Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
File: c_yJAj6sdKsphWP5ndtx9vFflTg.mft (raw, json)
Hash identifier: lrwTNhbEMNqwgxw8lU//ZIO7keM4n8B/HitT5+XP8zE=
Subject key identifier: 73:DC:66:B3:04:8B:8E:49:AD:9F:2A:03:72:3D:38:CF:06:15:B6:4A
Authority key identifier: 73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
Certificate issuer: /CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Certificate serial: 019A70DC22AD63FFF3ABE0AF99C2A5AD0529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
Manifest number: 0B32
Signing time: Tue 11 Nov 2025 03:01:06 +0000
Manifest this update: Tue 11 Nov 2025 03:01:06 +0000
Manifest next update: Wed 12 Nov 2025 03:01:06 +0000
Files and hashes: 1: cS_oROlW9-wwbVo9EJJ4pl2eigE.roa (hash: JJRh33aNovJ8ixT1Vh+De6OT6uSujo/Saa2Iamwl/iI=)
2: c_yJAj6sdKsphWP5ndtx9vFflTg.crl (hash: JfJzIGFum3NldD+Dd2nUt2ZmUHDSP36JYt7bm7slM+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:22:ad:63:ff:f3:ab:e0:af:99:c2:a5:ad:05:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Validity
Not Before: Nov 11 03:01:06 2025 GMT
Not After : Nov 12 03:01:06 2025 GMT
Subject: CN=73dc66b3048b8e49ad9f2a03723d38cf0615b64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:0f:33:c2:0e:1e:99:92:e7:d4:b4:6a:45:
b9:10:3c:0d:3d:8f:a0:63:b7:34:d2:c8:56:4c:0f:
bc:a7:cb:96:2d:18:0e:bf:6c:ee:df:b7:06:f0:85:
71:56:a5:68:ce:7f:cd:75:7a:e3:2a:27:98:c1:53:
e3:87:c3:f7:8e:04:10:e5:ab:55:2f:e4:1d:a3:73:
59:a6:9c:68:1e:b3:72:f2:61:4c:23:c8:b9:a7:a2:
75:28:af:6f:2e:c5:08:37:58:f1:9b:bb:9e:72:ce:
4d:e3:f0:ac:18:24:ef:f6:09:d0:08:43:d2:1b:1e:
4e:cf:7b:40:7d:1d:79:8b:83:74:03:77:27:86:96:
33:fd:d4:0b:1c:c3:c2:cc:e3:16:b6:df:5c:bb:2c:
30:05:1d:5b:c8:68:31:c0:93:73:51:3c:e3:14:17:
2c:71:59:89:98:7e:32:af:2e:ee:42:45:5d:b7:01:
d9:41:10:5d:4d:1a:fc:f3:f3:14:51:59:66:85:e1:
c3:b6:00:5a:b4:e6:1c:a5:ae:54:87:b9:f7:8d:97:
d8:fb:3c:fd:e7:be:92:69:a7:70:78:f7:b7:d8:54:
fc:6d:6b:6d:cc:31:a0:2d:60:7b:8c:90:3b:4f:1f:
fb:c0:a8:b4:f4:e2:0c:fe:9c:ce:a1:df:11:24:69:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DC:66:B3:04:8B:8E:49:AD:9F:2A:03:72:3D:38:CF:06:15:B6:4A
X509v3 Authority Key Identifier:
keyid:73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ff:e4:10:9a:0e:28:68:d4:14:67:c5:3e:10:3b:44:39:b9:
38:d3:4f:12:16:09:1c:c3:82:6c:cb:ee:5a:98:c7:70:35:e6:
79:b3:b6:73:45:6f:e0:53:59:c1:3a:2c:a2:f8:9e:be:df:46:
12:ba:0e:62:b3:f8:a1:39:e5:f4:bb:d7:3d:d8:9a:4c:56:78:
a2:82:7f:6b:de:e6:8a:00:1d:79:a2:57:81:33:9f:16:f0:6c:
a3:49:4d:55:21:ee:9c:18:45:a7:3a:3f:eb:0e:9d:05:b6:60:
76:6b:e6:a8:3a:6c:e3:f4:68:74:78:c4:12:52:fc:c7:41:9e:
56:ed:6b:02:ef:6c:70:6f:8c:18:cd:a9:9d:0f:37:a2:d3:aa:
0f:76:69:5e:eb:c7:3c:09:eb:0b:e2:33:bc:c3:c5:ee:42:14:
2a:b4:ab:7a:e6:1f:76:ba:8f:4e:ad:4b:2f:3c:64:1e:1f:90:
9f:1d:87:32:a5:45:63:71:cf:88:90:65:b5:d1:3d:35:0f:d2:
53:f7:17:3e:0d:85:2c:fd:22:59:fe:02:28:42:fe:89:78:58:
01:5b:ad:a7:eb:33:57:16:07:cc:28:8a:d5:81:86:60:5e:25:
12:dc:71:bb:be:0d:8f:b8:09:ec:a9:72:38:ce:f7:14:f7:40:
1e:b8:6f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:45 2025 by rpki-client