Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: 3p7X1R8Q/2/91rnw073F9pP7IJ7wxrtegm+0H0dN4XU=
Subject key identifier: 99:60:5D:1F:38:2A:C5:1A:EE:3F:94:BE:AD:55:38:D0:E6:E1:DA:FB
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 019A71EEAB682E97744C46284C51AF93F0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 16B1
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: LMS8u0KDvgOj9EFMwhe5dKJib50uC766zr1EmpTZ6Rg=)
2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ab:68:2e:97:74:4c:46:28:4c:51:af:93:f0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=99605d1f382ac51aee3f94bead5538d0e6e1dafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e6:a4:0b:7e:51:be:00:ac:14:60:b1:98:68:
a5:09:51:2d:a4:97:f9:37:91:71:11:d8:f4:f5:a3:
81:e3:6f:e6:ee:02:f4:10:25:3e:9f:d0:dc:9e:5f:
f1:05:84:5e:d3:51:3e:30:1e:29:46:0d:29:9f:b7:
de:08:48:cb:de:7e:51:7e:e9:9b:0e:28:7b:f1:5d:
0e:85:57:58:fe:ff:77:4c:0f:16:51:9d:c9:06:d1:
9c:7f:64:b8:f7:aa:84:4b:74:00:b5:65:48:57:91:
2e:ab:c2:6e:df:dc:44:80:87:91:c8:09:aa:03:4d:
45:1c:c6:1c:e1:86:12:af:d0:8e:34:57:34:9f:82:
7d:b9:5f:23:69:83:f8:b0:4a:46:11:d5:28:d8:c3:
6e:44:6d:2f:3a:a7:ca:2f:ae:7f:cc:75:d3:99:12:
95:0d:af:97:6d:54:20:30:e5:a9:ae:67:e6:58:fe:
55:11:c6:66:72:cf:32:cb:ed:18:77:bf:57:0e:24:
b4:38:3e:b5:59:ba:be:e7:dc:71:1b:d2:c3:0a:7b:
7c:89:df:d7:70:d5:a7:66:21:da:ae:69:d7:07:d1:
2c:6b:4d:3d:04:aa:c0:44:c6:46:90:61:b2:f5:9f:
20:82:2c:e3:57:51:a7:52:fb:37:57:b0:59:05:97:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:5D:1F:38:2A:C5:1A:EE:3F:94:BE:AD:55:38:D0:E6:E1:DA:FB
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:89:26:54:26:d9:e2:56:20:01:ab:6a:64:51:ac:f1:d3:8b:
a6:c2:08:43:e6:54:5f:a6:15:11:22:8e:32:be:9e:2b:8b:d5:
ba:12:1e:9d:48:d6:19:9f:09:3a:fd:a0:1f:ac:4c:16:52:eb:
25:6b:84:a2:0f:9b:3e:53:f4:7e:37:53:e2:ab:66:94:10:07:
71:f4:e0:e3:95:b5:b2:d9:36:5c:e7:fb:c9:93:f5:74:3a:60:
92:7f:47:8a:94:c8:1e:b3:48:53:d8:4d:cf:60:e4:fa:6b:48:
30:90:c8:73:93:e8:de:fd:4e:f7:58:11:c1:ed:41:8c:35:17:
a5:24:41:80:07:e7:4f:40:3c:9f:8e:68:33:c3:fa:32:93:03:
59:15:4d:1b:ab:9d:d5:9e:34:82:f3:9c:65:2f:34:b2:7d:7c:
82:1e:f7:42:99:aa:82:2f:a2:c8:ff:9f:da:1d:b8:d0:5f:3c:
1d:30:3b:cd:01:6b:11:f6:c3:8d:41:c7:7c:a2:6e:ae:cc:50:
9a:c2:36:df:04:a7:d8:da:74:1c:45:68:2b:ad:8d:20:a3:be:
77:19:6b:30:3c:a8:9c:5d:1d:cc:1e:4e:bf:5b:c6:58:03:f4:
fe:ca:8e:5b:86:34:0a:70:15:77:3f:50:58:59:0f:ff:ea:cb:
d5:d8:a5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:20 2025 by rpki-client