Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: eanJmYHfg/+lc+FbpaaQ5SmXjcoBj01J/wA7DsB/utM=
Subject key identifier: B7:B7:9A:5C:1A:98:56:B4:D3:04:D1:48:F7:06:14:64:36:2C:0E:58
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 0199FBEA7DC5F3910A33AEDE0F743607946A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 140A
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: 0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa (hash: usdtXTbOrc0vwd46ZO8C/l/xue6j9QcbuHgY1Bupvvo=)
2: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: HanIibHnmKVXRTm9oMlSoKUJLqVTpmF1Hb4+gYpR4Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7d:c5:f3:91:0a:33:ae:de:0f:74:36:07:94:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=b7b79a5c1a9856b4d304d148f7061464362c0e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:f9:80:8f:5d:9c:00:d0:1d:3c:89:7c:67:
a6:14:74:c5:88:45:d6:ee:0e:27:6f:36:20:d4:cf:
92:d2:7f:6a:f9:44:ef:bb:ca:fe:ea:49:14:8e:da:
6e:6a:49:eb:11:cf:65:31:11:50:d5:8b:e5:d1:d0:
ae:18:34:d5:c8:c7:b8:e6:4b:87:d0:d0:54:9e:b0:
f9:aa:48:07:45:67:e3:82:bf:32:ea:5d:f1:ca:d4:
43:0a:d6:55:2e:08:49:c3:8b:09:c7:f2:c2:72:8e:
96:33:ec:10:ba:dd:06:db:bb:65:f6:98:2b:33:1c:
b2:6b:25:56:79:8c:b9:18:b9:f1:2f:cd:83:86:e0:
a5:58:78:2a:2b:31:60:ab:71:e4:eb:31:ea:5c:91:
c7:be:12:08:77:b7:b0:1e:22:4c:32:83:29:63:b0:
82:75:93:90:79:c4:3b:0b:bb:6a:de:e1:1e:c9:db:
c4:0b:a3:11:7a:b6:06:0b:2d:4a:ad:c2:2e:88:f1:
d6:a1:f5:66:c4:f1:97:74:69:91:5f:41:61:d6:21:
c9:cf:69:72:c9:04:3f:bc:d3:95:52:91:0d:ee:e5:
9a:16:16:05:4d:8b:e3:86:76:fe:7b:5f:72:2c:1c:
69:7c:20:8a:79:3b:1c:9d:29:a5:05:4e:e6:ba:41:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:9A:5C:1A:98:56:B4:D3:04:D1:48:F7:06:14:64:36:2C:0E:58
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a2:87:45:32:63:8b:9c:bc:99:08:b4:7e:be:de:ac:47:8f:
f6:9a:bc:1a:bf:3b:d0:bc:40:6d:60:0c:46:99:d6:a0:48:ae:
5c:e9:65:fa:23:ea:92:22:23:4b:e4:81:ea:7e:10:61:64:dd:
e0:e1:ab:83:9d:b6:b3:ac:d2:de:66:dd:80:06:fb:f9:8d:6e:
df:89:17:97:93:46:6c:55:d6:c3:49:4f:67:da:bc:05:43:76:
95:23:2c:19:61:9b:dd:5a:27:c3:73:b9:e9:59:20:41:d0:08:
e3:65:01:90:4a:8c:59:b4:44:7c:f7:e1:af:33:7e:eb:b4:4e:
d7:01:e7:63:aa:8c:db:8b:da:7c:23:f7:1e:66:e4:d9:91:29:
13:57:6d:6f:7f:d8:61:21:7f:4d:ac:2a:ca:27:a8:94:16:75:
46:64:b5:9a:21:2d:2f:7d:89:3d:e1:e1:e2:b5:cd:b7:60:70:
b6:b5:c0:d4:01:67:94:81:50:21:99:6f:69:4f:eb:f8:71:78:
0f:96:f8:52:80:18:ff:b4:77:24:5b:68:0b:b6:0b:e9:4b:20:
d4:c0:c2:4a:1b:6c:0a:d8:55:91:ee:a3:e1:8f:ed:ed:c4:ba:
11:f6:72:81:39:07:0f:ce:29:cc:23:4e:77:9e:c4:29:df:92:
3f:c9:eb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:00 2025 by rpki-client