Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier: pdUvKQBU6X05BJhJl8j30HZTuY88pIixfoE438g56to=
Subject key identifier: 20:2F:93:49:FF:D6:DC:A1:F2:FC:AD:64:C1:1B:A1:B2:A2:EF:3A:3C
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 0199FDDA399B63C35118D7486A12FCF14181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number: 0E3A
Signing time: Sun 19 Oct 2025 19:02:41 +0000
Manifest this update: Sun 19 Oct 2025 19:02:41 +0000
Manifest next update: Mon 20 Oct 2025 19:02:41 +0000
Files and hashes: 1: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (hash: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=)
2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: cHoBIkIvz3k2exRdo6A3DlhY5QZvQnFNksRb8CIYwkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:39:9b:63:c3:51:18:d7:48:6a:12:fc:f1:41:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Oct 19 19:02:41 2025 GMT
Not After : Oct 20 19:02:41 2025 GMT
Subject: CN=202f9349ffd6dca1f2fcad64c11ba1b2a2ef3a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:19:c2:6b:73:3e:2c:76:55:ff:9b:30:a3:
a0:e8:76:f6:30:18:d8:b3:67:ad:10:7d:23:63:16:
9f:dd:a0:20:2b:f2:05:05:cb:66:e2:44:8d:1c:fe:
74:2c:98:e6:21:c0:2a:e1:a2:4b:f1:2f:e1:25:eb:
b3:36:3a:f9:22:4a:67:bb:00:94:0d:b8:1a:03:4f:
f0:d1:6c:61:3f:74:ea:79:c9:66:00:7e:30:f0:d1:
3d:43:7c:2b:78:5a:32:bd:9c:46:9d:d5:5f:3f:83:
4b:ad:6c:22:b6:58:3e:79:0a:91:eb:ef:65:b6:72:
32:76:f8:3e:06:fe:93:c8:22:00:c3:69:f9:af:90:
0b:4a:61:4b:e4:41:ef:dc:47:48:6d:54:17:c0:50:
ab:7e:f6:d9:fb:9b:fe:fc:cf:73:d8:d6:bd:d6:ca:
62:b6:5f:e5:40:6f:96:4a:ff:ed:d7:fc:b6:0a:4d:
4b:f6:3c:07:aa:aa:da:5f:cc:32:93:4e:a1:12:64:
ad:dc:13:24:1a:a6:3d:07:e3:d0:49:24:ca:c9:64:
37:c7:3c:fe:47:47:16:e1:5a:d3:a5:4c:50:92:ad:
b0:01:fb:4a:d3:a1:f7:5d:5e:a6:17:17:54:76:16:
0f:8d:51:c4:f9:51:bb:a1:87:b3:52:c3:2f:df:0f:
2d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2F:93:49:FF:D6:DC:A1:F2:FC:AD:64:C1:1B:A1:B2:A2:EF:3A:3C
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4b:10:11:de:82:49:52:65:f0:43:9f:1e:d7:66:db:29:ea:
f9:93:47:ff:0d:5d:2b:e8:f6:2d:3d:cc:b5:c0:a7:46:96:0b:
1d:70:6d:cb:71:ca:60:86:4b:c8:46:af:4b:23:a5:7a:f6:15:
8d:ad:a9:08:aa:01:ef:fd:9e:0a:70:03:6d:98:96:d1:25:ae:
a9:de:24:2b:67:8b:b9:ab:2b:92:da:33:68:dd:d2:a2:a7:f9:
1c:62:ff:5e:15:bd:6a:eb:9f:18:e8:99:9d:bf:37:ae:6a:b6:
93:26:6b:16:2e:d9:dd:ef:88:c4:ae:79:08:9b:5e:ac:fe:f6:
fc:8f:1e:b2:12:9b:90:11:f5:f1:68:0f:6d:1e:a7:28:5c:a6:
9d:db:9e:81:5d:3f:85:f5:52:d1:39:10:4a:84:0b:83:73:12:
f0:38:4c:13:e3:87:f8:55:14:22:ae:59:de:40:e9:28:bb:43:
32:6a:d6:91:a7:ed:e4:7f:da:1f:92:86:47:87:d8:8d:fc:b3:
ca:80:8a:33:70:4a:0a:4d:45:79:18:04:a3:76:99:45:22:58:
1e:0b:11:40:7b:0e:dc:3a:a8:21:97:69:0c:e9:0e:7f:79:f6:
3f:2f:3d:87:7b:fd:e2:94:04:c8:b9:76:e1:a4:7a:95:d0:08:
b2:15:02:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:00 2025 by rpki-client