Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: sjX4R3u4NiKSKJEszcg2CDmZr1KiXauXN8sSvec+ZR4=
Subject key identifier: BC:55:1B:DB:AD:D2:F0:02:EF:A8:7C:5D:60:D1:CD:D7:91:CD:0B:F4
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 0199FDDA3157BDDF11E56224EA2E709DF00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 06FF
Signing time: Sun 19 Oct 2025 19:02:39 +0000
Manifest this update: Sun 19 Oct 2025 19:02:39 +0000
Manifest next update: Mon 20 Oct 2025 19:02:39 +0000
Files and hashes: 1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=)
2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: qkq89ZuJvLwkwiAM+N+tN8+mMK2M9DJOrwlGNoKXs7w=)
3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:31:57:bd:df:11:e5:62:24:ea:2e:70:9d:f0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Oct 19 19:02:39 2025 GMT
Not After : Oct 20 19:02:39 2025 GMT
Subject: CN=bc551bdbadd2f002efa87c5d60d1cdd791cd0bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:91:c3:7f:f1:21:21:cb:b4:ba:b2:00:1c:
77:fc:18:26:7f:44:42:3e:e4:d7:d0:4f:7f:4a:d3:
d1:a7:31:9d:4c:a2:a9:eb:69:4a:18:d7:a2:63:3a:
60:ce:f9:92:89:23:76:eb:5b:1a:2a:a4:64:dc:f3:
54:be:01:cd:9b:d9:16:16:94:4c:9a:d4:ac:f1:8e:
65:60:64:fe:4f:e6:57:e9:08:c2:f7:64:f2:8e:2a:
56:0d:51:b3:e8:38:1e:ae:60:4c:09:b6:a1:15:7f:
47:31:3d:2a:d0:ca:87:ae:f9:a8:e9:47:d1:04:f4:
ef:df:55:0b:a1:30:51:da:f7:aa:0f:61:8b:a9:ed:
2d:b3:8f:aa:5d:56:f0:c5:d2:29:03:d2:0a:e7:e8:
65:3c:f7:d5:61:6f:e6:ad:2b:34:41:b0:b3:30:83:
ed:c1:3b:1b:d7:c7:0f:1f:ad:c9:7f:50:bd:15:54:
30:e9:8e:b7:9a:6c:ff:b4:e3:af:f0:60:4f:c2:38:
fc:64:dc:4a:bc:58:bc:b8:eb:af:f9:df:59:f3:f8:
5b:a0:af:13:5c:50:d6:3f:98:65:f6:57:96:be:33:
9b:69:6d:68:be:98:f9:7d:b9:3d:7d:1f:6d:96:40:
d9:5b:fd:1b:b2:4f:fd:af:b6:61:d5:55:4a:3d:a6:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:1B:DB:AD:D2:F0:02:EF:A8:7C:5D:60:D1:CD:D7:91:CD:0B:F4
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7c:e9:1d:59:ef:e4:eb:fd:41:cb:69:4c:bb:98:6b:81:59:
2d:6a:0b:32:b1:9f:1a:5e:da:07:a3:15:0b:92:d3:9f:e6:ce:
af:47:7f:00:ff:db:6f:67:ef:d6:61:8f:85:06:d2:d4:bb:e4:
f2:31:6e:74:50:07:7b:f7:9d:9d:48:c1:3d:89:cc:34:bd:7e:
17:3b:2d:cc:ea:a2:00:57:b5:72:91:0d:82:aa:2c:84:38:35:
e2:9a:a3:00:19:be:e5:99:25:7d:2e:b6:32:b5:ca:a3:29:16:
09:43:2c:69:95:64:3c:a3:cb:f6:ec:46:2d:fd:ce:87:17:d2:
b5:a9:a6:49:82:dd:cd:17:87:1d:14:9e:cc:ba:b0:09:8f:13:
61:f8:9c:30:ec:8d:3d:d3:35:72:69:db:e7:43:aa:90:32:51:
0e:f9:d4:7a:83:ad:ba:68:29:19:c6:28:0b:95:cf:6c:85:d1:
68:e7:7e:69:72:cf:d3:e9:cb:2a:e2:a8:2f:6f:db:43:1c:9e:
0c:0a:0e:33:36:71:1d:7e:56:81:73:9b:94:9c:37:af:82:19:
2a:90:48:ff:7d:fa:27:a1:c9:10:2f:b7:5b:89:ae:e0:4b:4e:
29:a1:d9:05:fd:14:ff:ff:b0:f4:ab:55:8d:a6:04:0d:fd:5d:
9e:e3:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:40 2025 by rpki-client