Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: Cg5P8golPsEYvDjew1hdSBXb26lBpBvlFijjVmD/b8k=
Subject key identifier: 3E:9F:50:9B:E1:0F:32:56:F5:90:C2:D5:EF:31:DE:8C:E7:18:54:CE
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 0199FB45B83317FEF9A2176D4D4F8ED16740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 1148
Signing time: Sun 19 Oct 2025 07:01:14 +0000
Manifest this update: Sun 19 Oct 2025 07:01:14 +0000
Manifest next update: Mon 20 Oct 2025 07:01:14 +0000
Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: VOzKF6Au3u+VzSMDEo4i1SaD5tB+ojDaamJi5rbIL7w=)
2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=)
3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b8:33:17:fe:f9:a2:17:6d:4d:4f:8e:d1:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Oct 19 07:01:14 2025 GMT
Not After : Oct 20 07:01:14 2025 GMT
Subject: CN=3e9f509be10f3256f590c2d5ef31de8ce71854ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:08:88:78:c9:c7:17:98:c9:ee:52:cc:5f:
fb:d8:7d:3c:19:e5:3a:06:2f:bd:fb:b6:b7:54:45:
96:9e:70:3d:68:5d:ed:a5:f8:36:db:31:8f:81:37:
a2:b2:1f:21:34:ae:a4:94:42:c2:2d:74:04:7c:c7:
30:d6:a6:40:de:27:8a:cc:7c:c7:1b:4a:1c:8e:92:
00:77:2d:a0:7f:91:a4:0a:77:f0:8f:49:e5:a7:bd:
3c:0b:2a:cf:24:b5:f9:c7:46:0f:3d:68:35:1b:88:
d5:0b:66:14:a7:9b:36:dd:99:67:f1:81:43:f4:c0:
a8:0a:f6:55:53:0b:f3:c5:1b:02:dd:e9:f9:1f:70:
e4:2f:7c:8c:3b:58:6a:97:e5:a3:b1:e2:66:9a:28:
aa:b8:c0:e0:8b:bd:2d:46:70:db:bb:19:b3:a1:eb:
05:d7:4e:2b:25:d6:9c:3e:52:0e:51:81:82:6a:57:
2b:71:1d:c5:b6:5b:82:42:8a:5b:47:f3:5d:f7:3e:
9b:58:8a:a7:76:b1:8f:45:a2:ea:c1:58:62:d3:f7:
50:11:c1:57:29:35:e4:47:c9:49:8b:23:c8:ce:07:
71:91:63:63:43:a1:ae:ec:8d:c8:19:c0:f7:38:6d:
74:b3:7e:a9:b5:a9:52:d7:a6:fa:f5:7d:ab:38:48:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9F:50:9B:E1:0F:32:56:F5:90:C2:D5:EF:31:DE:8C:E7:18:54:CE
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e0:a9:26:b2:5e:a5:82:af:d6:2c:15:e6:a0:4b:bd:64:07:
d4:e0:0f:a1:7b:5f:c3:fb:be:ac:f6:ab:c6:1f:de:79:b3:83:
95:9d:94:d7:29:59:a9:76:7f:cc:19:cc:cb:bf:a7:e3:93:21:
87:5b:d8:ee:6d:38:7c:27:7a:54:b4:15:18:dc:08:e7:d9:49:
f1:55:6d:b8:9f:c1:66:7d:ca:fe:11:a6:45:05:fd:af:1e:93:
33:5e:45:37:c9:2b:4d:bc:8c:52:5b:a1:17:18:86:a0:89:2d:
e4:73:a6:45:dd:37:59:fb:5b:03:48:96:d1:aa:42:0c:a3:5f:
e5:33:91:5c:46:13:90:37:8c:bc:82:a5:46:d9:db:30:11:d9:
fe:c2:d4:c9:04:3f:ed:b5:80:80:f1:65:cd:52:f5:ab:72:85:
12:17:4d:bb:59:ca:1a:4a:4a:d5:4c:69:fc:2b:42:3f:7a:09:
8f:d2:f9:17:ff:af:fd:cc:65:44:59:69:73:d9:36:d3:35:1b:
85:91:c3:21:d6:6e:f7:af:1e:39:bf:71:d5:ba:88:0d:2b:c9:
7c:42:86:ea:6e:65:7c:21:c3:d3:b0:f9:70:22:12:6f:9f:4e:
20:95:28:fa:6b:53:65:d2:c5:02:60:de:57:0e:31:dd:a4:89:
c5:54:b4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:04 2025 by rpki-client