Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: CD+fA/x/D8hTuZh5wofVNLiKE/5MtDvGEzUb4d+yxtk=
Subject key identifier: 54:5E:8B:8F:1C:C0:46:79:13:7B:25:CD:E9:79:F1:FD:EB:2C:80:69
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 019A71EE692281069CFFEC50C8168D3EBA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (hash: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: N9z3HJ5NZxzZZSSZv43o+c9lBbjnXxe4rErTG1hriYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:69:22:81:06:9c:ff:ec:50:c8:16:8d:3e:ba:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=545e8b8f1cc04679137b25cde979f1fdeb2c8069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:15:b9:a9:d5:aa:5b:46:63:78:5f:92:61:
59:e7:44:3c:84:51:42:c8:9a:1f:00:ff:71:d4:76:
42:30:2d:b6:50:d3:a2:3d:1a:57:f4:ac:90:aa:0c:
40:7c:bc:da:ac:13:2d:7c:56:b9:85:1f:3b:ba:a6:
8b:bb:c9:e6:c0:ea:a2:ed:60:2e:79:23:88:52:18:
19:25:83:3b:ae:e8:b8:e9:f7:75:0e:f0:8a:d6:0f:
14:19:49:71:24:53:25:c5:ee:25:1d:7e:9d:4a:73:
0e:b2:ce:53:d9:cd:b9:70:ee:f1:23:10:03:ae:be:
68:e3:ab:95:aa:40:74:36:7f:f6:ac:a7:bd:cb:ea:
0a:51:38:b6:7b:50:62:7a:db:45:28:49:ad:0b:6e:
44:fa:3d:a1:ca:1f:38:3e:64:87:d3:2b:bd:39:c1:
bc:d7:58:2e:aa:2f:b3:ff:4a:c4:cd:cd:b9:00:6e:
a9:4e:8c:67:33:cb:9e:50:d7:67:de:9b:6f:46:4f:
26:08:56:cd:72:c7:d8:cb:fc:e0:90:c2:a9:23:00:
81:93:f8:f3:59:f2:aa:1e:d0:6e:bb:99:36:b9:99:
68:53:ad:61:ad:1d:57:38:b4:f5:23:25:59:30:c6:
0e:df:10:1a:89:b5:73:48:11:b7:c5:e4:05:f6:54:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5E:8B:8F:1C:C0:46:79:13:7B:25:CD:E9:79:F1:FD:EB:2C:80:69
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b1:67:28:10:38:18:b9:d4:85:08:60:5a:f5:7c:53:25:d2:
ea:11:cd:50:54:c1:52:f2:02:06:8c:29:c3:d9:52:ce:b8:8a:
d3:b2:1c:aa:a6:76:64:ba:a8:8d:81:10:d0:2f:d2:4a:30:18:
ee:c4:2d:03:d8:e8:0d:22:65:b1:e7:a2:f3:78:f5:2c:ce:21:
32:a2:55:d4:bc:7f:f0:82:08:3c:3c:78:01:d1:3d:60:b5:c4:
d8:d9:78:dd:05:b6:95:c3:c3:df:a8:bc:d7:df:e3:41:fe:e4:
a5:1b:e1:ec:1d:7e:7e:cb:ee:27:0b:85:af:23:c9:2c:55:9c:
ca:63:49:a7:e4:09:85:12:e0:7e:38:12:c2:2d:3b:d7:38:d2:
cc:a3:f1:81:8d:47:3e:d6:34:a3:15:42:28:d0:ad:da:73:fe:
9a:c1:09:3c:32:02:e5:27:b0:66:66:9f:78:00:e9:46:0b:c0:
50:20:a4:50:16:89:29:fa:2d:b9:58:8f:ee:37:c4:ab:23:1e:
d7:8c:0c:39:7d:7b:79:75:20:d4:1d:ed:b1:bd:93:81:de:c3:
50:62:5f:10:39:ad:45:7c:d0:98:0f:f7:e8:7a:10:18:b3:5e:
da:58:60:03:f8:f7:28:2a:73:e1:37:02:2c:cb:b4:2a:20:9b:
2c:c9:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:16 2025 by rpki-client