Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: cjPcTL30gerPYOM3sH6e7RZoSdlVcr0CH4+Zub28GZI=
Subject key identifier: 04:7D:BF:A7:71:C1:47:65:35:06:18:C3:64:39:FE:DE:7A:49:B5:71
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 0199FB45B4C95FAD47734207919D47E861E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:13 +0000
Manifest this update: Sun 19 Oct 2025 07:01:13 +0000
Manifest next update: Mon 20 Oct 2025 07:01:13 +0000
Files and hashes: 1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: zaNtdQ8gaptlBOBOCMsUdeOFBJzBwjuTZvdDLIyxuLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b4:c9:5f:ad:47:73:42:07:91:9d:47:e8:61:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Oct 19 07:01:13 2025 GMT
Not After : Oct 20 07:01:13 2025 GMT
Subject: CN=047dbfa771c14765350618c36439fede7a49b571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:87:90:94:78:d7:2c:ed:a9:1c:0f:02:4c:
31:78:a3:8e:b1:3d:7b:c1:9a:a3:f0:f4:7b:b6:69:
29:75:5f:1c:d8:54:a8:98:31:34:69:e0:83:fb:45:
81:4e:3f:19:22:a8:e2:5a:fe:98:0c:cb:f5:c2:fc:
ea:57:39:b4:8b:74:15:7b:0f:b6:b6:d0:a4:e4:32:
4b:08:ef:e9:0a:1e:ed:3f:bc:3e:81:22:18:d7:fa:
96:a1:a4:0f:39:42:f2:03:30:f5:a2:b9:23:4c:70:
b6:64:78:d7:10:ba:f2:3e:be:02:4b:a4:29:90:c6:
03:01:34:31:8e:a2:ad:d8:9f:4c:b4:79:79:12:97:
30:b3:d2:6f:7e:53:ee:e1:0a:14:42:83:c2:34:d6:
d9:26:d4:2b:a1:5b:43:a9:e6:95:5e:8d:2f:7a:36:
27:71:0c:d5:f6:64:02:e7:4b:37:64:76:a4:ba:8d:
f9:2a:4b:b9:54:e6:b3:09:fd:a0:2d:bd:00:4b:e3:
dc:0e:d6:56:13:b5:fa:2e:e7:13:1d:b4:0e:98:01:
c3:9a:08:91:85:ae:da:1f:e4:9f:8c:26:e0:35:49:
d7:e6:8c:38:ec:0f:8d:00:ad:08:32:d9:6e:62:61:
61:08:7e:03:86:d9:12:b7:d7:1b:ca:6f:23:1f:8f:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7D:BF:A7:71:C1:47:65:35:06:18:C3:64:39:FE:DE:7A:49:B5:71
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ea:74:a8:98:72:70:48:e6:33:e8:cf:3e:86:ad:50:cd:4c:
26:cc:c0:0c:25:06:b8:01:d4:f7:4f:01:57:51:2e:b9:da:78:
dc:2f:00:93:33:c8:7e:f3:d1:f2:01:fd:42:24:48:a8:ab:d1:
32:e5:46:bf:44:d9:38:74:66:d1:6e:93:71:5d:3c:5d:75:38:
4e:c6:a8:75:44:03:9c:b4:b1:3b:36:b1:21:80:b9:cc:25:aa:
23:e9:c6:0d:aa:32:89:68:0b:c8:86:b2:04:af:1e:fb:eb:3b:
8c:24:d9:3f:f0:04:84:72:89:2c:4b:73:1d:eb:0c:7a:8b:5a:
4e:cc:20:04:a8:e6:af:bb:05:c2:12:d6:da:57:ac:3a:12:aa:
16:82:68:c8:3f:2b:63:f2:ea:1e:59:70:2b:e2:a7:b0:2d:df:
cd:da:a6:1a:4f:1f:27:ab:a3:17:46:db:ec:10:b4:1e:a3:e8:
c8:62:4f:bc:16:e7:35:3c:6b:69:1f:c2:ac:04:7a:31:eb:b3:
ad:fd:55:40:a4:cf:8a:dd:68:00:47:cb:df:e4:71:e0:06:fd:
94:bf:79:f5:7c:62:f6:79:c1:26:30:f8:97:0e:10:a3:56:8d:
c9:ba:6c:da:bf:98:85:35:d5:a9:b2:aa:6e:1a:58:7f:e7:96:
f6:dd:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:24 2025 by rpki-client