Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
File: YmFlv7I92h-YcLJBf0lkhebAinQ.mft (raw, json)
Hash identifier: t7Beb+qHKhcyoz6vVUR2ZWSAlUTPc4nK9wFLDGwK3zg=
Subject key identifier: 17:50:44:0D:4D:36:48:CF:C9:F6:78:B9:43:9B:5D:1C:34:FA:2F:5C
Authority key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
Certificate issuer: /CN=626165bfb23dda1f9870b2417f496485e6c08a74
Certificate serial: 019A003567427D1EDB641EF2F91C7FB0C9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
Manifest number: 0472
Signing time: Mon 20 Oct 2025 06:01:31 +0000
Manifest this update: Mon 20 Oct 2025 06:01:31 +0000
Manifest next update: Tue 21 Oct 2025 06:01:31 +0000
Files and hashes: 1: YmFlv7I92h-YcLJBf0lkhebAinQ.crl (hash: /ZA9SKNBasP/aUQuDRYz5jIesdiWgd+GzXVHj+YLLAA=)
2: sqHnWw_DTKSgc5zNQG4iPku5PBw.roa (hash: w6R1JeMOp3KdC2WjMvic0T8urUWBQwEZKMQrdXTts0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:67:42:7d:1e:db:64:1e:f2:f9:1c:7f:b0:c9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626165bfb23dda1f9870b2417f496485e6c08a74
Validity
Not Before: Oct 20 06:01:31 2025 GMT
Not After : Oct 21 06:01:31 2025 GMT
Subject: CN=1750440d4d3648cfc9f678b9439b5d1c34fa2f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:05:0c:96:3a:51:e3:30:e1:09:9c:9c:16:
75:7a:3f:60:86:36:71:da:f3:b8:79:6d:c1:6b:d3:
13:ba:33:40:ff:a0:b0:ae:69:b6:45:1c:ae:f6:e6:
51:ec:f8:ff:40:ec:48:9a:34:c0:99:67:2d:a2:96:
6f:e0:4d:86:98:e8:5b:a6:0b:49:10:b6:c3:ca:77:
09:82:6a:d2:b2:51:d3:b2:6f:b6:e3:e0:2d:1e:6b:
76:59:f3:2e:f2:79:4f:ff:d4:5d:e6:f0:cf:d5:58:
46:1b:19:0f:0c:9f:57:a4:d3:55:90:97:32:c4:8e:
f1:2d:e6:bb:ce:2e:ea:17:38:59:11:a5:3c:0a:91:
a1:6d:5a:ee:a7:44:90:e1:21:cd:fb:0c:49:97:e3:
eb:ac:1f:37:27:6a:47:aa:c0:56:17:54:2b:ad:e9:
a2:5a:80:36:28:3a:84:cc:91:28:78:08:ce:f7:c8:
a8:48:33:5f:de:71:f7:5a:aa:5a:8a:a7:a0:23:38:
94:6b:0f:ec:e4:bf:a6:d3:f5:a1:a4:85:10:ba:41:
48:1a:d2:14:2f:f9:cd:9b:63:15:70:f0:71:15:bc:
47:40:90:5e:52:e4:d0:1c:27:f7:38:8f:44:cd:c1:
d0:48:74:28:b5:9a:e7:1e:bb:0a:c4:7a:87:db:cd:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:50:44:0D:4D:36:48:CF:C9:F6:78:B9:43:9B:5D:1C:34:FA:2F:5C
X509v3 Authority Key Identifier:
keyid:62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:54:54:00:ed:b6:f2:28:06:78:e2:7b:b8:37:03:a4:78:85:
8b:04:f3:b1:97:c1:b9:52:9f:84:9a:a8:44:ef:be:8e:a4:e0:
8c:0c:ae:fb:33:4b:40:43:56:ec:db:e7:cc:6e:25:a6:46:38:
fa:ed:87:cf:d1:75:a7:f6:db:20:fc:7f:0d:b8:13:e7:f4:d0:
5f:51:6c:21:57:7d:74:ac:c2:7b:b2:9b:59:0c:2b:ee:77:b8:
a8:c8:8f:c0:80:57:8d:f0:f8:9c:30:ed:47:fe:bd:80:30:e2:
8b:e1:56:63:0c:2f:42:31:3f:79:cd:15:21:3e:d6:df:8d:bd:
7e:64:01:31:9a:3d:9b:fe:3c:3c:2b:66:8b:cc:23:6f:db:8b:
85:28:db:d6:56:14:68:c3:e9:de:0a:d0:ae:89:2a:08:ed:fc:
b8:be:7f:36:83:1d:4e:70:74:19:38:06:8e:a6:bd:ce:eb:d1:
5e:5d:17:bf:d8:62:41:01:9b:65:f5:cc:24:fd:2d:b9:6b:01:
62:51:99:33:b0:d0:f9:d2:70:60:63:eb:84:84:7e:58:a8:8c:
41:d4:32:1b:a5:c4:40:26:e4:94:57:df:f3:86:e7:f3:0e:61:
7c:d8:be:bf:a1:57:3c:be:f6:3c:d9:51:fe:db:f9:16:7c:7f:
17:0c:26:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:45 2025 by rpki-client