Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier: LSZLTYfqqlRCsipYHsteZRdMxmC9yqIl9tKOTjTwos0=
Subject key identifier: D4:5C:7B:1C:90:7C:58:24:96:82:55:6A:FF:76:B4:C8:C3:32:DB:A3
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 0199FCC63495CA16A0B48E90898576D29057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number: 1367
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: 1-VGMXMMV2Cqy03R1ZIzIT8zjSHs.roa (hash: odkCOMHYYSyyI06jcNtcsAr7ZqbIzMS4uoFJAxDHurk=)
2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: ziCgP7SoCWiXBpXPYEAD4t9NA2rlPcwZd8HQa2Ba7mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:34:95:ca:16:a0:b4:8e:90:89:85:76:d2:90:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=d45c7b1c907c58249682556aff76b4c8c332dba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:74:ce:11:6f:e2:b6:9a:4e:74:5f:d1:ed:
ee:17:3e:16:80:c7:3b:49:a3:82:50:59:66:fb:e5:
3f:49:fc:77:cf:fc:c3:f0:6e:10:66:7d:c7:c4:71:
e4:46:99:d0:b0:89:27:7f:45:00:67:bb:c5:a9:1d:
f8:4b:18:aa:c7:9a:fa:cd:97:5c:02:bb:55:0c:b0:
61:c8:cb:0a:52:fe:ce:3e:41:a5:de:9e:53:96:d6:
b2:e2:6f:d8:2c:31:a7:d6:1d:b1:69:19:3e:4d:53:
12:2e:01:a8:26:29:f8:b6:85:b8:de:7c:6d:86:0f:
db:4b:1d:f3:bc:92:0c:98:41:42:05:3e:ae:97:ab:
f4:06:ff:33:ca:20:b0:88:bd:6b:a1:e6:51:3a:e7:
9d:d8:ac:94:ad:21:2d:99:34:11:12:eb:13:75:68:
9c:31:0d:e8:f4:ba:d6:08:52:6d:1d:05:8c:36:47:
33:74:95:4a:d8:e1:70:46:d5:60:7e:b7:31:90:44:
ac:c6:95:f1:3f:87:ea:ee:d6:52:5d:ee:0e:14:8e:
c9:5e:88:9e:00:f3:e5:53:0d:87:b9:ba:d6:c0:45:
c4:5a:68:0a:b9:af:09:1f:dd:ca:a0:1c:0d:54:c6:
6c:34:13:60:31:8e:5d:4d:93:c1:cf:0a:4d:9a:3f:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5C:7B:1C:90:7C:58:24:96:82:55:6A:FF:76:B4:C8:C3:32:DB:A3
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d9:da:e9:f7:e4:b2:6f:72:d6:e6:ab:03:9f:e5:e6:7a:19:
0b:27:4a:4c:75:47:91:2c:76:96:4c:6e:f9:0f:e4:64:24:1f:
97:87:22:dd:60:39:39:fc:0c:4e:76:11:30:e9:3a:d1:5a:94:
5f:14:62:66:d4:88:99:d3:44:af:d2:e4:cd:bd:e4:c5:27:3b:
6d:27:1a:d5:c7:a8:8f:27:c1:86:70:06:31:b2:3a:79:25:b6:
39:fc:43:fc:f0:ff:a1:a0:69:c3:63:5d:52:2d:66:60:c1:8a:
6d:2e:fe:45:d4:02:33:f2:bf:29:7c:e1:b4:cc:9e:cc:e4:fb:
76:11:5b:af:35:51:f1:77:c5:21:b4:bc:ce:df:9f:24:e2:95:
6c:f5:f2:25:f0:6e:40:31:07:29:50:74:00:c6:77:81:9f:b0:
2b:84:fa:95:08:4f:00:28:c3:05:48:8e:b4:27:bf:40:8c:e5:
a7:a9:44:3b:a1:39:b2:a0:a8:b8:49:f6:42:05:5e:d9:e8:cf:
84:c3:d4:64:07:14:40:e9:7f:8b:1b:64:ac:eb:6d:d2:c5:d7:
a0:eb:e4:11:a9:37:aa:c3:4a:15:5e:0a:23:a8:30:15:09:77:
22:9d:d8:2d:be:e0:46:ee:12:25:2d:ad:5e:23:e0:59:25:24:
12:ba:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:36 2025 by rpki-client