Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: LTbqKjGVhbtYSMzNk4eb70v/9x/GjoitD5uDuBpSj/4=
Subject key identifier: 37:90:F7:CF:AC:73:84:36:CD:9E:45:35:0C:8D:30:6E:67:A8:45:6F
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 0199FCFD1EF964BA0DB97D85749B1B1F1258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 0CAE
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa (hash: 73YKFKe5WyNrwSKLy76+GejDIV4ldqnve1bMw3FlzZM=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: wph3jujQnqUaYoHH0VXHFZNfMfSkvPIh/hJjrl8xYmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1e:f9:64:ba:0d:b9:7d:85:74:9b:1b:1f:12:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=3790f7cfac738436cd9e45350c8d306e67a8456f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:33:1b:24:89:43:78:23:db:5d:48:dd:c3:
4c:f5:47:75:03:60:12:fd:41:67:16:30:57:da:87:
26:9a:c5:5f:d4:3d:c1:7e:59:2b:95:00:32:7c:fa:
1f:81:1a:5c:65:fb:d0:41:67:c2:e6:fc:b4:e3:39:
97:c8:2b:10:91:c5:0d:bf:c5:36:2f:c1:4c:13:68:
2b:19:56:41:10:9b:08:a5:65:a1:0f:06:78:e4:f7:
db:21:a9:e9:80:3c:cd:2a:c8:49:2e:ee:24:9e:f8:
ac:d7:6d:88:1a:05:05:60:fb:88:4d:6a:34:c6:84:
5f:ce:e2:c8:ad:9f:69:41:b2:69:5f:70:3e:4d:6a:
18:92:2b:c5:80:51:a9:ab:0c:3f:0e:5b:71:47:2e:
9e:52:1e:c6:cf:28:94:3c:4e:6e:1e:e5:c1:72:62:
86:25:b3:97:27:a5:56:f8:03:a8:18:e9:ae:3a:df:
6b:0b:8d:a7:36:bb:84:6b:b1:9c:d3:7d:58:17:6a:
83:f3:a5:d2:fd:ac:f4:9c:f0:eb:40:2c:9f:a6:64:
3f:2f:1e:d2:e6:44:35:7f:4a:ac:f8:1b:df:32:dd:
64:b1:33:d1:1b:b1:ec:20:68:33:c9:9a:a8:8f:f2:
f4:19:06:43:24:f0:ef:c3:d4:9c:37:3a:c5:5c:9c:
df:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:F7:CF:AC:73:84:36:CD:9E:45:35:0C:8D:30:6E:67:A8:45:6F
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1a:6f:5b:3b:78:83:33:f3:a4:19:b2:c8:ae:29:bf:05:6e:
ca:bf:45:b9:cd:71:4a:57:f7:ba:64:43:a7:b6:bf:72:f0:c7:
90:49:3d:02:f7:59:a3:3b:7a:aa:79:8d:a3:9a:6c:56:c5:54:
19:5d:19:5c:d1:4f:3f:99:15:24:6d:98:fe:46:04:dc:1f:16:
4e:b9:ff:41:f0:b2:4a:99:0d:02:ac:76:3e:43:24:ff:ac:98:
d5:11:0d:b0:bd:65:4b:0d:a5:73:6a:e9:99:7c:3f:d4:5d:cf:
00:60:19:b1:fd:d5:59:bf:34:d3:34:9d:46:df:e6:e1:ae:20:
4b:b7:af:8b:c4:7d:e4:bc:58:0f:6b:b5:61:ce:91:9f:21:63:
04:3f:65:08:6b:de:ba:c6:03:de:80:df:21:7a:54:7f:ec:db:
37:f1:97:44:61:9f:b5:6e:05:01:7a:6a:4f:f6:30:fb:ea:38:
17:b5:22:bf:dc:f8:11:4b:d4:00:5f:64:c7:b8:ce:75:b7:c2:
2d:a1:f9:e9:ae:e2:9a:a2:0a:d9:4e:9b:04:f2:af:1e:e7:65:
bd:56:39:79:e6:ad:ea:4a:51:c3:c9:ba:40:9d:f9:fc:17:78:
0a:71:97:b1:ae:56:60:07:83:8d:5e:b2:e0:02:79:bc:f6:9f:
1e:72:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:42 2025 by rpki-client