Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: PHewae5zsRvpLkaCD9frR4/uN/CXb7xId0/CDLI/wa0=
Subject key identifier: 9E:06:0A:A1:74:91:00:41:0F:8E:C1:4E:A6:12:08:D6:A3:85:48:0F
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 0199FDDA4C2657356D7A453DD372A5755401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 0632
Signing time: Sun 19 Oct 2025 19:02:45 +0000
Manifest this update: Sun 19 Oct 2025 19:02:45 +0000
Manifest next update: Mon 20 Oct 2025 19:02:45 +0000
Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: SyLr8JzypiNMevh5K4Nabn78dOXBotgXKKbD5gAqVv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4c:26:57:35:6d:7a:45:3d:d3:72:a5:75:54:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Oct 19 19:02:45 2025 GMT
Not After : Oct 20 19:02:45 2025 GMT
Subject: CN=9e060aa1749100410f8ec14ea61208d6a385480f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:07:a5:0a:bc:10:4a:e7:40:3a:dd:f4:65:
d5:9e:2d:03:4d:2e:42:09:7e:63:43:a4:5b:8a:d2:
74:69:ba:99:3f:a6:0e:34:bd:01:6b:49:8b:cf:7a:
f1:64:9d:82:48:0e:b2:89:0a:35:5d:8c:77:d2:ab:
50:c4:15:10:c0:d3:21:a1:28:ef:ea:9e:f4:4f:43:
5c:24:8c:64:9e:5e:9e:6d:25:a2:c9:0d:24:36:e9:
af:1a:eb:18:bb:cd:81:41:b2:c6:b7:a2:42:5a:25:
c2:5f:1e:50:74:15:40:97:10:b2:22:a9:5c:8b:21:
88:ac:11:69:20:c0:61:b6:80:47:df:c7:d3:d5:98:
b2:8b:c9:f1:c3:73:7f:ca:f4:99:88:2c:3d:7d:b9:
7e:b3:21:82:f4:5c:84:a3:c1:ab:e5:df:2f:21:06:
6e:de:fa:18:69:16:88:5e:be:c8:80:54:73:1b:f8:
db:52:7e:9b:35:65:e2:b6:a4:4f:0c:1b:38:96:f7:
bd:8d:de:55:59:30:73:67:06:bf:fe:d4:5d:08:dc:
67:8f:57:70:4f:2a:4a:2b:0e:da:50:55:16:48:9f:
42:6e:2a:e5:1a:03:ee:85:81:28:51:45:32:a4:42:
a8:f1:d4:8c:95:6d:08:8e:c8:9b:d5:bc:3c:e3:16:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:0A:A1:74:91:00:41:0F:8E:C1:4E:A6:12:08:D6:A3:85:48:0F
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fe:f1:74:00:57:12:d8:19:bb:08:f9:08:8d:6e:2b:62:9b:
56:3c:95:cd:fc:f4:1f:56:04:5f:60:d7:92:ed:0b:90:b9:39:
3e:2c:d6:36:a9:18:3b:c0:fc:5a:3a:0f:63:89:1b:91:7b:ad:
98:49:42:d3:fe:85:b3:b3:62:c1:08:d6:53:31:be:bf:93:7f:
b1:a9:21:03:6b:ae:66:b2:06:ca:d0:71:77:5d:53:a3:88:81:
f2:57:4f:33:fa:bd:d2:dd:af:6d:2b:2e:04:d1:76:b6:0d:32:
b0:44:1c:58:37:73:39:3e:ea:1f:ec:e9:3a:70:de:f2:0f:c5:
c3:d5:b4:e2:00:a4:50:27:e1:b6:54:9c:93:4d:28:a4:84:d6:
40:bb:ce:98:01:86:fd:cc:86:bf:e6:65:73:c2:4c:7e:66:d3:
29:a8:b8:51:6e:12:15:4e:3b:0a:f0:53:25:35:3e:d1:30:29:
0d:c4:0e:8e:1b:6b:5f:8e:9f:23:15:64:6e:4e:98:9e:2d:7c:
a9:e3:b7:6a:58:c2:04:1b:5c:93:2d:c4:08:9f:59:68:af:91:
a7:b7:6c:3d:61:66:a5:7a:ec:a6:53:54:26:59:d0:60:da:ed:
7d:ca:2a:4d:5c:73:30:87:de:1c:99:26:25:51:00:1b:91:30:
dc:7f:07:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:37 2025 by rpki-client