Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File: 1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier: 4JUQEuW+FwaicMg8n5Zimy4nmP5Xl3LMe1j4mbM9fN4=
Subject key identifier: 29:3E:D9:66:CE:C5:97:DE:A7:26:A5:EA:93:66:76:1E:01:8C:0A:0F
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial: 019A017E83EDD90452657136D042BCA02B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number: 14C3
Signing time: Mon 20 Oct 2025 12:00:59 +0000
Manifest this update: Mon 20 Oct 2025 12:00:59 +0000
Manifest next update: Tue 21 Oct 2025 12:00:59 +0000
Files and hashes: 1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: N6jyjw8DZP1er8qwXIM1o9C0FeR+tPwdfIURlGu4bso=)
2: KOw7xMKHlQCXW_5gRyvKjG3BAa4.roa (hash: lL3/S+AcvkiAqiXw9PyhHyyK0CE6Zf/JEzIe2/vsusg=)
3: NleaA2dNW39O_bLmPG6btbUsU3Y.roa (hash: sf3a501O0GUvM+JaIfyUft8SNLFrIk6yXA4pjHEA8yc=)
4: VXuZkRLoEcdAW1J7RtAxdgrcSzo.roa (hash: dJX4lpj20W+7pafsIHml8SOFrK8bjcSrzM7WjN8BZk8=)
5: hlJjKHJFeD3j4Nr8Kn0Ft2J4O1E.roa (hash: Fv/393RUKDmiuBI9kyyedtNaYIDs37je0cMv9FMaRSg=)
6: zTw4UgDwTum-l_h9WbH_dREg6CQ.roa (hash: b7idLBgnKlFBdz/jKpa7Hm7iiMdE241Sp7LHy9Qhpzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:7e:83:ed:d9:04:52:65:71:36:d0:42:bc:a0:2b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Validity
Not Before: Oct 20 12:00:59 2025 GMT
Not After : Oct 21 12:00:59 2025 GMT
Subject: CN=293ed966cec597dea726a5ea9366761e018c0a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:06:0b:5e:91:4f:ef:13:c3:a7:85:8f:89:
f7:b4:b4:3d:62:b5:a6:e8:46:f9:a7:38:9b:3a:48:
24:98:8a:41:17:12:6b:10:88:d7:d9:f2:97:c6:31:
7c:19:bd:85:d8:2b:d0:97:4a:34:6b:c0:de:57:50:
c6:87:1d:56:c4:71:b2:e6:31:ba:1e:b8:3f:2e:b6:
22:ba:4c:7c:34:c0:65:74:2f:b8:ca:d3:0b:64:01:
e5:a4:f2:eb:94:6c:6e:4a:14:2f:69:a9:e1:39:2a:
8d:d5:a2:47:6e:bc:ca:ea:7c:ca:0b:0c:89:c9:8d:
2e:a2:bb:2b:c2:ec:e1:aa:2d:86:2d:f1:e4:31:32:
56:d6:1c:c9:5f:9a:62:a3:6e:66:1c:f7:74:16:f8:
e5:9a:c7:1d:64:d3:72:2d:eb:81:e6:c8:0b:87:e7:
86:e4:50:f1:db:b0:a6:38:e3:4b:22:ac:11:f8:7b:
29:b5:2c:00:90:27:de:f3:45:f1:c9:35:76:93:44:
b2:64:47:4e:2b:ba:55:71:4e:d8:fc:28:12:db:fc:
62:e3:68:3f:2f:fe:39:b4:ab:c6:4b:0f:df:2e:54:
23:18:21:dc:76:d1:0d:3e:56:8f:7b:e8:a6:22:7c:
72:a2:6c:b3:50:36:53:aa:a3:0b:0d:98:fc:67:32:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3E:D9:66:CE:C5:97:DE:A7:26:A5:EA:93:66:76:1E:01:8C:0A:0F
X509v3 Authority Key Identifier:
keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ec:80:9a:df:3b:db:20:88:eb:c9:ea:13:5a:06:e0:84:9c:
37:39:d7:58:be:b4:7c:67:b6:3a:26:10:18:2e:96:a8:91:8b:
f0:b3:63:47:a5:4c:32:92:96:14:34:02:c2:fc:a0:74:f3:f4:
e9:04:84:2c:e9:b7:fe:b4:25:49:d8:26:7f:21:91:eb:ce:81:
19:be:c8:64:96:12:23:5d:42:df:ea:de:31:55:c2:7d:ae:cd:
16:53:ef:53:92:c0:63:79:af:8f:15:73:6d:96:57:db:4f:bf:
de:54:f3:57:0d:1b:ee:5b:df:ca:cd:a0:15:b1:30:71:19:ff:
93:e3:ed:e1:e9:03:74:41:c0:dd:08:44:61:b1:0f:f9:88:93:
8c:ef:ea:22:70:de:61:f9:ad:7f:17:48:b5:a4:9e:57:e3:ca:
6a:b0:fd:10:03:27:b4:36:7d:50:1e:e7:c6:44:4d:35:d2:18:
2e:c8:e2:f5:3a:fa:0d:54:8c:96:08:b1:f2:97:e7:22:da:fe:
91:21:eb:b2:80:ed:0a:63:9c:af:b5:53:44:89:14:e4:9a:77:
55:6b:e8:ed:26:d5:1f:9e:83:4f:cd:d6:7e:3d:d4:16:87:92:
c9:b2:7d:b9:15:e5:ee:6d:c8:bd:a5:f1:bc:6e:34:dc:8a:0d:
05:31:a2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:08 2025 by rpki-client