Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: 3+ryO9LQiW2KctyAGakCe2YU+NM7ZtoRoDklxipyjEY=
Subject key identifier: 2B:F9:CD:B9:1A:45:27:7F:5C:EB:46:40:AA:D8:3B:ED:68:8F:71:9F
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 0199FDD8C99948F5D372D0BB0FD324FE7951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 12D7
Signing time: Sun 19 Oct 2025 19:01:06 +0000
Manifest this update: Sun 19 Oct 2025 19:01:06 +0000
Manifest next update: Mon 20 Oct 2025 19:01:06 +0000
Files and hashes: 1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=)
2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=)
3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: SMKf75X2izQA5lnGMXQZw1OSwUHeN8nF/k8thtjShVc=)
4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c9:99:48:f5:d3:72:d0:bb:0f:d3:24:fe:79:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Oct 19 19:01:06 2025 GMT
Not After : Oct 20 19:01:06 2025 GMT
Subject: CN=2bf9cdb91a45277f5ceb4640aad83bed688f719f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:1d:85:a3:fd:8e:b3:a9:24:82:20:7c:31:
da:bd:d5:8f:b4:a3:8b:ed:45:1d:0c:07:65:8a:5a:
4b:18:01:d2:41:cd:e4:68:08:94:4e:71:f7:59:bb:
87:78:20:5c:a7:51:17:1a:bc:e1:76:91:c1:e0:1c:
1c:55:84:43:bb:c7:26:63:44:96:e0:a2:c2:8b:2f:
b4:88:db:00:98:90:e5:d6:52:6a:49:ae:3b:e5:1d:
ee:cb:b8:e5:ed:f4:10:da:43:7d:46:7e:0e:78:42:
6d:72:9e:8f:c1:f2:39:14:96:b3:69:70:79:aa:b3:
6f:9a:e2:56:6d:71:b4:9c:e6:8e:5b:f5:ef:3a:c1:
c3:f3:99:8e:31:4d:6f:07:5d:c0:d4:57:74:fe:18:
60:83:69:fa:7a:71:3c:1f:5c:cf:70:26:ea:47:05:
61:f7:83:7b:14:36:38:18:0c:b7:86:b0:63:66:6b:
d7:1f:4d:86:b9:7d:c9:65:67:ee:9b:cd:20:f9:8b:
00:9d:da:68:d6:d8:f5:fc:24:d5:c7:d3:ca:cb:c5:
86:09:44:48:c6:ae:8f:e6:ec:c4:45:ac:37:4e:cd:
fc:dc:14:e2:31:d6:a9:05:79:5e:fd:17:db:f7:89:
83:ae:5a:6f:9d:f8:2f:ca:7d:42:dd:a0:8e:b7:7b:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F9:CD:B9:1A:45:27:7F:5C:EB:46:40:AA:D8:3B:ED:68:8F:71:9F
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cd:d0:7f:ed:d8:9d:07:e3:57:d1:dd:7e:d4:84:67:aa:13:
d9:1f:59:ef:38:09:7d:94:1b:35:4d:8f:6d:01:5c:ec:a3:f9:
63:69:d5:d3:b1:21:9e:5b:59:85:01:c2:15:f2:55:a4:ff:02:
86:bd:35:2c:aa:51:5d:b0:d7:15:f6:31:6c:77:be:53:1e:24:
74:76:72:0f:67:3e:7a:76:0a:37:34:bb:ed:c6:99:3a:92:fa:
a5:ce:12:9b:f3:e6:1a:32:e3:92:57:08:b8:50:e1:51:91:1a:
15:d2:62:05:1c:d0:ce:13:81:17:e9:45:e3:9a:cf:e6:9b:71:
3b:01:36:b9:75:9f:ee:4d:7b:62:cc:2a:82:f3:b5:73:ec:bb:
6b:48:6a:02:43:37:12:d8:65:91:53:76:c4:db:f2:c8:37:e4:
d2:c4:3c:23:10:00:d1:f7:c0:03:9f:9b:3a:7b:36:30:11:bb:
fb:ed:73:38:02:23:d4:fa:ef:8e:63:47:13:b1:71:4f:ca:3b:
13:6a:98:41:b4:7c:90:f5:9a:6f:d5:88:bf:24:16:34:3f:23:
1f:95:95:6b:f1:bc:66:db:1f:c0:f3:b2:72:67:fb:e4:ff:fc:
0a:e5:ef:80:d2:30:cb:ab:17:98:01:d9:e2:e8:da:b6:b1:1c:
d6:9c:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:12 2025 by rpki-client