Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: mm/kLRoOVob+CsTYunNtV7kPhbOX67jmiwbs2u0Tpuc=
Subject key identifier: 1B:E3:3B:81:87:23:35:D9:02:B8:22:7A:16:78:A8:78:EA:34:FF:F8
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 0199FDD8F5AEA8E60ACE21AD5A2B889DE97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0CE0
Signing time: Sun 19 Oct 2025 19:01:18 +0000
Manifest this update: Sun 19 Oct 2025 19:01:18 +0000
Manifest next update: Mon 20 Oct 2025 19:01:18 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: ikBny5ZqSD4k+cSAUBLzbQfNKFkXB8DlE44mwONBetM=)
2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f5:ae:a8:e6:0a:ce:21:ad:5a:2b:88:9d:e9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Oct 19 19:01:18 2025 GMT
Not After : Oct 20 19:01:18 2025 GMT
Subject: CN=1be33b81872335d902b8227a1678a878ea34fff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d5:46:aa:47:4f:47:d0:f3:05:89:86:95:e8:
6c:29:04:e6:f0:6f:4c:66:7f:62:c7:d9:de:78:17:
88:da:e3:a9:b5:a1:e2:f3:a8:53:e8:80:d3:6a:00:
58:4f:38:76:be:2b:57:f3:06:11:41:9d:da:ba:ee:
6e:bc:2e:d5:b2:c1:98:eb:b9:86:37:6f:35:87:db:
84:c4:16:a9:b0:21:49:7b:44:3e:84:00:28:c9:3f:
eb:8f:15:ca:ed:28:8a:6b:a7:bd:44:c9:a6:51:b1:
e2:ed:7b:97:53:e8:cb:89:b2:eb:0c:67:9f:fb:f4:
08:3b:ab:30:f0:f6:3c:00:64:d7:dd:a3:6e:19:37:
b6:2d:70:74:7a:46:85:3d:a5:34:a6:63:48:89:09:
ec:90:ef:34:5d:12:91:f5:31:d7:04:4e:50:03:9d:
af:8d:1f:31:fc:ca:67:f0:1c:26:e9:cd:cb:6f:47:
d0:b1:e5:9c:f5:0c:93:5e:bf:23:c0:39:07:9b:fb:
a1:b6:12:50:2b:a1:10:af:8f:5f:78:97:b5:be:86:
42:15:9a:c8:18:58:4e:e3:cd:15:19:8c:27:8b:fc:
86:58:a7:a4:07:f2:45:c1:32:93:be:be:47:eb:06:
4c:1e:53:d5:48:c6:3d:03:f3:92:58:59:09:91:51:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E3:3B:81:87:23:35:D9:02:B8:22:7A:16:78:A8:78:EA:34:FF:F8
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:dc:fb:00:60:f9:e1:89:fb:10:00:1a:33:24:be:f8:19:78:
db:39:b5:26:5b:25:4d:e7:48:c8:9b:81:d6:6f:72:48:cc:4e:
18:d6:ea:54:1a:22:91:ca:7d:ea:71:34:b7:1d:af:31:8a:34:
45:f2:72:fb:d8:3c:9e:c8:a4:97:ee:7b:84:dd:ad:df:0d:f2:
2b:0b:a0:97:bd:9a:3e:cc:45:6d:28:93:54:be:9c:86:4b:fe:
51:e0:46:f6:38:a9:c2:04:07:4c:f6:c9:dd:1a:86:97:58:85:
88:9e:59:a9:f9:06:53:db:1c:fe:98:02:7c:10:ee:77:75:cd:
4c:fe:69:62:2d:3a:2f:70:98:ae:07:94:68:18:1e:0f:68:6a:
7a:8b:2c:66:0c:47:8b:fc:ff:16:57:a4:29:0e:66:25:ff:7f:
99:ab:15:9b:4d:0c:0a:18:06:48:24:54:87:4f:8a:dd:fd:77:
8f:37:47:92:9c:97:76:5b:c1:4d:89:f2:eb:00:c5:0c:c3:ba:
8c:b3:d0:48:65:c6:9d:87:94:53:8d:12:97:4c:67:c2:11:39:
4d:85:68:95:9c:17:04:52:a2:ef:09:09:2a:e3:39:b3:25:d7:
b0:c6:78:7b:2d:0d:ee:c7:9a:36:23:86:34:5e:d2:ef:b3:71:
3a:19:79:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:25 2025 by rpki-client