Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier: l5VLWRv+sYfq+Ndb5Sirhabg9TXvtNr1pb7TvhKClxk=
Subject key identifier: E6:1B:A2:3B:84:60:29:60:BE:C8:21:A7:93:D3:37:BD:F2:3C:69:8A
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 0199FD6B62FFD593AEFBCE8C2A6B180378BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number: 0185
Signing time: Sun 19 Oct 2025 17:01:37 +0000
Manifest this update: Sun 19 Oct 2025 17:01:37 +0000
Manifest next update: Mon 20 Oct 2025 17:01:37 +0000
Files and hashes: 1: 78p7eZsSQ8zonV0TNMaLaLjK96I.roa (hash: +QO+TKXARPaWdOJ8baQ83Q+fqGFHJ3lndWpB+9vwuT8=)
2: Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa (hash: s3KelrVfC9+y7bPujzwFv1EKOWZnruzzVkasMV5xnU4=)
3: Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa (hash: xVI7un3YDJ74QBZKCGBUFc9S59Re+F08cwvGlwnT43k=)
4: LuLOUOJIGHxq7ykgB21inUS-57w.roa (hash: ab5+eNLQ6Vj2WxgXbW4Ku3+IuOco/UzZZHvYaaD6UKw=)
5: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: YyxwO7cpLebGJXbj5kPxgqx2drVRUEfrEhAX63umNUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:62:ff:d5:93:ae:fb:ce:8c:2a:6b:18:03:78:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: Oct 19 17:01:37 2025 GMT
Not After : Oct 20 17:01:37 2025 GMT
Subject: CN=e61ba23b84602960bec821a793d337bdf23c698a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:cc:98:14:a0:b0:21:c5:c0:96:a6:1c:1b:
c9:dc:0c:2f:8b:b0:1c:fe:76:46:74:81:36:57:72:
2b:57:44:cd:49:2c:1c:d6:09:20:c4:20:6d:6a:59:
9c:7a:f3:1b:c5:55:26:41:1c:18:6c:07:43:24:2b:
08:c3:9f:af:21:7c:16:62:50:cc:2b:18:f5:e8:c5:
e9:58:06:7f:3c:d3:88:4d:18:72:b1:89:0e:98:32:
52:ac:89:27:c4:7c:c7:f5:ec:c5:02:7c:37:c5:d0:
bd:63:9e:22:1d:20:77:f1:9a:f4:03:36:a2:49:81:
18:d5:9a:f7:98:b2:b3:fb:e0:94:ed:f9:1f:d3:3f:
f5:da:72:af:19:7e:5d:4d:00:19:68:0e:74:be:55:
8a:dd:4a:f6:f4:97:3d:83:3e:7e:02:c6:96:6b:25:
18:b5:15:a7:00:d2:5b:ba:ab:96:b4:5a:f9:68:96:
17:e8:13:34:72:72:66:9a:a4:da:c2:e5:79:53:e7:
4b:ce:e2:b3:d3:6e:0d:98:dc:4e:9f:b0:c3:c1:1c:
0a:5c:6c:6d:21:d7:c3:08:f1:1a:b2:95:12:69:5b:
6f:93:19:41:86:a2:73:ca:9a:93:f9:12:58:8a:93:
b8:09:ba:dd:1c:1a:2f:d6:25:29:fd:3c:38:92:f5:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1B:A2:3B:84:60:29:60:BE:C8:21:A7:93:D3:37:BD:F2:3C:69:8A
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:81:b3:eb:48:3d:59:bb:0c:cf:9d:71:2f:6a:b2:57:6a:45:
86:73:df:0a:69:f3:4a:33:57:f1:e8:22:9f:44:b3:2b:f3:0d:
5b:cf:5f:7d:87:c5:bd:8c:84:81:49:8f:53:7d:aa:5c:bb:cd:
17:69:61:d8:cb:5b:9f:a0:ac:2d:40:aa:cb:3a:e1:2a:7c:ff:
51:16:86:76:40:f0:eb:f9:a0:25:ec:5b:48:c5:7c:75:99:f8:
6d:33:4b:ac:a3:1e:cb:58:71:7c:27:1f:48:40:66:49:4b:4e:
d0:cf:60:bd:e5:60:4f:87:7f:ab:fc:a9:0a:2f:bf:15:0e:43:
c7:bd:48:43:14:ab:3c:19:e0:ca:53:f7:e1:a1:d0:7a:03:08:
26:65:cf:02:2c:4a:72:08:ca:a3:37:ee:df:74:48:0a:22:57:
e3:c3:d4:ed:ce:f1:6f:26:4b:a0:11:2f:d3:8c:3e:7e:47:73:
23:48:7a:23:ed:b7:d9:c7:2b:e3:cd:a8:b3:aa:10:fe:b3:b9:
04:49:f8:08:01:96:93:6c:0b:48:9a:f1:db:78:48:3e:52:0a:
93:d9:04:44:92:c7:e3:b6:22:8a:52:7b:f9:68:f6:c1:d4:62:
96:f9:6a:4e:1c:50:94:e0:42:57:56:00:6b:8c:dc:7b:b4:b2:
e9:d1:a4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:55 2025 by rpki-client