Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: eSLnn2uArThMAE78gDlxZvoKg63Kk4uTh2TwHW9mTJc=
Subject key identifier: 13:01:3F:99:C9:B8:DD:55:5F:CF:D4:90:65:8B:57:28:03:8A:1C:B6
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 019A73381E56FBDC1DD244FD4BB264994DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 0909
Signing time: Tue 11 Nov 2025 14:00:48 +0000
Manifest this update: Tue 11 Nov 2025 14:00:48 +0000
Manifest next update: Wed 12 Nov 2025 14:00:48 +0000
Files and hashes: 1: DtOZa_QnwbfCZcw6Ri25L5g5nKw.roa (hash: gPjF2bHK3b5JRNcNAuMcqGVmU2CAaScFraaS80Iy5UA=)
2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: t1o2Za/sb8o2JW6b9yFdqGUYf7j3OSftz8Tazx9sE/c=)
3: e9Z_8CtChGt4iClYaH_YgcqeT1k.roa (hash: 2K2jsaRk3MeR/R/Hwsml8Lc+ehwc8rBqNjGIvU2lgG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:1e:56:fb:dc:1d:d2:44:fd:4b:b2:64:99:4d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Nov 11 14:00:48 2025 GMT
Not After : Nov 12 14:00:48 2025 GMT
Subject: CN=13013f99c9b8dd555fcfd490658b5728038a1cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:06:c9:b7:c7:11:cc:16:83:a5:87:5e:4b:
7f:c1:a0:b9:ca:01:0f:77:59:0e:88:91:fe:12:07:
1a:72:78:74:54:45:e2:20:13:87:20:19:a1:56:3f:
7b:82:bd:c4:4c:1e:7d:10:f8:4c:8c:6b:44:dd:bd:
13:fc:3e:5e:04:84:a1:2d:16:58:4c:4f:87:8f:2c:
64:28:ca:d0:39:12:bd:2f:2c:9e:ee:f4:ad:dd:46:
d7:81:12:91:85:88:9f:a6:de:4a:58:f1:bf:97:b0:
49:ac:9b:8d:80:84:3c:e2:d4:57:7f:e9:74:e3:42:
a7:65:a5:1a:60:de:d4:7b:bd:d9:6b:e6:2f:37:a4:
f3:dc:02:ee:82:38:bf:bb:63:0f:dc:7f:0a:19:dd:
29:1c:8b:5e:20:eb:8e:ab:da:ae:52:3a:d6:96:f0:
61:78:b9:a9:22:c8:97:54:76:e9:9c:e8:61:da:8b:
4c:95:81:4b:ae:90:4d:3f:10:55:ed:aa:16:27:a0:
10:02:99:b0:56:fc:12:7a:11:14:ba:b8:3d:5b:09:
7f:c3:de:7a:72:57:32:d6:99:90:49:a8:1b:5f:70:
60:5c:41:9a:a7:ff:7b:7f:63:4e:f2:00:1c:c2:82:
22:5d:b8:35:96:46:41:df:6e:f2:a3:5d:21:06:48:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:01:3F:99:C9:B8:DD:55:5F:CF:D4:90:65:8B:57:28:03:8A:1C:B6
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a7:bb:00:55:8f:6e:b0:cd:76:7f:bb:6f:63:03:e7:4e:d6:
d8:7b:3f:16:9f:d4:e1:33:ec:ea:a2:65:79:b9:0f:10:6f:51:
9d:38:4d:6f:19:62:76:f9:b8:bf:48:7a:a8:83:76:1d:37:79:
c1:2a:b9:01:9e:ca:66:bc:b8:51:04:fd:ff:da:4c:90:92:46:
e5:1a:fd:48:65:93:56:a8:f1:91:e8:9e:39:d2:03:c8:8a:65:
07:8c:07:bf:04:33:50:5b:74:2a:ea:b4:c1:15:4f:28:3f:b3:
43:5c:86:50:dd:ec:a2:2d:44:48:38:9d:b2:bd:25:3b:e0:2b:
19:30:78:e2:9c:87:b8:63:5e:f7:ca:e7:d0:9b:7d:fd:cd:73:
53:25:5a:b0:ec:13:32:06:f8:4b:74:34:8e:9c:ac:f7:53:13:
7d:c7:7e:55:14:ba:24:e2:9b:af:c5:05:7b:7c:da:d0:45:f0:
7d:00:71:98:72:e2:48:1f:af:f7:78:cf:5d:74:9e:68:49:b3:
46:17:94:3e:16:62:8d:68:5a:73:fa:64:73:9a:56:dd:00:c7:
a0:5e:8a:0a:6c:54:26:71:eb:f9:39:16:5b:18:06:11:b7:4d:
ca:8b:29:f8:d4:88:62:61:c4:86:b8:7f:76:dc:72:7c:d9:a7:
ae:12:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:49 2025 by rpki-client