJgWCuCwRphT7uUk0Sas9jKS1QShckU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:07:45:b1:41:65:b4:53:b3:54:f2:f5:c6:b6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=3a4d8044e987561c544c67cc15ec413252b072b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:59:74:25:8b:c8:f3:1c:85:bc:b5:8f:a9:
4e:d4:c5:f0:b6:ce:8c:d0:b9:c8:1e:7b:69:b3:bc:
49:ae:d3:5f:8b:9b:b2:37:1f:66:68:d4:7e:4c:38:
94:e1:1a:c5:65:4d:be:88:5c:c9:ec:1d:87:fe:fd:
48:da:5c:4b:42:a1:76:86:0f:84:0b:9d:d3:44:d4:
c3:1b:ad:53:0a:dd:78:07:4b:87:73:95:34:8b:66:
d6:91:4d:bd:43:90:b2:22:a8:30:19:01:10:7e:46:
76:7d:2e:dc:a6:25:e5:ce:39:6b:ca:96:db:75:fe:
53:a8:34:6e:aa:0d:f6:07:0d:b5:41:f9:0c:79:b0:
c7:6a:87:08:3f:ab:cf:f6:ee:fb:d8:fd:f3:42:92:
17:f4:ac:80:86:52:6f:f8:32:9b:e7:f0:fb:40:e2:
1c:c8:30:84:80:6e:64:0b:61:00:d5:a9:64:13:4c:
83:85:f5:32:72:60:f2:94:db:79:bf:15:b7:75:7d:
09:d5:23:57:d8:80:7a:fc:73:5a:4d:d9:07:bd:07:
b5:49:fb:38:80:c0:00:61:56:0e:04:f7:dc:f0:af:
21:9b:2a:d6:89:f9:a3:30:59:21:ee:f4:ae:7d:81:
61:5c:d3:2f:44:ba:8a:1b:93:10:bf:d1:b5:9d:87:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4D:80:44:E9:87:56:1C:54:4C:67:CC:15:EC:41:32:52:B0:72:B8
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4f:77:da:d9:4d:d7:3c:ef:c0:65:46:fb:84:fd:c1:cd:24:
54:b3:6b:97:5b:e5:91:6c:18:78:2d:a8:c7:5d:dd:eb:bb:56:
5f:09:d9:2c:eb:25:73:72:d2:cc:d6:b5:89:9d:f3:7e:09:8b:
f1:76:20:6f:36:d5:80:60:94:78:1a:7b:09:27:78:0c:c4:58:
4a:ee:ef:70:10:74:4b:78:9f:24:6b:7b:6b:7f:75:57:06:8d:
f0:15:ac:26:a7:b4:ae:cc:02:3c:81:d7:f1:28:51:0b:54:ec:
e8:3e:dd:41:f2:11:c1:33:68:49:30:57:85:21:15:58:be:08:
bf:52:ca:5c:b2:89:84:7b:d0:a1:27:52:c9:3c:08:87:cf:d1:
3a:d9:ac:4f:9e:4b:65:3c:14:b5:e8:60:58:78:40:fa:f1:a2:
09:73:a0:28:66:73:e5:59:f6:c4:43:01:d8:01:9c:a8:ed:1a:
11:d3:63:eb:9a:7c:86:99:a6:e0:08:1c:67:5a:a7:08:29:fd:
9b:72:c8:e0:ec:ad:9e:50:9d:43:dc:67:8b:35:f3:05:f8:54:
de:fd:85:1c:29:a3:ae:4d:54:f9:64:98:c4:97:70:b0:dd:9e:
33:dc:72:3a:0b:1f:7b:9d:41:f2:02:85:e8:ef:11:49:c5:4a:
f7:e5:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:15 2025 by rpki-client