Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: egTwsw8AH2IOSo4gzFvGIzEUwcE8l8RAZIuqmMfSwkw=
Subject key identifier: 00:89:4B:A9:EA:11:E3:4D:43:DF:D3:56:B8:39:73:2B:0B:A0:47:31
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 0199FFC7396FF0E6FA1F574C8B18A4B23809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 0700
Signing time: Mon 20 Oct 2025 04:01:10 +0000
Manifest this update: Mon 20 Oct 2025 04:01:10 +0000
Manifest next update: Tue 21 Oct 2025 04:01:10 +0000
Files and hashes: 1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=)
2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: XbNKLhdFBc4f2TNVw3ZlC/gJ6ZqEg1U0WSY+6pA7b4Y=)
3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:39:6f:f0:e6:fa:1f:57:4c:8b:18:a4:b2:38:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Oct 20 04:01:10 2025 GMT
Not After : Oct 21 04:01:10 2025 GMT
Subject: CN=00894ba9ea11e34d43dfd356b839732b0ba04731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:25:3f:d9:94:bc:06:dc:19:0f:09:c5:9e:
64:f7:bc:e1:1c:29:a7:b0:41:97:4e:6d:10:df:55:
eb:44:d6:64:14:69:fc:a1:41:9a:83:3a:a4:03:17:
b2:e0:88:22:46:87:d3:6f:27:ce:bf:a8:0d:7f:cb:
64:f7:33:3a:18:52:a5:bf:c2:95:6e:5f:16:f9:de:
84:9a:2a:41:12:9e:31:75:1b:f8:c1:ad:db:5f:c6:
38:2f:9e:8b:e3:da:05:19:68:78:8c:2f:65:d5:c0:
76:5f:e5:3b:6f:a0:dc:67:3b:0a:b9:70:69:27:49:
90:59:79:b2:98:a6:85:56:ca:2b:62:78:b6:f9:03:
c0:a5:d2:73:e4:7b:a6:1a:23:09:69:45:3a:f7:21:
fd:6a:0b:9a:c7:ff:ab:ba:fb:0a:6e:10:09:6b:fe:
e0:4f:11:ed:17:82:eb:45:24:a1:f4:65:d0:83:1b:
2b:c0:8d:1d:0c:23:7f:58:cf:9d:3e:27:c0:83:7d:
d8:0c:63:63:b9:64:cd:d8:83:80:b3:58:b4:da:8e:
04:5e:bf:3a:fc:46:9b:33:6c:82:23:cf:3e:f8:9f:
76:4b:26:c6:42:39:f0:d8:ec:e8:76:5a:4b:ae:8e:
6a:90:84:7c:fe:cd:28:70:d9:26:7e:f8:ea:4b:52:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:89:4B:A9:EA:11:E3:4D:43:DF:D3:56:B8:39:73:2B:0B:A0:47:31
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:71:bc:16:f0:e0:49:07:32:0f:55:54:2e:f2:92:30:ad:46:
23:56:49:dd:1c:e5:a7:4d:8c:86:23:f7:0c:ff:92:03:29:b7:
a8:76:0b:27:67:98:d0:03:30:73:84:46:fe:60:e9:50:65:35:
4c:56:66:05:f7:4f:32:4a:57:b0:1f:36:3c:6d:1e:7e:60:2b:
4f:37:dd:6c:29:e1:55:0e:ab:21:8b:2b:22:4f:d3:49:bc:e8:
0a:bc:12:4c:24:08:0e:84:94:f0:55:b7:0d:2b:8b:b6:0a:17:
fa:cf:12:5a:5e:da:1e:e3:8f:f8:fc:4d:7e:86:c4:49:dd:bd:
14:9b:7a:66:45:d5:8a:36:90:8d:65:f2:91:d3:bb:eb:2e:a4:
f4:e1:b2:7f:75:ce:08:4f:e4:c9:a2:6a:94:64:15:e2:42:3e:
56:ce:51:ee:02:71:59:e3:44:15:77:f0:0f:17:6b:13:ee:c6:
28:7c:e2:92:b1:9a:b7:f7:db:2b:b5:f6:2d:b0:51:5c:0f:e3:
f3:7e:6e:1d:41:76:c4:61:7e:ca:89:43:60:04:57:2f:71:99:
8b:f4:60:b1:35:a7:75:03:e7:d2:92:9d:e4:bc:af:62:90:a1:
85:a8:db:14:52:9e:15:34:af:38:38:9d:fa:8a:3d:37:d2:e3:
84:17:7e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:02 2025 by rpki-client