Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: 4n+ZP3Ma6v2hpZiB8Nhyy7H8JEQu8DuroHAH94mJscc=
Subject key identifier: 8E:68:69:61:99:F9:70:D8:D7:16:78:7C:30:44:4D:57:A7:1F:94:27
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 0199FF5960F3A8FCF6ECAB8E24B2E38BAAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 100A
Signing time: Mon 20 Oct 2025 02:01:11 +0000
Manifest this update: Mon 20 Oct 2025 02:01:11 +0000
Manifest next update: Tue 21 Oct 2025 02:01:11 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: g3ByLMCkm8Toa0icWmmazprDjoV8KZE7ehI76wJSsXU=)
2: gqHU5wrARNT7BxKe3BSk4XNORdM.roa (hash: uD22dYfbtURUQN6zPqLnmvBkI8fmrnMLZJG7fTTS2Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:60:f3:a8:fc:f6:ec:ab:8e:24:b2:e3:8b:aa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Oct 20 02:01:11 2025 GMT
Not After : Oct 21 02:01:11 2025 GMT
Subject: CN=8e68696199f970d8d716787c30444d57a71f9427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:6e:4e:ef:a8:ec:85:14:4b:49:51:f6:f7:
28:f6:05:92:57:2b:86:c5:9a:61:c8:fd:83:0b:95:
e6:f5:45:5d:2b:44:1b:0a:19:ec:d3:84:fa:8a:cd:
41:e7:fb:8f:bf:53:de:29:5a:33:15:f1:bf:ee:5c:
65:64:6c:06:ac:dd:b2:9c:bc:6f:ed:ce:76:25:f8:
ed:9b:3c:4b:cf:86:5c:69:a3:b4:ab:e9:f9:94:1e:
64:74:96:d7:f4:87:9d:6d:49:97:89:04:81:6d:0e:
d9:b2:74:a0:d0:75:4b:4a:0b:04:c9:a5:c5:ee:41:
b0:5d:6b:47:26:d3:1e:9e:6e:50:b8:89:76:25:5a:
b1:f1:dc:a8:c5:34:ed:4a:5d:f0:99:aa:4a:3a:d5:
28:89:3d:71:0b:3a:32:a0:4e:0f:5c:69:7d:43:38:
fc:ef:cd:1c:a4:5d:13:4b:1a:8b:9b:92:4a:34:70:
03:76:41:79:66:95:42:35:8f:f9:ab:79:5c:67:bc:
de:af:dc:d5:ad:71:94:dd:8e:be:62:14:d8:57:b3:
55:ac:1d:f2:46:19:42:7c:10:90:e2:02:26:86:bb:
af:15:f9:41:fe:72:63:ad:72:93:46:b0:0b:c7:fe:
a3:2e:f7:c4:3b:62:87:89:7e:15:e2:ac:66:58:c1:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:68:69:61:99:F9:70:D8:D7:16:78:7C:30:44:4D:57:A7:1F:94:27
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a4:d4:9b:28:6c:80:71:19:48:a5:c0:fe:81:42:88:b7:eb:
96:1d:8e:e7:44:da:66:00:43:d3:c4:e1:f6:db:59:5a:3f:f8:
9d:25:27:81:75:d3:cb:ce:08:57:bd:3f:90:76:63:02:2c:1b:
e4:6c:67:e1:74:ab:a8:91:24:c5:71:e8:24:32:40:41:89:f5:
72:e8:5f:58:36:13:09:e0:40:49:0e:cb:5a:46:72:7e:db:15:
77:4b:f6:c5:18:6f:33:9f:48:42:52:f5:3e:9a:1c:97:0d:ce:
06:21:14:e7:c2:a3:10:d9:a5:65:44:20:dd:a2:34:2e:bb:c2:
82:90:c9:30:03:c3:6a:fe:f8:4d:d5:d9:58:ae:7a:ed:30:35:
88:02:1f:d6:2e:5c:61:0a:81:d7:a1:6d:55:d8:80:41:64:cd:
a9:95:ca:85:a9:db:e4:29:81:e9:0e:87:8a:51:89:d5:d6:e6:
f5:fd:ee:25:20:f5:b8:ca:c1:f9:db:d3:3d:fb:32:59:6f:5e:
1a:9b:a6:88:ba:bf:24:be:8c:36:59:f0:9e:17:83:de:d0:7f:
dc:7a:b9:31:8a:3d:53:c2:0b:b2:56:0b:f3:af:7c:4d:3c:ca:
69:1a:5b:7c:01:c7:44:06:aa:e4:f5:bf:77:4d:82:f7:f7:0b:
de:72:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:39:26 2025 by rpki-client