Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: suk9j0IOL4dUbruK8ePEngPTcXUsOh6QIBR8asFJg2A=
Subject key identifier: 49:25:1F:7D:1C:0A:4E:96:15:9E:9F:04:14:38:7E:93:8E:FB:D6:CF
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 0199FBB36DA8AF3CBED7CEDF295A2FB974BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0CF8
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: Ccywd-EFb-47zGXwVvm1HK3gD5g.roa (hash: tofGggOpzVU4QpBRLmwlmpDY705qfzw44/NrLhvXC/s=)
2: I8Tt-Zu-4KuSLBycV3-omKCgA2k.roa (hash: Zd+eY+EVCzF5gjwTJThQ6dJvOjSgC7ThbQkI/3E4k6Q=)
3: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: 6zgRq4u6RQouCFdX46Q6fBjC7msbB2FF0ZUtQjxhj34=)
4: hqQDTg86IXDCJKqDxF4L3S5iCf8.roa (hash: H2Wy84IqHXcbFRYxZCEIcsyGOCDB08MT81RQd+tDuH4=)
5: sDw4_lTU4iQJOaN0yUvzocqZ23c.roa (hash: 9muZnI3+r+Noi3k3hRSo6GnSQDK9o1ZrpIfj14cPaHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6d:a8:af:3c:be:d7:ce:df:29:5a:2f:b9:74:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=49251f7d1c0a4e96159e9f0414387e938efbd6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:27:c5:14:78:d6:06:30:5c:e5:7e:6c:41:
c4:58:1c:45:8a:6b:56:b9:3b:c5:2b:65:95:f9:ae:
56:cd:f8:6e:18:dc:5e:fa:95:63:42:72:02:0b:44:
cc:6d:b4:0b:f0:83:3f:97:fa:d0:e0:42:8f:3b:a4:
5a:18:33:54:a3:64:70:e8:82:9c:79:e1:17:74:fb:
9b:67:a6:5e:c7:f3:06:21:a5:27:bd:00:c0:bb:78:
79:32:0f:ad:ef:ba:31:69:ae:28:d5:c7:c1:42:86:
ed:16:3d:75:d5:fd:d2:9d:d6:84:5e:a4:8f:71:2a:
a7:bb:2e:08:1f:aa:f8:d9:a4:5b:f9:b3:26:6d:7f:
99:04:65:38:f4:a4:37:d9:e0:cd:4c:93:4e:ad:09:
9b:a8:38:cc:0f:f2:50:2f:98:aa:6c:e0:a5:5b:05:
36:50:a8:da:56:fa:5c:9f:eb:13:b7:d6:46:9c:1b:
36:e0:0c:f8:23:48:95:3b:95:9c:af:a8:7a:a0:d4:
63:9a:58:e2:20:59:68:00:da:d1:e4:c6:28:e1:05:
60:cb:2c:0e:68:b6:81:2d:ee:d3:42:82:be:ae:28:
f8:53:9a:de:5b:ef:c3:23:c9:ca:42:3d:a9:a0:f8:
2b:6b:72:fe:20:5e:3e:45:0d:b5:a0:3f:d6:1c:09:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:25:1F:7D:1C:0A:4E:96:15:9E:9F:04:14:38:7E:93:8E:FB:D6:CF
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:41:92:92:bc:e0:84:d9:cf:c0:30:40:37:fe:cb:c3:19:68:
df:5b:93:1c:6c:c4:cb:23:e4:0b:07:74:d1:b8:f8:6a:77:d9:
27:f0:09:f7:ba:fd:d1:81:da:c2:af:a8:d7:a4:6d:6c:ee:0d:
ba:6a:9c:85:ec:d6:9d:55:68:d8:a7:3e:79:02:1a:3e:88:5d:
bb:03:15:24:18:65:b0:fc:77:6c:59:53:7a:9b:c7:61:a3:6b:
2c:99:89:10:b3:b8:62:43:ee:43:93:aa:be:ec:5a:27:01:d4:
de:92:eb:67:7c:11:af:1f:dd:08:7a:b2:02:6e:fb:b6:e8:f6:
b4:d0:11:a2:95:33:a9:ea:e2:4b:fe:8f:eb:be:f5:9c:0a:e6:
ff:ad:61:53:d3:9e:a7:83:d1:db:47:ab:44:9a:52:15:aa:e6:
65:ca:bb:6a:61:47:60:22:55:3c:81:2d:86:d6:26:51:07:f2:
bb:11:e6:af:e9:4e:e3:76:4d:f3:2c:06:8a:2b:d3:6f:d5:f3:
52:dd:1a:cc:94:0d:c5:60:10:82:ca:f2:90:eb:57:3c:f7:7e:
b1:1b:82:3a:61:89:7a:55:da:89:6c:52:7f:f6:cb:a1:7d:5e:
bc:41:b0:2c:ca:30:a2:90:5b:d5:0e:8a:5e:db:a1:f2:7f:20:
eb:94:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:01 2025 by rpki-client