Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: lLGMg5tdK9HnaKRC85dU9A1Jf22HDrepmSxA1lYXJbs=
Subject key identifier: 45:07:E6:AF:86:60:5C:6D:D4:14:A6:11:D4:F4:CC:EA:24:F6:5F:8E
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 0199FE4735F5FC0D3CD68B1EBC86323D28B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1610
Signing time: Sun 19 Oct 2025 21:01:43 +0000
Manifest this update: Sun 19 Oct 2025 21:01:43 +0000
Manifest next update: Mon 20 Oct 2025 21:01:43 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: vddfVq0e9hKiSI2CGl/39RgwM6D44T6jSzNOwgKAihA=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:35:f5:fc:0d:3c:d6:8b:1e:bc:86:32:3d:28:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Oct 19 21:01:43 2025 GMT
Not After : Oct 20 21:01:43 2025 GMT
Subject: CN=4507e6af86605c6dd414a611d4f4ccea24f65f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:5f:a0:5e:2a:c1:40:aa:d6:80:44:8d:ad:
27:8f:72:e8:0e:01:ef:85:50:e1:af:f2:77:a9:5a:
57:ab:b7:5b:a1:88:2c:95:66:8e:c9:d2:39:17:e4:
55:7d:85:06:d5:a7:85:b8:49:c9:7f:67:6d:48:a4:
8b:03:ac:56:70:63:ef:67:a8:b0:27:e2:15:1a:ca:
2c:25:f1:0c:4b:29:a1:57:39:f1:df:4f:c6:27:92:
71:cb:db:d7:81:81:66:0c:cd:92:b7:71:17:1e:f4:
02:9e:76:0c:e4:68:e8:8b:38:09:38:b4:19:a9:b5:
e2:a2:f2:02:80:c2:80:af:34:9d:dc:95:ed:bc:63:
cf:4a:0b:2a:8a:a4:74:5f:d4:a3:5f:9a:1a:46:a3:
7a:35:77:60:1c:95:33:39:c7:f5:0b:7b:aa:17:f9:
87:56:6c:2d:73:53:e1:80:ad:cb:08:49:f3:b9:91:
d2:e8:95:e6:0b:23:51:f2:f1:35:d8:1c:48:5b:5e:
71:1d:2a:bf:01:b4:01:35:30:b4:21:a1:e5:38:ed:
58:a6:9f:23:60:cf:d4:16:93:cf:d5:06:1e:60:61:
55:7d:dc:65:67:d7:d0:dc:f7:00:ce:34:d1:0c:6c:
0a:56:7a:5b:47:c8:db:96:48:e8:84:80:26:87:02:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:07:E6:AF:86:60:5C:6D:D4:14:A6:11:D4:F4:CC:EA:24:F6:5F:8E
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4a:5c:f4:51:22:aa:65:30:8f:6e:52:8e:57:d0:91:5b:e5:
79:9d:e7:2f:a0:48:21:bd:63:aa:85:ea:1e:67:71:32:0a:52:
f6:a0:8a:06:88:12:1c:50:7d:5b:37:d0:26:0b:64:47:21:48:
db:22:51:56:34:68:92:e7:a3:fb:42:a4:05:d3:2e:f8:c1:cb:
57:67:0a:37:5f:53:1a:e5:51:8c:a2:e5:83:41:80:ed:b0:a3:
51:c2:88:54:5c:d7:3c:ff:06:e9:27:b6:04:a0:3c:de:7e:c5:
0a:13:eb:62:93:1c:92:40:14:0f:8c:ec:a9:ab:31:09:63:cc:
30:24:98:50:70:94:e1:91:da:85:8c:8c:cd:1d:d7:21:d1:47:
7b:52:a2:53:ad:56:13:ec:27:e6:05:49:32:55:81:eb:62:2a:
ae:d3:1f:3c:74:c6:72:4a:41:dd:2b:9d:6b:39:99:e7:74:30:
87:4e:f6:b5:60:ae:c0:01:df:8d:53:e9:43:36:b7:44:6b:0e:
7d:d7:49:fb:8b:49:84:5b:b7:c7:02:f2:f3:e2:76:c2:69:aa:
90:95:34:b7:e7:c8:a4:a3:43:66:6f:73:6f:95:f3:c0:54:2f:
16:30:d9:c8:80:1d:8b:23:95:83:82:5b:d4:8a:ff:82:7a:e6:
bd:2c:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:38 2025 by rpki-client