Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: jGhsAYqZhBHg2f68jKdmW5mCTCML0TgHBtotcpeXry8=
Subject key identifier: 5E:D8:D8:3A:A0:07:52:22:55:D1:58:B1:DD:CE:31:9A:34:4D:0E:CA
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 0199FB7CC638C70255FCE542AF41DCD62BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0B8B
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: ru8wLkIDw365wqrC7SivDCwDooTKuc9XX+6fUfd0mok=)
2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c6:38:c7:02:55:fc:e5:42:af:41:dc:d6:2b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=5ed8d83aa007522255d158b1ddce319a344d0eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8f:78:f1:3f:23:9a:15:7c:87:19:6d:ee:90:
51:81:b2:44:0c:d0:62:c8:c5:ac:8d:4d:f9:99:98:
fe:52:56:72:f7:c0:79:87:6f:29:79:2d:41:0c:1f:
8a:76:cd:eb:52:9e:d5:6a:10:70:e6:56:f4:99:ec:
8e:33:ea:b3:ee:59:9f:b7:ee:5e:5d:69:54:c1:2c:
75:81:83:07:76:b4:5f:61:d8:be:58:49:d6:e7:5e:
9f:7f:f3:2a:4f:a1:da:b8:9c:13:34:69:fa:4b:cd:
e9:9f:88:a6:75:58:c7:af:2e:fa:ea:ad:47:70:cd:
8a:49:85:b7:a1:a1:70:d5:b8:e4:e6:59:20:30:11:
8e:e1:1c:b2:50:3c:be:e9:f5:45:89:46:3d:a6:65:
ab:35:93:d1:6f:f8:ec:40:40:84:54:eb:98:61:b1:
ab:da:c0:09:39:17:5b:62:d2:6d:1a:a7:3e:81:26:
86:93:e4:4f:73:6c:e9:fb:59:b1:5b:1d:2d:0f:bc:
59:37:0b:dd:1f:3a:07:28:0a:47:30:9b:94:17:e6:
9f:8e:d9:23:c6:55:43:37:cc:2f:8b:7d:86:af:d8:
98:fb:7c:0d:26:e5:8c:36:3d:5c:85:e8:fa:3f:0b:
bb:5c:3a:a1:92:61:b8:ec:52:c9:d7:88:5b:ed:56:
8a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:D8:3A:A0:07:52:22:55:D1:58:B1:DD:CE:31:9A:34:4D:0E:CA
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8c:6f:13:d5:75:73:af:44:d3:b3:db:48:fb:ac:cc:32:84:
9d:50:58:1b:94:5f:cf:ae:ab:54:56:25:14:3b:63:0e:25:63:
d8:39:0b:d6:ba:42:5a:f6:91:b0:e9:d0:53:fa:7f:3f:e5:b9:
a5:0e:12:d7:a0:10:63:b2:dc:ce:64:10:f9:8d:b5:8b:ce:4b:
00:d1:48:89:9a:95:c8:2b:20:45:e9:7e:69:2a:3b:c1:e6:67:
6b:51:2f:d0:f3:27:1e:fe:91:b7:1c:4c:0f:e1:b6:39:26:29:
a3:12:1e:d7:06:9a:f6:fd:82:9e:07:09:b2:bb:a1:7c:32:6b:
2c:77:20:37:f9:fb:59:0e:ef:11:90:12:cc:38:e3:47:72:1d:
d5:03:fe:db:30:85:49:cd:81:84:40:b7:75:9f:b6:1e:28:48:
e4:1a:01:ba:b9:26:bb:44:70:43:2c:2c:86:d1:37:c7:0f:98:
4e:f6:e5:ac:db:3e:a0:07:06:74:bf:05:bd:70:f0:d3:69:56:
0b:f6:b4:dd:44:61:c8:15:c8:be:17:5e:f0:c7:46:4c:96:79:
6f:32:ad:97:f1:79:2b:c3:31:37:a5:14:60:d0:da:de:cd:05:
02:2e:1d:56:1e:c2:e3:41:89:0b:a0:fa:d6:f8:8f:a9:74:55:
d5:03:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:01 2025 by rpki-client