Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier: mh1AcxssfgXfTXH0icgo1D7IR4Rg0uCb8faADjdjz9c=
Subject key identifier: F3:54:E9:53:52:03:B5:7C:A8:47:92:48:A0:94:E0:21:C9:4A:CC:C1
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 019A73384EB3804DC5DD532552CA753458FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number: 1467
Signing time: Tue 11 Nov 2025 14:01:01 +0000
Manifest this update: Tue 11 Nov 2025 14:01:01 +0000
Manifest next update: Wed 12 Nov 2025 14:01:01 +0000
Files and hashes: 1: GEnuOQleBBUDKJ-4Y-M3IyBH42g.roa (hash: OrN9ZjjDEjR1Mar15xKYXAUpkqA7O1AMRBJLOwwo76o=)
2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: HxJVtCh6rD74Ne3ZgYwHQF+e3XXly2JF/V9diVzlaXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:4e:b3:80:4d:c5:dd:53:25:52:ca:75:34:58:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: Nov 11 14:01:01 2025 GMT
Not After : Nov 12 14:01:01 2025 GMT
Subject: CN=f354e9535203b57ca8479248a094e021c94accc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:05:6a:68:ca:74:dd:91:69:10:d2:cc:f2:
3d:07:ea:c2:90:a6:dd:17:bb:87:59:76:1c:c3:ee:
52:fa:d6:74:bb:0a:fc:16:7a:e1:25:32:cf:c9:7f:
30:ea:ce:7f:f5:2f:9f:d5:70:8a:38:01:af:1f:e3:
78:ac:1e:3e:90:ef:12:cb:f3:9c:23:2b:3e:49:91:
62:db:81:1e:fd:ca:17:3a:31:dd:41:62:b9:4b:85:
b8:aa:fb:d2:d6:7c:12:ee:e2:40:d5:be:9b:40:f0:
ab:c3:4d:5e:ef:1f:2a:e6:39:cb:0b:68:99:b3:18:
25:4a:3f:ee:4b:84:d9:5e:0d:9a:ce:90:47:c6:bc:
56:d4:cb:5b:a4:39:a1:dd:3c:52:47:ca:73:87:ae:
2a:bc:a1:d4:aa:7e:db:18:62:70:5d:36:89:a2:a6:
8f:d8:9b:ed:64:dc:1a:e2:c0:65:93:66:92:14:c0:
78:f0:20:e8:3c:b0:fa:3b:bc:9c:68:76:78:6c:27:
aa:7c:de:76:ac:40:6b:ec:dc:7e:b6:0d:ee:ac:aa:
1b:ea:5d:d1:c5:f2:f1:49:44:a9:eb:50:d7:b2:04:
bc:8d:d8:b1:46:2f:72:d1:39:12:bc:70:df:cb:3d:
25:d9:96:38:4c:8b:6c:ef:92:70:db:85:7e:d9:20:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:54:E9:53:52:03:B5:7C:A8:47:92:48:A0:94:E0:21:C9:4A:CC:C1
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e2:c1:46:bb:8a:48:ca:0c:90:73:e2:0e:2a:3d:4d:25:92:
6b:01:ae:8f:a5:94:e4:32:16:da:44:32:23:75:b9:a2:d1:54:
be:86:e1:e0:a7:ca:30:30:20:30:ec:38:2b:d2:9e:c6:b7:7a:
9a:67:22:a7:17:2f:cf:61:2e:91:58:4d:a5:8c:54:ab:e7:ca:
b0:14:33:10:b7:c9:11:e1:74:0f:89:c3:de:aa:95:0b:91:54:
28:f1:5c:44:89:2e:d7:9b:b2:8f:3d:19:74:76:09:a2:9d:25:
58:6f:84:ec:e4:8e:0f:6b:e0:f8:be:fa:cf:9a:bd:9f:65:c7:
f9:db:77:74:f6:c8:16:45:1c:c5:09:0b:93:3b:59:8a:a4:ba:
94:89:a0:ac:65:92:d8:6f:9e:63:89:50:49:68:82:4c:a3:38:
72:70:40:cf:54:aa:77:44:7e:c0:7e:49:8a:cd:f5:0f:cd:a3:
a3:fb:99:be:18:1a:2a:ee:dc:9f:33:96:48:cf:fa:cd:e4:35:
b8:33:12:8f:97:d6:53:a6:c2:99:85:f3:3d:54:4e:16:f1:6b:
a5:01:58:c6:97:7b:fb:cb:a1:0a:a3:d4:ef:4c:e2:a5:a7:ac:
54:e7:fa:2b:48:37:cc:f9:ac:6d:40:92:7e:92:9c:71:43:2b:
08:b8:60:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:03 2025 by rpki-client