Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: HQUi2GeOuaLlrsQqEJca9YrINGbEcT7R+FyvRWy5qfQ=
Subject key identifier: B4:44:73:BA:71:4E:B5:42:51:0D:90:68:B7:55:24:F5:32:82:D1:6B
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 0199FE0FE3071C01E991D97AD21D34CBFC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0D26
Signing time: Sun 19 Oct 2025 20:01:17 +0000
Manifest this update: Sun 19 Oct 2025 20:01:17 +0000
Manifest next update: Mon 20 Oct 2025 20:01:17 +0000
Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: q924MDYKx1v+uDRge09Z7bVtt5sWnhreX1QFmK3YnVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e3:07:1c:01:e9:91:d9:7a:d2:1d:34:cb:fc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Oct 19 20:01:17 2025 GMT
Not After : Oct 20 20:01:17 2025 GMT
Subject: CN=b44473ba714eb542510d9068b75524f53282d16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:82:4f:b6:03:d8:01:35:83:0b:59:c4:a5:
1d:9c:b5:87:81:48:3f:d1:54:04:ab:4a:2b:92:49:
e1:b5:e4:ec:f0:4c:50:45:69:9c:f2:ee:e1:f6:73:
1f:ec:fc:f7:73:0a:8c:5e:59:2e:4d:7f:fe:4e:ea:
e3:1d:df:92:58:aa:39:10:5c:d2:58:e9:a6:9a:e5:
78:1c:2a:b5:6d:7e:4d:7f:ae:24:f0:56:e0:90:b8:
2a:8a:52:d3:83:bc:ee:51:22:03:af:44:11:25:40:
e2:f5:f0:03:2b:fb:43:89:1a:9e:53:4f:a3:11:19:
72:0d:8a:fd:26:3a:82:8b:d4:bb:9a:c8:9a:f1:fa:
00:49:77:b3:01:2d:91:b8:a9:df:89:6e:1d:97:43:
96:a6:5a:00:a0:5f:d6:fe:e8:96:74:29:b3:7b:fe:
6c:05:c4:44:0b:c5:6c:14:57:1a:ac:28:b2:4c:8f:
a4:70:0a:fa:ca:05:6c:fe:a9:c1:48:9f:13:5d:1e:
aa:42:c8:84:65:00:e7:ef:26:63:ab:13:b3:26:99:
fe:1b:23:db:c7:6e:a4:84:8d:6f:f7:ec:fb:2a:5a:
0d:a9:f8:b5:b2:af:a4:b2:de:54:97:97:ff:2e:d9:
ac:0f:85:c5:94:ca:87:0d:11:01:5c:c5:a4:19:1f:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:44:73:BA:71:4E:B5:42:51:0D:90:68:B7:55:24:F5:32:82:D1:6B
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3f:3b:9c:24:69:89:45:a5:75:32:28:ed:5c:71:46:80:32:
7f:15:85:64:2e:a0:3e:41:da:79:f1:7e:71:f2:23:8f:92:77:
a3:90:91:20:92:d8:f6:69:30:db:01:27:b5:bc:3f:e3:7b:e2:
64:97:34:6b:42:28:5c:63:a8:5f:84:11:19:71:b8:19:3c:bb:
cb:11:cb:63:e2:16:6f:2b:ab:76:1c:2f:68:e3:b9:c5:d6:59:
3c:2b:83:fd:e9:a7:1e:dc:71:90:99:e9:ec:60:d0:51:0a:29:
2d:41:52:94:69:ab:58:65:8a:c9:cf:f5:e7:f8:e8:cd:be:56:
cb:31:7e:cf:46:19:15:7b:0c:cf:c1:83:cc:0c:e1:95:ce:f9:
c9:ad:42:4b:cf:d9:8e:c3:3f:3c:3f:a6:55:e8:fb:56:36:0e:
87:aa:32:5f:1b:62:47:fb:da:35:dc:4e:16:81:1c:54:f4:f4:
eb:6e:85:9a:29:e2:84:6f:32:c6:51:a4:4a:62:0f:04:bd:30:
8b:39:69:e4:20:51:60:f0:16:d8:75:b4:12:d5:8e:34:a3:d3:
6b:44:1b:ed:6a:2c:9c:e7:4c:49:5c:f0:d3:35:6b:2b:06:5a:
90:b9:50:1f:c1:12:35:54:7d:9f:f0:dd:8a:cd:eb:87:df:99:
a8:34:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:23 2025 by rpki-client