
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File: YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier: uZsx3r27rwPXTJOWWHxY/MC68Vh69SOj0s+E8P0x3ao=
Subject key identifier: 85:52:6D:A4:BE:71:AE:DE:0C:45:B7:CE:F1:08:B6:9B:FD:EF:A9:AD
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 0199FEB4F0B54B084C4E05ADF60ACAF227CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number: 0DF6
Signing time: Sun 19 Oct 2025 23:01:34 +0000
Manifest this update: Sun 19 Oct 2025 23:01:34 +0000
Manifest next update: Mon 20 Oct 2025 23:01:34 +0000
Files and hashes: 1: BbO3Y81u57rZF7WlM500MsuZpRM.roa (hash: ENegZhckEyjrMTUEgK0PeHY3+6b9WA+KNwr6cWbkGV8=)
2: VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa (hash: syajYrJmIJZ/O9q2a3nZ7jEdzvbYM5uKAi7nB9k82iw=)
3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: s00Om6V7BPFPJU8Z5fjE2YdpByzULuuVFCYbEe1gk1A=)
4: _mYolmt2fF0wabxHp1kAcOpFjJQ.roa (hash: Ni2pHhwSkaVczL8tsRRH+ZM9PBph4eSrgcYZ18OoRUY=)
5: ucZk7RPUTaIeSxLkQGWFeSNWVec.roa (hash: 5rWJbfTjArOhmwmwJF8k3Fgre3TIPFtEAx1ngBb1v5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:f0:b5:4b:08:4c:4e:05:ad:f6:0a:ca:f2:27:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Oct 19 23:01:34 2025 GMT
Not After : Oct 20 23:01:34 2025 GMT
Subject: CN=85526da4be71aede0c45b7cef108b69bfdefa9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:78:9c:0f:44:d0:41:51:de:78:a4:d8:09:
91:87:39:27:97:0a:8e:6a:9b:c7:18:0f:6e:36:f6:
5f:3a:fb:60:6d:17:d8:b0:48:73:48:09:e3:f6:a4:
bd:44:aa:3d:45:eb:40:91:c9:a4:2a:ca:c1:22:2e:
aa:0e:33:ca:a9:31:70:6d:0d:95:03:7d:55:50:0f:
84:0b:ca:91:fe:08:f6:d0:44:d3:62:9e:dc:22:5f:
b2:af:f3:a9:c7:a6:30:3c:48:67:9b:c2:9d:31:68:
b0:1b:f4:3d:23:f6:e7:39:4c:49:c9:16:4a:32:e7:
6f:23:15:e6:8b:0c:f5:4f:72:7e:ee:63:3c:f7:35:
24:ac:e5:06:5d:09:1b:f5:05:a3:b0:bd:5c:42:52:
dc:ca:0c:95:c0:1c:39:ec:bb:03:85:a7:86:42:34:
4a:cd:38:94:de:95:e3:85:eb:60:d8:69:1d:83:b1:
79:74:66:02:06:11:fc:6e:4a:7a:f2:e7:29:9c:49:
00:c7:08:5a:6b:1e:9d:83:97:fa:15:3c:7b:a7:b4:
77:35:e3:c6:10:11:ca:dd:75:ef:84:e0:7e:b3:21:
aa:de:6d:74:e6:62:ed:3e:3f:47:8e:2b:19:fa:ee:
ca:51:d9:9f:8d:0c:26:5c:12:b8:9d:4d:b2:7f:88:
04:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:52:6D:A4:BE:71:AE:DE:0C:45:B7:CE:F1:08:B6:9B:FD:EF:A9:AD
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ea:b8:4d:57:ac:67:7f:e8:52:c9:df:5d:c5:ce:83:d6:3d:
48:46:15:aa:1c:95:0c:76:6e:51:43:62:6d:49:42:30:5b:9c:
1e:b9:8f:6e:25:9b:bf:b1:d6:34:e1:ba:0f:35:39:67:5a:06:
57:ff:20:6d:53:ba:08:b1:e8:76:a3:56:d6:6b:82:3a:3d:47:
74:a0:37:c4:0b:5d:4c:af:9a:84:40:a0:6c:9e:ea:80:f2:aa:
d3:f6:b4:97:4d:62:fc:cc:69:e3:05:ef:de:b7:76:14:d4:bb:
d5:21:b2:11:c9:6b:1d:b8:33:d3:23:9a:33:d1:ae:f0:04:e7:
a0:04:ad:58:9c:ce:4e:28:93:b9:76:9f:10:b3:74:e6:82:2b:
2d:c7:a5:83:fc:6f:30:81:7b:0a:6c:f7:f4:0f:10:e3:23:c8:
b8:60:75:9f:66:9c:a6:8b:b0:56:00:46:75:8f:b1:ba:0e:1e:
b1:0c:d6:9c:3d:84:f3:0f:7c:99:56:35:02:bf:a2:41:fa:23:
cb:59:2e:2b:49:fe:35:35:b8:6f:98:fa:8f:a6:12:e5:61:e9:
e4:74:ed:8d:6e:3c:27:b7:ed:57:b8:4f:65:ea:c7:5f:e0:77:
20:c8:b1:c7:c5:94:06:46:ce:84:2b:4a:6d:34:41:23:2a:7b:
1a:41:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:11:19 2025 by rpki-client