Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: sHqAS018vfmBPG22HWBIi+r6e1uIT+fFEUPgGG4qvLw=
Subject key identifier: 23:01:18:48:8D:FB:5B:A2:B6:60:73:F4:BF:2A:8D:0A:0B:14:17:0F
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 019A4B18905D2D303E1F209E84C83AE51C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 0FB9
Signing time: Mon 03 Nov 2025 19:01:32 +0000
Manifest this update: Mon 03 Nov 2025 19:01:32 +0000
Manifest next update: Tue 04 Nov 2025 19:01:32 +0000
Files and hashes: 1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: XGEEzORidXZ2d+SF4e6mvXElNVDjBeJ5aCel+be5KEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:18:90:5d:2d:30:3e:1f:20:9e:84:c8:3a:e5:1c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Nov 3 19:01:32 2025 GMT
Not After : Nov 4 19:01:32 2025 GMT
Subject: CN=230118488dfb5ba2b66073f4bf2a8d0a0b14170f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:68:21:c5:94:b5:95:3f:3a:98:f9:ba:25:
09:1b:35:5d:38:ae:a9:8c:dd:64:29:4f:f8:30:a7:
79:13:60:95:0f:34:f5:62:72:92:0f:17:3e:6d:a9:
08:f4:09:2e:8f:65:96:ca:bd:e1:23:eb:59:ea:ea:
9a:9d:81:26:51:88:71:a8:76:66:5a:cd:92:41:55:
6c:0b:d3:e8:9d:2e:93:e4:f9:1c:76:86:39:86:75:
fd:32:c5:52:96:ed:ea:27:60:07:8f:aa:28:85:bf:
1e:d9:38:ca:9e:85:9d:18:c4:a6:09:44:b1:d7:26:
01:da:28:dc:51:b8:53:47:40:32:2f:e2:d7:d5:a1:
13:be:d7:fb:0c:ff:24:ee:b4:4e:6e:ee:25:d1:e2:
e3:1a:5b:44:c9:75:cb:17:86:ea:98:fe:91:f3:d0:
8b:b2:64:54:e9:53:81:dc:c9:21:61:9f:a6:86:58:
6b:78:85:e1:06:46:ef:86:bc:f3:4a:7e:e3:ee:4c:
75:df:83:c7:96:e1:e7:6b:69:ba:9e:65:07:52:30:
78:ba:9d:31:d4:b2:58:c5:b9:1f:37:e0:3c:3b:d5:
e5:3f:8f:21:e1:29:b3:ab:91:80:25:02:9e:7a:f7:
6f:7e:34:e1:8c:c9:d1:02:8d:a4:c1:8c:e7:94:4b:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:01:18:48:8D:FB:5B:A2:B6:60:73:F4:BF:2A:8D:0A:0B:14:17:0F
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:be:d5:e2:7d:d6:08:bf:c1:30:19:b4:21:45:30:47:9b:86:
8c:4e:f9:1b:ca:46:6b:0d:d6:23:31:1f:2a:11:f6:ca:20:05:
e5:5a:8a:14:74:4f:f9:47:57:8c:06:f8:29:60:3e:49:c1:19:
d1:ac:93:3d:12:e5:e2:84:f3:52:72:8e:ae:6d:b8:4d:95:36:
f5:9e:4c:cc:d1:18:3a:1b:c8:6e:ea:57:7a:80:1f:99:22:60:
a7:59:ee:66:38:db:af:9b:12:8c:26:1c:14:0b:a6:8f:4c:ef:
e3:25:c7:4d:91:be:a3:71:da:b1:b3:c4:e1:25:7a:65:85:c2:
1b:81:38:cf:04:04:aa:0b:d8:e5:1f:f6:1f:d0:52:42:89:ea:
75:4e:c0:0c:21:2c:5b:4d:a5:2f:fa:1f:3c:d4:ca:63:be:8c:
4d:e3:18:f8:03:fa:40:ad:f6:b7:67:55:be:7d:b1:a7:6a:9f:
98:57:2f:4e:d7:f8:06:04:b0:ee:47:83:fe:7c:9c:2c:16:a0:
b9:40:4e:80:5c:ea:01:54:0a:8d:4e:b6:40:d5:51:cd:99:d3:
c5:5d:bc:f7:9f:14:f5:b0:5f:2e:a9:f2:74:3b:78:b1:70:47:
83:06:c1:0d:61:2b:5b:a4:77:56:b4:2a:cd:08:9b:7b:1e:ec:
1a:c1:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 03:59:12 2025 by rpki-client