Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft
File: You5JTbCD0KwW-UywNuquYt1XzU.mft (raw, json)
Hash identifier: F3R/NdNI5KOOi8inpuQ4ODAEKCi3062ToDSpsUqmIp8=
Subject key identifier: 7E:12:3D:43:7C:3D:EC:1B:B6:08:B3:37:96:44:DD:BF:D0:F6:00:D5
Authority key identifier: 62:8B:B9:25:36:C2:0F:42:B0:5B:E5:32:C0:DB:AA:B9:8B:75:5F:35
Certificate issuer: /CN=628bb92536c20f42b05be532c0dbaab98b755f35
Certificate serial: 0199FB7D04D4756B3340DE5F1D8A683D7EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft
Manifest number: 0197
Signing time: Sun 19 Oct 2025 08:01:38 +0000
Manifest this update: Sun 19 Oct 2025 08:01:38 +0000
Manifest next update: Mon 20 Oct 2025 08:01:38 +0000
Files and hashes: 1: You5JTbCD0KwW-UywNuquYt1XzU.crl (hash: HH5/ZZ8mF28Kp3e0ArM/kOWNa7nqtRMA8yiIM3wWV2M=)
2: lUZIxGhzOYxZGWoE_bPIsAcvBns.roa (hash: 181xs0vbEO2Q9NjKNLp5nMH7XagJ9a8i0PdC3k4WAwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:04:d4:75:6b:33:40:de:5f:1d:8a:68:3d:7e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628bb92536c20f42b05be532c0dbaab98b755f35
Validity
Not Before: Oct 19 08:01:38 2025 GMT
Not After : Oct 20 08:01:38 2025 GMT
Subject: CN=7e123d437c3dec1bb608b3379644ddbfd0f600d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:87:d1:69:23:13:8d:8b:4d:2a:f1:cc:ab:
47:9a:87:66:1a:37:ab:c3:3d:61:42:32:93:95:5f:
b9:95:ca:07:81:6e:7d:70:bb:af:30:7e:70:dc:2f:
25:a0:86:ce:a7:b2:f1:a6:1a:65:43:5e:fb:29:b1:
d8:9f:69:1f:7f:19:60:54:dc:28:7c:c7:00:75:30:
3e:f2:65:70:4c:05:77:20:76:27:47:1e:e6:41:c8:
bf:87:8b:a6:e4:0d:75:b5:83:ba:53:0c:ce:a3:5c:
40:08:18:61:7f:7f:20:0b:d2:65:d4:7f:8e:30:9c:
e5:35:00:a0:05:ae:8a:2a:71:08:68:d4:05:d6:ab:
2e:0c:f6:69:8e:34:be:a6:cd:f3:1f:df:11:c1:47:
a6:7a:64:a0:39:70:bd:ca:a5:fc:92:1c:53:88:3e:
eb:ec:2e:da:48:26:0b:0b:e6:99:e2:6e:d9:ef:bc:
a3:83:fe:1a:e8:91:49:1b:b4:62:19:c9:82:96:0f:
26:7c:35:1a:86:03:20:21:f4:bb:46:f2:e4:e5:a8:
ad:6f:91:57:cd:5b:45:6b:ca:ba:75:9a:4a:c2:be:
c6:b8:49:45:9a:14:55:93:d7:ca:21:98:bf:02:ec:
0c:bc:8c:b5:19:0c:83:ae:39:4d:89:98:ae:0a:30:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:12:3D:43:7C:3D:EC:1B:B6:08:B3:37:96:44:DD:BF:D0:F6:00:D5
X509v3 Authority Key Identifier:
keyid:62:8B:B9:25:36:C2:0F:42:B0:5B:E5:32:C0:DB:AA:B9:8B:75:5F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/You5JTbCD0KwW-UywNuquYt1XzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/205dbe-7714-4d0e-9473-2bce81a431eb/1/You5JTbCD0KwW-UywNuquYt1XzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fb:50:61:5f:21:7f:8b:2e:0c:61:a5:78:e5:73:c2:ef:05:
28:5d:35:ad:53:2d:a9:7a:8a:c7:1a:ea:e8:8b:0b:3e:e9:6c:
01:2e:01:e3:ed:54:88:22:36:23:f7:70:be:22:1c:15:2d:9f:
c3:fe:47:9f:29:ce:3c:9d:01:11:6d:6b:f3:b4:76:8b:46:05:
5a:ea:2d:75:37:f7:eb:29:96:28:1c:fc:38:5c:51:0f:33:2d:
f1:ef:49:a7:5c:b3:4e:e2:9e:9d:e6:31:c7:ce:7a:c1:d6:5a:
46:d5:83:df:29:8a:8b:26:06:00:05:3e:12:65:73:eb:01:78:
54:16:ec:41:05:de:6f:2a:02:6d:bc:e9:4d:bd:03:ba:e3:5d:
af:9a:d5:05:fc:20:c9:da:05:ef:f2:eb:fa:be:84:15:17:1b:
19:0c:db:d6:a5:a5:fd:75:a7:49:0f:a4:ee:8b:01:db:24:e7:
8f:cb:f0:4e:69:71:a9:19:2d:95:5f:ad:98:55:2d:1f:e6:63:
06:c5:26:12:14:82:23:f2:18:48:85:f5:ed:cf:54:ec:01:c8:
dc:0c:d1:ba:22:06:e7:f7:0f:b9:89:96:44:a4:60:e2:6f:1e:
0a:58:2b:6a:57:ca:b2:67:38:d4:04:7c:2a:ef:07:00:85:db:
42:01:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:01 2025 by rpki-client