Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: ocWrBNVijYjXaZLNpTOI3mgZ2LP9v6T6zQYg8ZJ77IU=
Subject key identifier: 7D:AC:37:15:DF:3E:0F:84:9C:6D:C1:5B:98:66:C4:F6:74:54:73:6F
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 0199FC8F9F77D98FE323264C81324D632724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 07EF
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: BmDGk94H0WaBcfSgl3g2h61Hwky3xDoiMbwpqPifpA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9f:77:d9:8f:e3:23:26:4c:81:32:4d:63:27:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=7dac3715df3e0f849c6dc15b9866c4f67454736f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:50:63:ba:77:f2:8e:bd:42:ff:93:8f:d1:
b6:f1:5f:4d:1e:85:de:ce:07:43:9c:d5:39:79:39:
3b:08:84:dc:6c:f5:45:ea:4a:71:34:ab:59:0d:23:
29:03:ee:6a:24:fb:ad:cb:c9:ba:53:28:49:1f:30:
70:07:c8:49:82:7c:80:39:56:7f:7f:09:f7:59:e6:
16:a1:75:77:47:de:02:22:bb:86:f5:78:62:d5:d7:
5a:d2:4f:92:df:ff:77:0f:00:7f:b7:77:4d:90:c4:
15:78:59:1c:ab:06:60:da:a8:58:36:20:de:9c:e1:
f3:3d:31:29:7c:43:e3:c3:2c:59:0a:a7:5d:4f:fb:
b6:fc:f8:0b:fa:77:e8:00:00:1f:c1:2e:4d:af:a1:
51:3f:e5:3e:40:94:e7:e6:35:d1:21:ba:28:c9:c7:
bb:97:36:9a:fe:09:8d:4c:0f:1c:7b:19:a1:01:b7:
1e:96:4c:5e:9f:22:d5:dc:75:af:da:1d:45:84:21:
79:d0:9d:35:5c:80:9f:ae:3b:be:33:bc:d5:8e:03:
c4:45:6e:53:0c:04:23:97:77:63:23:be:b1:ef:76:
8d:96:64:02:4c:8c:d1:1b:f0:32:fb:f7:6d:3c:a8:
2d:3a:8b:8b:af:22:20:df:fa:f2:27:5b:4a:86:d0:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:37:15:DF:3E:0F:84:9C:6D:C1:5B:98:66:C4:F6:74:54:73:6F
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c4:fb:ff:97:1e:b1:81:15:67:76:27:ee:d8:29:12:12:f4:
9c:44:bd:a8:2b:e7:16:fb:31:60:63:77:51:3f:f9:52:30:e4:
4d:bb:41:71:de:ca:d7:69:95:d5:ed:c8:01:f1:a4:db:da:57:
ee:4c:fa:d3:a5:fe:fe:d3:70:35:e0:ff:95:37:43:52:17:8e:
36:51:ec:ec:f5:eb:45:7a:83:9d:06:ea:cb:11:dc:ff:1f:d3:
af:7b:4b:7b:70:87:9e:20:93:62:27:1c:f7:b6:fc:db:24:c7:
6f:7a:a7:9c:18:83:2d:d4:11:4a:9d:6d:8b:b4:0e:cb:36:b7:
0b:ec:92:c5:1a:50:ab:6e:3b:62:de:73:3b:e2:1e:00:a9:49:
56:85:73:a9:16:83:ad:89:26:82:f6:ca:3d:3f:e9:7b:ee:52:
08:9c:5c:9a:88:1d:26:70:da:d6:fa:af:ce:0c:42:45:cf:16:
08:13:8b:e0:b8:a9:cc:49:66:92:40:39:af:db:8b:b8:cc:38:
f8:b6:49:a9:50:28:9f:c3:4b:c3:29:bf:28:57:e2:78:f6:36:
28:46:e6:5d:93:ec:3c:c3:c7:c5:09:4b:77:2d:55:e6:42:ac:
67:cf:fd:9e:0d:d3:08:4f:8b:bf:d2:c5:50:87:d6:a0:3c:6a:
36:e9:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:55 2025 by rpki-client