Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier: WsLzIkZB3z0cgdLUIeYcsj+gpz1G27RVnL7itvm3DDw=
Subject key identifier: D0:52:98:61:27:78:2D:0F:DC:94:19:AD:E7:44:30:BD:67:C3:19:4C
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 0199FE7DD5D4DF08D6016EC24F9197D77243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number: 11AB
Signing time: Sun 19 Oct 2025 22:01:23 +0000
Manifest this update: Sun 19 Oct 2025 22:01:23 +0000
Manifest next update: Mon 20 Oct 2025 22:01:23 +0000
Files and hashes: 1: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: Gm4aJQjC6TKAe+os9/ayfwk8jrEJ/UFT+8msUsacBF4=)
2: rs5a3rW2E-ThNoq2t8O4hGc6590.roa (hash: YMDJkD8/KCkGFvxJ1si+V/dSXJflYLlhdawvNihd//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d5:d4:df:08:d6:01:6e:c2:4f:91:97:d7:72:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: Oct 19 22:01:23 2025 GMT
Not After : Oct 20 22:01:23 2025 GMT
Subject: CN=d052986127782d0fdc9419ade74430bd67c3194c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:64:c8:b2:d4:af:5b:63:63:99:c8:2e:cb:
35:8c:55:bb:91:40:39:d4:8e:38:5d:1b:f2:92:19:
10:91:d4:cf:72:0c:f9:77:71:ba:4e:46:ba:a7:5a:
f9:f3:3b:8e:fa:02:0f:84:d5:9f:a3:c7:b1:44:7b:
7a:53:f7:97:12:53:c9:23:8d:ba:74:ca:69:25:05:
1b:eb:09:08:4d:da:d2:1c:a4:e3:a0:4a:e0:0c:94:
4a:fe:a7:32:bd:7f:21:5e:76:80:31:6d:3a:ed:09:
79:e2:cb:66:15:8a:6d:90:c5:01:c9:fb:6e:00:5b:
8f:05:00:ea:9d:84:50:86:39:e9:cc:e9:e8:63:77:
aa:d4:90:eb:0f:a0:5b:ab:f1:69:40:a3:ba:d9:ba:
bc:62:f2:2e:23:c4:61:d0:8a:db:76:80:6e:71:12:
02:15:03:4e:2e:b8:08:4f:ce:f1:dd:a2:51:05:7d:
23:c4:67:59:0b:3c:30:5b:e8:ef:78:18:86:6b:65:
c8:dc:ef:5c:25:3f:8d:34:91:e7:89:6d:96:f0:a2:
d3:e6:e3:09:cd:20:41:50:cd:22:57:98:51:ba:98:
53:cc:96:55:ee:ff:d8:8a:c0:1c:d2:0d:a1:f9:7b:
3d:7f:ec:c2:ec:c1:4e:87:84:a3:d0:b5:c3:2d:6b:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:52:98:61:27:78:2D:0F:DC:94:19:AD:E7:44:30:BD:67:C3:19:4C
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:48:b3:10:58:7c:ca:c7:17:76:69:8d:0d:6a:4c:2d:5a:c2:
da:a9:f8:12:d1:34:e2:3b:ae:90:e1:b9:9e:9e:8a:3f:5e:7e:
c5:6e:1b:ac:ab:9e:d8:90:f3:79:18:6f:f9:42:fc:c3:2b:51:
b4:7f:d6:1e:45:d7:ac:86:75:2e:a6:ae:9b:59:74:31:a2:94:
b8:3b:1f:d4:ff:10:7b:37:b2:32:b6:9a:cc:1c:21:c6:96:54:
27:e3:24:a5:de:4c:d8:25:9d:65:7d:9e:9a:17:35:d9:2e:e3:
3b:ad:52:0f:f7:1f:9a:67:74:93:40:70:49:94:55:c4:5e:70:
69:4d:bf:29:6e:1d:02:de:59:66:b2:8a:cb:23:5b:11:47:00:
96:8f:f5:1b:36:5e:c5:4e:aa:0e:05:df:64:e6:79:3a:f6:8d:
4c:e5:00:53:43:5b:ca:3f:19:65:0e:32:de:da:44:61:dd:39:
5a:6c:ff:5c:af:3f:d2:b7:9c:2d:73:74:58:32:63:1e:12:30:
3b:08:48:39:c5:3a:1e:d6:a8:cb:1a:31:6a:95:34:51:a4:60:
90:24:0e:29:62:73:07:f3:9e:60:9e:52:35:50:0a:86:38:83:
07:c3:4c:b8:de:66:0b:09:96:b6:96:9f:f4:f4:dc:55:69:ba:
d6:27:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:36:02 2025 by rpki-client