Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: JEwfIXpka2zcpihq5A1QeELJD2FfLO0MjnLcxx9ilYE=
Subject key identifier: B1:A4:7B:9D:5F:D7:28:70:2A:AF:F2:C8:0B:7E:1A:E3:61:80:BC:BE
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 019A722654AFFCBB01CE1C6D0325588D620A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 0FA8
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: 3PBHfLBE8iRPOIQPAkbJ5t34JiZwxXnMrh6jhuL++ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:54:af:fc:bb:01:ce:1c:6d:03:25:58:8d:62:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=b1a47b9d5fd728702aaff2c80b7e1ae36180bcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b5:88:9e:95:83:b5:22:b7:03:04:cf:7d:c4:
34:4e:8f:f0:67:2e:16:37:ae:5d:19:ea:1b:0b:87:
e5:b6:83:47:74:31:a9:44:11:44:37:ca:57:b8:4e:
25:a3:0b:4a:08:4d:b2:58:67:be:34:01:39:d5:cd:
98:b6:ba:af:cf:6a:fe:83:51:c5:da:22:f4:96:29:
67:85:d9:9c:5c:be:86:85:77:0b:21:34:c7:ba:ed:
d1:b8:ea:a1:33:cb:a9:b0:78:b2:ec:00:8b:28:31:
25:d3:26:80:19:06:0b:fe:0a:fa:8f:a0:80:6b:ee:
30:c8:aa:af:00:32:15:b5:f6:84:ca:f3:66:82:73:
d3:15:d4:23:0a:2f:f1:78:fd:dd:69:e7:82:3b:89:
eb:ab:83:6f:09:bf:e5:2c:c6:cf:f5:69:dd:21:37:
2e:9a:69:15:37:89:18:39:fc:7e:1e:8e:55:a5:19:
b0:52:11:1b:d4:7d:4b:87:96:df:86:15:75:87:2a:
01:10:8c:34:ac:6d:41:6b:3a:ba:ff:99:2b:da:5a:
9f:3d:bc:8c:c0:c0:b9:02:c1:4c:42:90:ed:b4:23:
25:70:9a:8d:95:97:37:5f:2a:6f:f1:51:11:eb:d8:
4f:1b:1e:27:81:08:92:d1:db:a6:4d:09:12:69:43:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A4:7B:9D:5F:D7:28:70:2A:AF:F2:C8:0B:7E:1A:E3:61:80:BC:BE
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5a:a5:80:08:d2:8c:4e:77:02:d0:ff:9b:4f:85:27:64:53:
1c:d9:12:e8:a7:bb:dd:2d:b0:ab:90:50:7c:73:d7:f5:eb:37:
eb:d2:93:18:98:97:25:14:a0:2b:03:3c:44:39:16:ef:12:08:
a9:5a:6f:01:d2:70:3c:01:8e:25:b0:ae:b6:d1:94:07:57:d8:
97:5e:a0:e3:4d:88:9a:a5:53:20:a8:07:2c:d6:b4:f9:40:d1:
c6:85:94:8c:31:9a:99:53:3e:c6:16:6e:e4:f2:da:61:bf:d0:
75:8c:9d:03:39:03:d6:ea:b0:ad:b0:45:5f:c3:62:44:8c:c3:
4a:c1:64:f9:0a:c7:4b:17:91:82:24:a8:71:ab:3b:a2:76:a4:
41:ae:ae:90:5b:3b:10:18:55:32:42:c4:a2:32:3c:5d:1a:80:
a3:45:4e:a7:b8:83:3b:d0:61:bf:f5:e9:07:68:59:ba:94:a1:
41:59:07:a3:32:5f:7a:5c:9d:6c:fa:a7:06:9e:8d:8e:26:37:
a7:da:19:a5:4f:ec:6d:49:b7:92:cf:07:d3:cb:55:57:7b:94:
d0:f7:f5:9b:b0:21:ac:bc:62:43:b0:60:3e:f9:83:2b:92:6e:
3e:42:4a:5b:6c:0c:35:b0:57:1b:42:fa:a2:1b:5e:42:65:62:
41:26:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:45 2025 by rpki-client