Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: TyvSQXzgAYfPDLIhErPL8WvFWTvMSxjyWKM7g+VgasU=
Subject key identifier: 38:87:0E:A6:16:3E:C7:0E:5A:2D:5E:F3:E9:EB:C1:A9:63:D3:24:A9
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 0199FC584A85BED818EA505B11BFDC984A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0F03
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: 1FGsn/2wXl6aHN7VzqTFx6vXxfY/vB7ZeYzfDoYknkU=)
2: ffPjrVVu7lFrIrT7aSEeaO2AX6Y.roa (hash: 6A8IWQ2G3JPXavMyiGoa9Wq0l3UDM2Dw7jgy8bn/B9E=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4a:85:be:d8:18:ea:50:5b:11:bf:dc:98:4a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=38870ea6163ec70e5a2d5ef3e9ebc1a963d324a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:cc:fe:15:ff:03:c7:90:e5:ba:80:d1:17:
a7:14:e7:85:01:63:27:2e:2c:ce:a9:76:74:6b:b2:
23:23:94:fb:58:8b:50:22:92:52:d7:93:b4:36:dd:
42:cb:da:3a:29:48:0c:48:13:3d:8b:f6:61:fe:cb:
cf:b6:7a:71:6e:84:f1:67:83:3f:90:20:a1:e6:23:
03:40:ad:6a:1b:47:5b:62:0e:e9:07:d6:8c:20:33:
a7:b7:4b:05:7b:f0:bf:f0:73:33:57:21:68:63:74:
74:27:32:ef:93:7d:60:57:cc:be:29:07:f3:cb:a6:
81:54:db:aa:19:05:22:9a:a7:3c:01:5e:ea:84:01:
23:64:4d:21:cf:30:a0:71:81:7d:50:29:4a:f3:35:
28:cd:20:2e:09:c8:c4:b0:16:e6:68:7a:01:ea:28:
b7:4a:26:bd:13:39:5e:b2:e2:3c:d9:11:26:9a:1e:
53:ee:f5:9b:65:7b:9f:8f:7b:82:80:ce:a1:55:19:
ce:62:68:7a:8b:48:14:a7:57:c5:3b:c6:87:c9:99:
3a:32:c1:6a:7a:e2:91:93:bd:d7:99:41:25:56:ae:
ee:b9:97:11:93:b5:49:5d:00:81:9f:96:26:02:29:
40:e9:94:00:4a:81:1f:23:2c:97:1a:bc:f5:6b:b6:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:87:0E:A6:16:3E:C7:0E:5A:2D:5E:F3:E9:EB:C1:A9:63:D3:24:A9
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7c:20:aa:b9:c3:5b:24:ba:40:ac:d0:33:4b:4a:ed:b8:eb:
af:db:a6:a6:91:d3:69:c1:9d:19:38:4a:bc:7c:d6:2f:8f:db:
1e:3d:4c:0f:15:c1:0f:91:63:5f:df:8c:4c:87:88:b7:d9:d3:
a1:48:0b:d3:38:10:fd:25:b3:ea:de:be:8a:78:ae:57:4c:00:
1f:07:00:83:8c:80:e3:10:b0:eb:c4:7e:fe:2a:a3:f0:88:52:
5a:ed:9c:c0:53:58:58:dd:ae:3c:81:8c:c6:9d:83:bb:8e:f8:
68:23:51:c0:92:83:cc:6e:af:47:97:f0:84:4e:4f:c4:08:75:
1e:e8:1a:0a:b5:f8:db:b5:86:5c:0c:f1:75:c9:cc:5d:8f:1f:
30:3a:3c:fa:a9:3e:3b:bb:35:7b:7f:6c:aa:83:f5:58:96:62:
45:a3:38:49:34:4b:96:8f:aa:f0:75:a6:fd:fa:78:61:99:8e:
43:26:f5:e4:0e:f1:b7:32:ad:11:42:da:d3:2c:bb:95:a8:f2:
5a:ba:b0:45:26:cb:be:77:a5:96:a5:9d:9f:83:ff:e6:31:70:
24:52:2e:ea:8d:99:7a:fb:f5:a3:90:c9:3b:7e:33:16:f9:a0:
9b:3f:77:33:e4:e4:ac:35:77:c1:56:07:26:c0:c5:e2:60:c4:
72:fa:80:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:38 2025 by rpki-client