Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json)
Hash identifier: utUAF6NBCg4tCl1CeYZO5YM2/nDTfD+b+gbHYBxpXXQ=
Subject key identifier: B6:46:1A:5A:E6:C7:E7:C3:11:7B:04:C2:5F:42:5B:09:A8:CF:85:28
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 019A00350446E2FD59E8A7C394F4920557FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
Manifest number: 0AF4
Signing time: Mon 20 Oct 2025 06:01:05 +0000
Manifest this update: Mon 20 Oct 2025 06:01:05 +0000
Manifest next update: Tue 21 Oct 2025 06:01:05 +0000
Files and hashes: 1: X6ZYSC-zk_X-vkVmhmsDz5ImQYg.roa (hash: ejdwRSw1lilKiCxqAuj8PMfvm39/1GCNMitYFT+EINw=)
2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: 7eU7ND45ARvnsIoLfDSuLlr77dQzR3b5ZiS2b8F5O2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:04:46:e2:fd:59:e8:a7:c3:94:f4:92:05:57:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Oct 20 06:01:05 2025 GMT
Not After : Oct 21 06:01:05 2025 GMT
Subject: CN=b6461a5ae6c7e7c3117b04c25f425b09a8cf8528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8c:8f:66:33:fd:f0:23:75:ad:49:fd:08:a5:
17:5e:f7:ee:4a:f4:3c:3a:14:3b:a7:c3:85:79:2a:
b2:c3:4d:b5:b1:d4:09:63:b6:76:a3:90:a1:e6:4a:
e9:f7:9d:02:6e:06:32:40:fa:f4:09:df:7a:9e:5c:
5f:30:aa:85:53:43:76:fd:0c:09:6e:c0:ad:ce:af:
73:10:e7:0a:a0:f3:9e:74:a5:c6:b4:86:88:24:38:
12:cb:a2:88:03:5e:04:f2:d2:dc:c7:55:9c:59:2a:
a1:75:bf:3c:dd:b3:37:d5:94:10:bb:53:51:66:fc:
3d:df:de:ed:24:b9:ad:6e:01:bb:85:bf:a6:cd:b5:
15:3b:2a:94:a8:19:17:05:00:10:ef:2b:f3:48:5c:
00:36:bf:4b:bb:dd:e7:aa:24:7d:12:79:8f:a5:16:
2d:b0:7d:5a:db:9a:1f:88:c7:8d:b1:e8:1e:bd:4f:
42:70:7c:08:fd:8d:5c:74:b9:33:f1:2f:36:95:56:
09:3d:01:67:ec:e2:bb:49:40:91:03:8e:60:66:87:
2e:94:ff:00:db:e3:00:d1:4e:6e:69:6d:fe:76:09:
44:89:ba:72:ca:4f:b8:de:1e:c8:50:d7:fa:36:06:
67:2d:97:13:21:6a:a2:77:7f:79:1a:67:a1:0a:7c:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:46:1A:5A:E6:C7:E7:C3:11:7B:04:C2:5F:42:5B:09:A8:CF:85:28
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:17:b2:01:eb:e4:21:ef:5b:2b:ff:b0:99:c6:dd:91:08:c3:
e1:a0:0b:e8:d9:ab:8c:b6:d4:8e:6e:fc:99:5e:91:4b:f1:92:
85:87:4f:2f:ed:46:a0:cb:f0:e9:02:6b:c5:0b:77:4b:14:40:
d6:d7:ec:2c:00:63:d3:9a:4d:b2:4c:1a:ff:0c:75:e8:6f:5c:
5d:2a:6b:a1:3a:63:dd:a6:b8:78:61:fb:c7:7e:06:55:f3:82:
5b:3a:c7:0f:7e:bc:92:7f:bf:16:96:62:0e:71:e1:c2:46:cd:
62:6f:40:31:cf:ce:ec:b7:a6:f5:b0:91:15:ea:08:2c:0e:d5:
0a:4d:09:92:c1:89:d1:cf:5e:7f:ce:c4:01:05:ca:9c:d4:00:
c9:28:3c:70:88:81:b8:a7:22:f2:82:e3:36:63:cb:85:81:32:
0e:d5:c5:03:f3:6b:f3:b0:5a:af:b2:be:80:c9:e7:dd:06:dd:
09:57:d8:5c:26:9a:6f:1e:c3:a0:a5:2d:3f:4e:d4:d3:db:4e:
a0:3d:aa:f5:8b:f7:0b:4f:8f:cd:0b:ae:8d:71:24:b6:3f:2d:
6f:1e:38:82:8f:11:9b:3c:9f:f6:1a:fa:a2:38:b9:7f:23:3e:
d6:5a:a4:f7:b2:fd:ad:8d:28:9c:ae:5c:37:bb:d1:b9:80:bd:
22:ff:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:52 2025 by rpki-client