Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier: BP7g6HBdoXVLihUbCIN+6Vmhvht0k+X76mepbX37YaM=
Subject key identifier: A4:8F:2C:06:B2:55:3F:CB:1F:91:A0:64:5B:66:52:B9:9B:6A:4C:5B
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 0199FDD8D70D9C539F5BCAA73ECE2E43413F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number: 0B08
Signing time: Sun 19 Oct 2025 19:01:10 +0000
Manifest this update: Sun 19 Oct 2025 19:01:10 +0000
Manifest next update: Mon 20 Oct 2025 19:01:10 +0000
Files and hashes: 1: SiWRZkKpgde5atWHqH4e8qB6Tgc.roa (hash: iSQoSjNloOyOq1kG8c4T/IKGd9ldR/sWYpzULfuNsNw=)
2: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: 4MDa2gptxCASkUizLN78S9w/5L6njVVSV5rKirZw8Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d7:0d:9c:53:9f:5b:ca:a7:3e:ce:2e:43:41:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Oct 19 19:01:10 2025 GMT
Not After : Oct 20 19:01:10 2025 GMT
Subject: CN=a48f2c06b2553fcb1f91a0645b6652b99b6a4c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:93:a5:15:6e:9c:c8:c5:cf:13:74:0a:5f:
05:e9:09:ae:1a:ec:4b:cc:05:9e:a8:6f:37:39:47:
c9:3c:2a:de:59:c2:98:14:63:10:1f:51:16:18:7e:
70:e0:5f:60:d6:96:07:8d:aa:7a:c0:f7:c2:88:58:
aa:b9:38:70:77:15:0a:b1:1e:e0:de:5c:fe:15:bf:
ed:58:a8:5e:c6:1d:0a:52:11:c1:b8:9a:0e:60:22:
0e:c9:bf:5b:d7:55:9f:20:59:86:80:01:39:d3:59:
76:04:b1:73:8c:6a:dd:b3:8f:d3:84:9c:e6:7a:82:
6e:63:f2:c6:70:46:f1:d5:5d:9c:a3:85:77:c1:55:
94:7a:13:ed:66:5a:02:9c:64:46:af:d9:8a:22:5e:
ee:6d:ca:d5:f6:e0:bb:66:89:fb:ae:d0:1c:88:ca:
a4:4a:ad:a2:fc:30:09:c5:f0:d3:30:c2:2d:1b:fb:
d1:36:29:66:86:ce:4b:ad:43:49:5d:07:c3:f8:24:
b2:9c:96:ce:eb:e5:c9:c0:a3:9a:97:58:5a:7a:20:
bf:4d:20:cc:e0:f5:54:65:91:c0:6f:fd:85:3b:ad:
de:1e:2d:be:99:8c:c8:8f:b1:4b:74:7c:5f:24:8c:
43:22:0f:c5:f6:f5:48:ae:56:f1:c2:5e:02:1e:c9:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8F:2C:06:B2:55:3F:CB:1F:91:A0:64:5B:66:52:B9:9B:6A:4C:5B
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:5c:3b:1b:9f:83:16:5b:55:f4:70:9a:06:18:4f:e1:fd:bc:
37:26:31:32:05:c1:b6:a2:14:fd:35:86:4e:4b:8d:a1:64:51:
25:b1:a6:35:a3:bb:2a:28:d2:80:c5:b6:11:00:ec:87:95:41:
a5:1f:3a:76:94:e6:b2:9a:27:fb:79:82:d9:f8:0f:e6:ac:f5:
2c:c6:f7:da:71:f9:30:79:41:d3:3d:d3:0b:f3:3a:af:30:9f:
57:14:74:94:6f:97:a3:6b:2a:03:6b:dc:4e:38:94:35:94:5d:
d1:0d:31:1d:ae:49:48:1d:f4:fc:2c:84:27:c9:4d:f0:e4:c0:
d6:d8:f8:f6:d2:c0:26:e7:eb:87:be:2c:f7:8b:33:33:87:f1:
43:04:13:00:02:1b:42:cc:33:fa:94:69:72:7d:29:33:c1:91:
39:2b:3d:ca:e6:ca:d4:01:54:08:e0:29:2c:a8:4f:85:71:ac:
74:4a:e5:79:91:c8:cc:13:1e:f7:42:d5:53:8d:d5:d0:dc:17:
63:d2:24:c5:13:40:d7:1f:aa:36:33:a7:89:ba:74:8d:89:f8:
ec:43:a3:f3:33:51:ec:18:45:2a:20:8c:2c:8d:19:27:df:70:
79:8f:13:bb:cd:87:1d:77:d3:3b:72:cb:48:c3:81:7f:3f:1f:
fa:94:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:36 2025 by rpki-client