Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: 4o5T5s0jWx0ea2TOGjO/vaorS3pmOaW4wgrYtX3VcJ0=
Subject key identifier: AF:A0:24:64:5C:8F:AE:AD:BD:98:97:0C:5F:E6:30:AD:B3:EA:D6:48
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 0199FDD9F85E4A4B8E35BADD050A46099373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 0B1B
Signing time: Sun 19 Oct 2025 19:02:24 +0000
Manifest this update: Sun 19 Oct 2025 19:02:24 +0000
Manifest next update: Mon 20 Oct 2025 19:02:24 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: rGpLnkdDOoKOWNg9K2MJWsMYSj4tIQomvjd12FqQur0=)
2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f8:5e:4a:4b:8e:35:ba:dd:05:0a:46:09:93:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Oct 19 19:02:24 2025 GMT
Not After : Oct 20 19:02:24 2025 GMT
Subject: CN=afa024645c8faeadbd98970c5fe630adb3ead648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:a3:41:af:d6:43:b0:de:b4:30:ec:c4:0e:
fc:fe:c8:56:36:9d:87:6c:8a:45:b5:a9:f4:13:32:
e7:3b:b2:3f:da:bb:f9:72:32:eb:70:ea:7a:14:54:
37:54:f2:d7:76:19:8e:d5:cf:27:ce:fa:59:45:ee:
d8:cd:77:72:1d:c0:8d:7e:9b:f9:45:ae:b5:e3:85:
4c:85:22:23:ac:41:90:70:5f:60:b8:98:7c:e6:f3:
9a:34:58:d4:f0:e2:12:84:ca:35:0b:d7:03:40:92:
14:b1:8e:82:f6:14:50:72:9e:88:9a:66:d8:7c:1d:
d4:ca:d6:39:2e:7c:71:ed:e6:9d:65:01:9c:be:ae:
2b:08:3e:95:8e:77:d7:b5:40:fd:c9:7d:26:cb:db:
2a:d5:cd:a1:64:40:e1:f5:29:f1:e1:a5:fd:a2:f3:
19:c7:0c:bb:6d:76:8f:7b:55:24:27:6d:a9:61:a4:
57:82:ae:9f:b6:7c:19:27:59:ab:af:66:2b:38:62:
fb:8c:e6:f5:a6:7e:0e:40:24:1c:f6:f9:11:b5:64:
3f:8a:e8:de:b8:46:1f:d3:36:1f:8f:26:4e:02:18:
90:20:12:d5:5c:14:d7:9c:11:be:9a:82:e2:35:12:
31:fd:a6:a6:58:6c:3f:eb:b0:ba:ac:ea:17:6c:52:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:24:64:5C:8F:AE:AD:BD:98:97:0C:5F:E6:30:AD:B3:EA:D6:48
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:94:f0:7e:38:ee:f9:ed:9c:38:5a:84:d0:cc:17:72:46:c6:
4c:78:0f:e4:29:91:81:ed:e2:bd:16:b2:26:41:e1:0d:79:37:
56:9a:60:e0:c9:25:79:d4:8a:a1:20:41:64:a0:55:6f:a1:0b:
37:ae:e7:52:0e:26:4f:5f:10:ee:97:fa:fa:99:23:42:e3:58:
35:59:56:32:a3:df:49:77:17:b7:28:c3:1f:14:cd:5c:60:8f:
e8:75:7d:a7:df:4b:51:db:15:10:e6:e1:9a:2d:ce:ff:f2:ba:
8c:4a:bd:58:58:f6:1a:bf:3b:38:b8:9c:c8:05:69:d3:cc:d4:
19:d8:38:0a:17:29:fb:2d:55:44:d1:e4:47:01:51:d3:c8:bf:
4e:74:85:65:3e:32:de:9e:42:ab:65:91:0e:2d:95:61:77:7a:
4c:5c:85:bb:18:62:37:47:e8:08:0f:47:1c:74:ef:20:3a:ec:
99:85:7d:b6:6b:86:43:60:62:44:11:4e:8b:9e:a8:8e:fd:c9:
40:e7:e1:4c:10:20:f3:94:86:4a:7f:77:6b:26:01:2c:71:8f:
ce:60:1c:30:4f:fa:07:a0:eb:3b:0d:73:7e:8d:c9:2f:8d:fa:
87:4b:b0:92:04:f3:34:ec:69:44:d5:d2:b3:bf:fd:d7:d7:6a:
0f:54:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:27:19 2025 by rpki-client