Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File: ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier: PryYmncvcT4zG/OxzMQIbqgnoL6uzcqFkiLZJ+cwIEk=
Subject key identifier: 80:35:44:6D:53:2B:CD:29:F5:A1:F0:1E:50:37:4B:A4:92:35:DE:4E
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial: 0199FBEB91E40DDF3D5C5DF38389ADE5BE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number: 0968
Signing time: Sun 19 Oct 2025 10:02:23 +0000
Manifest this update: Sun 19 Oct 2025 10:02:23 +0000
Manifest next update: Mon 20 Oct 2025 10:02:23 +0000
Files and hashes: 1: KsdzajN30uY3uVW5kyMxHSnmmxU.roa (hash: zPl4WlZ128vZPWoXYgcZMpH4uHo4BsQGARRVppJ+QiM=)
2: astDnoUMy7KdbJvyyxpisdgmA6U.roa (hash: bNOHZXfFwYEoQ+krisGaY+9Oi+royBJVdqPCFFROjZw=)
3: mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa (hash: w701bJj/u4XbtOJf+uHhePRlT4YH8B1JtsulPqw9bWk=)
4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: u1ASLnb1z0hde21RNSfmUy+1KZmYnp5ectRgVPaANJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:91:e4:0d:df:3d:5c:5d:f3:83:89:ad:e5:be:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Validity
Not Before: Oct 19 10:02:23 2025 GMT
Not After : Oct 20 10:02:23 2025 GMT
Subject: CN=8035446d532bcd29f5a1f01e50374ba49235de4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:10:e6:aa:1d:ff:d3:a7:dd:c1:34:c6:66:
7d:27:96:11:1d:38:66:74:98:7b:43:43:e4:e8:ff:
01:49:4c:1b:03:d9:a7:bc:83:fd:a7:c5:65:ad:96:
a1:4b:e5:dd:46:ac:c6:a9:fd:5b:b7:ca:59:2e:52:
a6:88:f0:c5:09:6e:28:71:3a:2e:cf:9c:4f:b8:42:
2e:f9:c2:fd:a2:2c:ae:b3:a6:56:37:8a:b0:73:6b:
6c:a8:0b:ee:21:2d:26:57:30:d7:0a:42:cb:71:74:
6c:6b:d9:f0:bd:7a:cf:73:78:9a:46:3a:ea:35:70:
38:ac:e0:cb:7d:21:44:d4:4d:a8:85:63:1a:3c:cb:
c6:b9:5c:58:a4:7f:2b:6b:17:7f:8f:3c:d8:9a:69:
55:46:3d:cd:00:b5:7b:26:3d:88:4c:c7:62:02:f2:
44:2e:65:92:35:80:2e:79:95:1f:15:8a:75:83:e1:
5b:81:bf:0f:7c:0b:7b:9b:6f:fb:df:b4:5b:03:94:
3e:9f:ed:00:a6:d8:a2:f3:d9:95:cd:d5:7e:d5:d3:
68:86:5c:ce:b9:cc:93:71:6a:63:71:66:bc:42:ce:
eb:24:1e:8a:5c:65:0b:bd:2c:15:65:32:2e:fc:7d:
ee:db:b0:7f:0a:a0:2b:4b:d5:34:0d:28:39:2b:4e:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:44:6D:53:2B:CD:29:F5:A1:F0:1E:50:37:4B:A4:92:35:DE:4E
X509v3 Authority Key Identifier:
keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:a2:08:1a:49:50:aa:08:9c:fe:a5:f2:d2:c8:65:31:a3:
31:ca:9c:f8:af:40:bb:a7:f5:cd:fa:d4:c5:30:b0:d5:37:6f:
65:95:43:89:b3:6f:f5:b5:b3:fe:65:f2:0d:bf:20:10:d3:3e:
85:5f:14:ea:b6:48:f1:50:87:10:20:cb:fc:3b:a7:f6:11:d6:
aa:0a:07:23:58:1b:08:59:0c:48:af:a6:cf:3d:93:da:f7:4f:
b8:8e:6e:6d:97:50:65:07:7e:f8:68:18:8e:63:31:bb:be:13:
3b:e4:45:6a:de:55:53:73:5d:ec:3f:c6:25:57:16:b9:91:21:
6e:5a:da:25:24:e9:d7:f4:40:20:04:20:0c:f5:4a:00:bd:c4:
e8:9a:e9:d7:4f:a3:d1:dc:22:ab:84:6b:55:a2:62:33:ab:f2:
75:27:79:66:8e:fd:6a:8f:cf:ee:01:b9:9e:95:83:bb:89:04:
c2:df:56:dd:4e:28:d0:6a:73:89:a1:8e:a6:00:0e:5a:5f:a6:
9d:fd:8d:e1:49:03:f3:9d:91:c9:8e:ff:f4:01:a8:ae:44:01:
0b:09:86:9c:f6:1d:ad:64:2f:18:b9:d2:d2:e9:f1:83:04:8e:
9e:f9:ca:5a:e9:94:c1:a2:b8:0e:43:dd:b6:27:36:7a:7f:77:
b6:ac:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:23 2025 by rpki-client