Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: LFdpzQ/LkAFGafJL+2DfApJ8fq8B6Zxb5Y76GdjOC9E=
Subject key identifier: AE:98:25:D4:0F:17:F7:40:49:C9:21:34:9C:E7:89:79:83:E7:99:18
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019A1FBF7E6F765B1499803C4393DA919FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 13DC
Signing time: Sun 26 Oct 2025 09:00:34 +0000
Manifest this update: Sun 26 Oct 2025 09:00:34 +0000
Manifest next update: Mon 27 Oct 2025 09:00:34 +0000
Files and hashes: 1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: Bt3XXtZLxYKPTQcIYc0i1w13u/3xgoOChnY191sACjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:7e:6f:76:5b:14:99:80:3c:43:93:da:91:9f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Oct 26 09:00:34 2025 GMT
Not After : Oct 27 09:00:34 2025 GMT
Subject: CN=ae9825d40f17f74049c921349ce7897983e79918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:8c:27:d0:2c:d4:e6:b2:7b:cf:06:31:58:
df:ee:14:c3:38:34:90:87:8e:0e:c8:d3:da:e4:a7:
5e:0d:08:56:a4:77:38:e8:80:89:8d:35:ee:a3:fc:
ee:7c:da:12:01:01:c8:93:d8:b5:96:91:14:4a:39:
bd:85:c9:2e:ba:44:2e:cc:e5:1b:7a:1c:9d:19:8b:
d7:fa:53:7a:a7:22:fc:9b:b6:38:a2:bf:5a:a8:ee:
a8:d9:b2:56:9b:00:52:b3:58:17:12:62:a2:4f:08:
24:bc:6f:d8:5d:09:6f:3c:35:13:23:d7:9d:18:e6:
fa:26:99:75:90:c9:91:76:0c:4f:f7:bd:0f:81:83:
0d:20:7e:a1:6e:9c:8d:d7:2a:cc:32:c4:ee:6a:1c:
8e:82:15:a1:59:95:92:f1:95:91:b0:6f:a0:56:79:
5d:99:61:ea:60:8f:c5:0f:b3:3e:7e:d2:dc:cf:e2:
d1:f4:47:43:2c:51:ad:fa:ca:83:60:6b:3b:6d:c3:
cf:12:44:96:9f:cd:52:dc:27:22:40:2e:36:b1:74:
80:4e:32:9f:f9:ba:3e:85:9f:ab:ab:53:c6:b0:cc:
7b:50:c8:72:20:dd:46:ea:82:f1:89:5e:e0:61:90:
4a:fa:1b:c0:f0:88:3c:b0:a2:5b:a6:26:fb:f1:63:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:98:25:D4:0F:17:F7:40:49:C9:21:34:9C:E7:89:79:83:E7:99:18
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dc:8b:aa:91:4f:25:28:fb:a7:e7:a0:ce:06:4e:4b:23:2f:
fb:c5:a9:ef:86:ee:14:82:fc:63:ae:c9:12:41:85:a0:e5:6f:
de:8b:6f:a2:a8:88:6a:f5:49:5b:ab:c9:2c:2a:95:98:23:dd:
d9:fc:4a:b2:14:ac:35:4b:4e:21:49:6d:12:63:d4:bb:02:4e:
46:f3:3c:2e:c2:a0:00:53:d6:cf:e0:51:2b:01:3c:3c:2f:7c:
39:be:07:96:41:ab:b3:5a:5c:08:a8:7e:e8:ee:53:4d:7d:5d:
9c:00:48:e2:8b:cb:dc:12:74:6f:c1:98:bb:d3:52:52:4c:11:
c6:35:bd:53:e2:3f:e0:6f:b5:b2:e8:66:df:60:a0:c1:89:81:
28:8d:1a:36:e2:bc:01:d8:5d:fb:77:af:0b:bb:6b:68:85:3a:
44:bd:2a:03:16:fd:16:9e:d1:52:0c:d1:15:cf:c3:ef:39:ad:
01:2e:1d:0e:7d:f0:7a:f9:68:ae:86:fa:d6:2b:ac:47:76:90:
e9:6a:a9:41:6d:5e:2a:3d:f0:2f:79:32:c0:e4:5f:8b:8e:6f:
91:f1:c8:b2:72:e1:83:62:72:1f:3d:a2:0d:4e:4f:95:44:1b:
99:c6:58:c1:1b:1f:c1:35:2b:ca:f0:0a:1b:9c:d2:8a:67:c3:
26:ee:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:05:47 2025 by rpki-client