Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
File: YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft (raw, json)
Hash identifier: acDul97uuS8R+HzqDzmGt6lW5fCcVnuMUmTfcy9NUy4=
Subject key identifier: 4A:5A:F6:49:0F:E7:6D:6B:6D:01:78:03:C9:43:5F:5F:DA:48:3F:23
Authority key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
Certificate issuer: /CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Certificate serial: 0199FC8FBE674C6B43B4F59B4E6E32E30357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
Manifest number: 05D4
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: 59_xhKD0T6uSuFEYj3I2uhiqG1c.roa (hash: MYVrtUe54xpHaYsIcVLfMIx5ZncQsO+bXIz8ZL41Ros=)
2: 9qqMkqBIjABklRo0TcvZzdRORAI.roa (hash: 2MCPGhcnLXE4oMEI7o6/tc2uu9oOZ9cwxOU5/mzOPUI=)
3: YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl (hash: DSzrhmDKeMJEcXaTslSitiCty2999yn6pnS8n/++PYc=)
4: wXfYanJeLekulCR6gXF4hFd0qi4.roa (hash: kVi1Jps4RtrSVg9+xQdU2e8mO6fPm3vlK9bwNs7JRMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:be:67:4c:6b:43:b4:f5:9b:4e:6e:32:e3:03:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=4a5af6490fe76d6b6d017803c9435f5fda483f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:67:aa:8a:ff:d5:f2:18:8c:54:bf:5d:f4:
b6:69:95:f4:e5:bf:b3:62:2f:74:44:cb:2e:1c:21:
e6:99:63:18:2d:ad:89:42:ed:88:3c:c6:65:ee:8d:
67:3b:81:66:76:90:5f:c5:ee:bf:9c:16:dc:e4:99:
12:3b:65:53:2a:55:47:35:6c:f5:d7:88:2b:f2:da:
84:25:e8:c8:2c:94:d4:08:34:e3:fc:46:a8:19:cd:
6c:58:fd:ff:31:8b:a8:6d:0e:be:ce:a7:65:dd:da:
1f:a4:e3:08:f0:46:fe:fc:9b:5f:ac:8d:d5:1d:1b:
7c:64:f1:38:70:9c:33:a6:a1:c3:40:a1:bf:e8:5e:
35:39:8b:b0:a2:94:d0:42:a5:17:8f:3a:7f:58:59:
9f:5c:52:07:96:c7:e8:6d:78:9f:0d:67:10:e2:83:
05:69:f5:ab:62:7c:e8:ab:02:93:4b:dd:1c:a0:94:
f5:33:75:ca:c1:7c:6b:1f:c0:14:95:39:06:c5:20:
48:8b:3b:1a:aa:15:8e:f1:b3:e8:2a:b3:27:9d:84:
19:42:c2:04:5e:3e:14:69:a0:3c:e9:60:56:ae:9a:
9e:f5:ca:4b:2c:bb:b2:df:5a:cd:f0:53:68:76:57:
da:81:10:25:9d:e7:62:cb:e6:35:6c:3b:14:5f:ab:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5A:F6:49:0F:E7:6D:6B:6D:01:78:03:C9:43:5F:5F:DA:48:3F:23
X509v3 Authority Key Identifier:
keyid:60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:af:76:89:fa:85:b8:68:69:78:6a:26:7d:7e:bc:c3:0e:e0:
58:ea:6b:1a:52:96:8e:37:b7:65:08:3d:fe:f1:9c:ef:e7:9b:
d3:da:59:5a:b8:f9:b5:54:82:bb:dd:18:53:f5:11:fa:09:bb:
b5:f9:59:cc:d3:3a:e8:7a:33:78:e6:7d:4b:b4:42:63:b7:7f:
1a:cc:74:df:8a:44:c4:89:41:ca:55:a0:12:72:4a:d1:51:0c:
6a:88:b5:ec:19:fb:ee:eb:9c:93:02:e6:cd:f0:e9:a4:1b:2f:
76:d0:b5:fc:48:e0:df:b3:a1:94:00:a9:46:8c:f6:77:1d:7a:
15:b6:3e:3e:aa:70:5d:79:05:1a:38:49:45:aa:5f:01:14:cf:
d4:f7:bb:21:ed:84:7e:05:01:8a:3b:f4:2a:c8:62:9b:30:d6:
95:49:4f:95:79:03:b0:38:05:8b:0b:8c:c5:e5:87:f9:c7:89:
a2:c8:ca:8a:9a:7e:05:2b:7f:fe:f9:8d:f4:9d:78:92:13:a2:
8d:d9:7c:d4:81:f6:3d:7e:e9:05:1e:35:0d:79:c1:9c:20:f7:
bc:0c:89:03:86:08:9a:f5:1b:57:f6:a9:f6:82:3e:50:16:56:
8d:8c:5d:51:e3:47:19:3b:2c:bf:56:f7:ea:f1:4e:de:eb:cb:
45:b0:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:13 2025 by rpki-client