Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: Vg/ah3H721xPgOMfxueaTqrgvsj4w8+LDp4+skDmqxU=
Subject key identifier: 32:4F:79:D7:F8:00:71:0C:0C:2C:39:C7:B3:13:B0:D9:E8:15:1F:E4
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 0199FDD90B9F17910B905DDD46F346ECD9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 06FE
Signing time: Sun 19 Oct 2025 19:01:23 +0000
Manifest this update: Sun 19 Oct 2025 19:01:23 +0000
Manifest next update: Mon 20 Oct 2025 19:01:23 +0000
Files and hashes: 1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: Ybrkq4mQAHnqc8SQqi08TlJ3E5+ClCrLEDQjBU8+Qxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:0b:9f:17:91:0b:90:5d:dd:46:f3:46:ec:d9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Oct 19 19:01:23 2025 GMT
Not After : Oct 20 19:01:23 2025 GMT
Subject: CN=324f79d7f800710c0c2c39c7b313b0d9e8151fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:1e:ac:34:bc:57:19:51:ee:1f:0c:a0:db:
ab:00:15:50:a1:c2:71:c0:d5:d7:e8:3c:3e:46:b2:
39:5c:db:50:65:73:ba:16:0b:a3:9b:98:cc:9a:5e:
de:04:de:0a:75:bf:5b:c8:55:c4:b0:85:42:03:73:
14:6a:24:f5:ff:0b:aa:be:e3:53:18:ba:fb:9d:6c:
23:38:1b:c5:d1:6b:36:f2:cb:90:5d:4e:2b:94:b5:
02:fb:94:13:40:0c:33:4c:46:e4:0c:13:cd:f6:66:
21:91:e4:5e:e7:0a:ee:39:78:55:47:46:89:7a:10:
02:54:41:08:c1:65:24:2b:ec:4f:5d:0f:65:21:8b:
38:25:a6:fe:46:c8:0f:67:38:c6:f9:1f:7b:d8:7d:
54:7a:d8:b3:a2:a5:b1:4a:43:2c:73:a8:a1:36:98:
f2:8c:a9:a6:5d:bf:c3:c8:68:59:b2:db:97:a3:f9:
2f:e5:b7:d3:e5:89:80:7c:19:fd:e5:bc:e4:fc:55:
3b:ff:05:fa:d4:ee:c0:6e:0e:08:f0:2f:84:19:ab:
ba:2f:1e:16:dd:0c:b6:8e:d6:71:da:7a:5d:64:2c:
34:66:b3:80:59:f7:5b:a5:20:83:04:e5:53:30:5c:
3a:4b:b2:5c:d8:d1:c7:d9:0e:2a:7e:11:01:71:0b:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:79:D7:F8:00:71:0C:0C:2C:39:C7:B3:13:B0:D9:E8:15:1F:E4
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:67:22:89:f7:cb:0e:ae:db:9e:3a:12:fd:b9:14:95:44:4a:
70:69:49:74:d2:74:9a:8b:f3:83:19:e4:33:f1:4d:f0:d8:4f:
48:c4:0f:b3:ce:3d:88:27:2a:e3:56:16:0f:91:6e:5b:70:13:
9b:e7:ff:36:84:5a:a3:f1:69:2f:e5:ea:bc:fb:31:b7:e5:79:
5a:69:09:3f:eb:b5:b6:20:86:d1:4c:32:fb:81:12:3a:17:e2:
f6:bb:89:81:37:77:9b:90:cc:b0:80:f1:4b:78:a8:cf:8f:10:
bd:66:64:b9:54:66:55:51:66:5c:2c:20:33:9f:0a:55:9b:7b:
e2:48:22:df:9c:5c:7a:bf:84:ce:1b:9d:8f:30:80:3c:ae:de:
8a:14:5a:43:e6:0b:a5:14:b7:cd:48:c0:68:63:c0:ec:67:d5:
3e:9f:ae:f7:a2:1d:72:53:3a:c1:d3:db:e1:a2:0a:fc:b4:35:
95:5d:35:6f:52:87:ff:83:a1:2e:31:3a:b1:4c:c4:95:42:33:
89:bb:55:96:07:66:a5:ab:d5:47:31:57:52:5c:a9:b0:4a:ef:
47:a9:9f:68:58:ba:e5:5c:ff:ee:36:cc:90:22:cc:26:b3:3c:
6b:0b:55:5f:5b:4d:ab:a5:db:bf:19:84:74:0a:a9:3c:0f:e1:
75:b3:1e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:07 2025 by rpki-client