Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: HnZOdS+QuPVJ3EluGytA/VeO38s2vqmxFA7mFVvM4Fc=
Subject key identifier: 32:47:06:B2:B5:ED:77:C7:53:B2:4A:03:36:02:1D:DA:3D:84:72:54
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 0199FBEAD0990DE6F7A06E2B6E462B5BCA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 0931
Signing time: Sun 19 Oct 2025 10:01:33 +0000
Manifest this update: Sun 19 Oct 2025 10:01:33 +0000
Manifest next update: Mon 20 Oct 2025 10:01:33 +0000
Files and hashes: 1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: VXHai3pDTj7nuXRJzs7a+Z/a88dVGZCKVnlq/8QQAdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d0:99:0d:e6:f7:a0:6e:2b:6e:46:2b:5b:ca:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Oct 19 10:01:33 2025 GMT
Not After : Oct 20 10:01:33 2025 GMT
Subject: CN=324706b2b5ed77c753b24a0336021dda3d847254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:e6:82:12:5f:19:f4:41:2e:07:4a:ed:3e:
52:1e:19:43:b3:21:af:d9:f4:97:7d:15:26:fa:81:
e0:4f:0c:78:ae:1f:07:07:55:83:ce:a1:b9:45:69:
c3:e0:8d:02:92:2b:32:f6:1c:b0:00:f5:d5:cf:c8:
a0:8c:0c:86:c3:e1:1f:86:95:f0:6c:b0:76:94:64:
43:18:8a:d6:0c:cf:12:39:3e:43:94:c1:18:32:f9:
6a:e8:e9:ed:8b:2c:40:41:6d:93:75:d5:e1:ac:81:
ab:d6:d7:fd:21:e4:4d:30:ad:1f:89:53:87:bc:62:
0b:ff:54:12:5b:a2:8d:a1:61:f7:9b:bb:bb:f0:f8:
9a:ee:26:f5:e4:a7:9c:ac:b8:62:21:d5:26:2a:ab:
5d:ec:8d:50:62:0a:1d:20:c8:9a:92:5e:b9:6f:42:
01:4d:32:a3:32:d3:66:2c:38:05:a3:4a:e0:89:64:
c6:16:06:c9:ca:e4:b4:90:a1:24:2c:01:82:a5:88:
5c:7d:66:6a:d3:c3:96:15:83:8f:29:24:43:af:01:
25:8a:bc:6a:68:14:65:d4:d2:09:05:29:8c:a3:a0:
5f:34:de:a3:b0:8f:7e:8d:8e:04:73:77:54:30:1e:
46:06:47:86:67:ad:e7:88:45:6c:0d:87:87:87:cd:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:47:06:B2:B5:ED:77:C7:53:B2:4A:03:36:02:1D:DA:3D:84:72:54
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e1:32:30:02:c8:fa:58:f4:87:d1:60:ae:77:62:c5:1e:7f:
29:ce:e7:40:cb:ab:15:12:de:e3:9b:9e:b9:82:4d:4d:ce:e4:
89:51:f4:15:6c:12:56:46:1a:d6:40:35:90:19:ce:7e:0d:15:
57:f9:d7:46:99:20:53:f0:73:05:da:53:03:36:ba:e5:15:12:
c9:86:71:5c:e4:e8:22:3f:a1:f5:b5:81:ef:38:b1:0e:d3:e2:
2b:06:56:b8:cf:0f:6c:36:54:6b:93:35:44:d5:21:a4:ed:74:
42:bc:17:00:26:7d:1a:4b:a4:ce:aa:8b:9f:2c:6f:74:25:89:
98:52:c4:48:b0:b5:43:93:48:09:ec:1d:d9:73:d6:55:0c:68:
fb:25:ad:24:fd:86:e4:62:d8:18:1e:4a:d6:ed:3e:18:16:07:
bd:ec:fc:fa:dc:3b:d4:8f:79:54:fb:44:fa:88:dd:b5:62:50:
5a:58:9f:1a:42:70:aa:30:56:d3:71:42:f3:53:3a:49:e9:2f:
f7:29:60:83:30:c4:c2:f4:e8:0f:f4:b7:e8:83:29:47:22:be:
dd:d9:22:74:4c:44:6e:11:43:f0:01:49:ce:bb:d1:b7:0d:96:
cf:b4:42:60:4c:db:b2:9c:65:f4:f5:7e:02:bc:8f:ab:a9:77:
1a:31:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:41 2025 by rpki-client