Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: 9JRvorxlyUvuMDb0HhYU1neFhYFzxiUrqV2BDaodrNw=
Subject key identifier: D4:4F:3F:02:52:0C:D7:30:5B:11:D5:DD:4C:AD:2C:B1:9E:7E:81:B1
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 0199FC21B0591B806368A321A0D756F19C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 0FCA
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: plHBa69clLjcq18zuNu4fMzR5x7S2OW6qWEDe9n/Lrw=)
2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b0:59:1b:80:63:68:a3:21:a0:d7:56:f1:9c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=d44f3f02520cd7305b11d5dd4cad2cb19e7e81b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:34:4e:21:3c:43:d1:79:34:25:89:cb:df:
de:c6:87:65:24:b7:39:83:58:f9:54:0b:31:37:7a:
f9:cd:db:9a:8f:62:92:e2:87:af:a1:20:1b:d3:f7:
14:3e:6f:2c:33:3b:16:09:4c:7d:99:ab:14:d2:5e:
ac:a5:96:f4:4b:e1:96:ad:79:04:78:ad:7b:80:8d:
6b:5a:45:62:3e:34:16:fd:6a:76:fb:da:16:b3:6d:
76:0c:a9:e7:34:97:29:ce:13:38:af:fc:f3:be:81:
8f:c9:94:63:1b:ff:96:12:11:9e:2d:14:18:d7:87:
c3:77:53:04:73:c9:4a:32:cc:94:a1:58:bd:24:eb:
ef:95:5c:29:64:15:3d:ea:cd:bf:28:43:99:02:44:
fd:0d:35:22:21:ba:6c:66:72:24:52:15:6a:a1:04:
61:bd:5d:ee:d1:b0:b4:64:40:6d:26:f6:63:11:fd:
65:98:8f:ce:5d:65:16:db:2d:8c:8b:35:e5:1b:0b:
64:a9:ef:85:f2:68:a2:bc:3a:e3:8c:21:b0:50:18:
03:41:d1:5b:09:21:4c:27:81:9f:44:f2:fd:e6:62:
09:1b:de:38:0c:50:8b:9d:ea:7e:1e:dd:43:d4:dc:
b4:8e:53:74:60:6b:09:03:17:83:0a:6f:c5:31:a8:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4F:3F:02:52:0C:D7:30:5B:11:D5:DD:4C:AD:2C:B1:9E:7E:81:B1
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f8:a7:2e:30:4a:45:e9:c7:52:52:c1:76:b0:b6:23:75:ca:
75:cf:f7:9f:d8:e1:6f:67:83:01:88:09:fa:03:db:ba:e9:a1:
14:3a:e3:f3:0b:89:18:a5:b7:cc:63:9b:40:e8:1e:f1:06:4b:
e4:b6:1a:59:f9:9e:cb:c6:3c:4d:b2:a1:ef:71:64:14:b9:d9:
23:c3:f7:f6:f3:12:6f:88:42:6f:fc:f1:fa:9a:6a:de:f3:c6:
3c:d1:6f:dd:82:47:92:4c:67:20:90:07:6c:1e:e2:f4:18:6f:
23:18:03:ce:ff:a7:43:45:d2:e2:89:4d:9d:2c:c1:b5:ae:4e:
71:20:e4:8f:81:f7:6e:2f:d3:15:91:0c:93:29:1e:e6:08:82:
ab:2a:45:f1:ae:e0:00:5e:2a:2e:68:5d:ad:82:eb:f5:a4:1d:
94:e0:de:4a:4e:8a:83:93:32:96:44:2e:44:fa:91:b5:dd:ca:
c1:3e:6f:59:b5:46:be:c5:05:4a:34:ce:92:27:8f:7a:e5:8b:
20:38:4f:eb:bc:ea:c2:7c:ac:28:9a:c9:51:61:42:fb:fb:48:
45:d0:c0:a9:cb:b3:46:1c:08:2a:86:fa:b4:58:25:af:e6:4e:
62:be:8f:60:06:0f:36:9a:c8:09:53:2d:35:53:0b:1a:18:eb:
2a:37:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:55 2025 by rpki-client