Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: pDBbv7HWNHoxkRQdF2nWevh+Hz4us30/DRujnNsmoz4=
Subject key identifier: 48:6F:0D:72:B9:C4:92:BB:30:31:B3:FF:B4:10:EE:B3:E1:B9:F5:22
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 019A00A32460E06E4BA01F82D2B5F79C57B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 074B
Signing time: Mon 20 Oct 2025 08:01:22 +0000
Manifest this update: Mon 20 Oct 2025 08:01:22 +0000
Manifest next update: Tue 21 Oct 2025 08:01:22 +0000
Files and hashes: 1: A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa (hash: P87warA/sxgPpSILGT3rzWqyvJsB40eA4IbxWKqMVaU=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: PkfJn6K+ChapzfM97DXLJL4TOLkkvnaslAmmuJdpcg8=)
3: fPNzH31qX0DZ8V4rij7Xo2sRGO8.roa (hash: fPCz6t8saFe/YCV6Ne6vHfZKosVB2msyYYqQELy/A2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:24:60:e0:6e:4b:a0:1f:82:d2:b5:f7:9c:57:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Oct 20 08:01:22 2025 GMT
Not After : Oct 21 08:01:22 2025 GMT
Subject: CN=486f0d72b9c492bb3031b3ffb410eeb3e1b9f522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:4f:ae:29:c3:f2:04:e5:8c:08:44:af:91:
f2:e4:02:00:c2:61:8b:25:1a:fc:a6:ad:b8:e5:e1:
53:69:31:f0:25:ed:09:c1:16:4c:f7:68:8d:05:18:
1e:0e:cf:0b:af:93:fd:7f:d0:0a:c3:d2:37:9e:87:
c5:14:53:b1:d5:77:5e:7f:55:14:c5:70:44:32:31:
f8:e5:aa:b0:84:08:14:eb:2e:7d:a6:f7:86:a4:68:
54:08:08:e9:e6:59:df:3e:41:4c:83:b3:9d:89:64:
cd:90:d3:00:2d:43:4e:cb:89:88:f3:a5:df:95:e5:
40:ff:cb:88:fe:e0:62:01:4c:14:f5:99:e0:3d:9f:
43:09:dc:ec:51:5b:13:3c:36:db:20:58:50:70:aa:
0e:c5:20:1d:60:15:5f:9c:4a:f9:44:5b:bd:e2:43:
19:c3:f8:55:b8:fc:b2:ea:86:4d:60:19:e9:f0:45:
cb:48:4c:aa:44:17:c3:a2:bd:a0:30:7d:a9:98:c3:
51:f4:87:b4:73:ac:63:86:fa:f2:99:0b:7a:79:67:
da:15:f5:6b:0d:5b:60:ea:e6:e2:3b:ad:6c:9f:4c:
42:ce:dc:d5:1e:5f:9e:ae:73:5d:37:ea:b7:82:87:
d8:af:09:f4:38:62:92:d6:fd:14:56:89:70:62:9a:
08:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6F:0D:72:B9:C4:92:BB:30:31:B3:FF:B4:10:EE:B3:E1:B9:F5:22
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c6:3b:3f:a7:a4:21:9c:e8:47:c0:e2:88:80:b8:84:4c:f9:
22:32:34:f0:8e:a4:ec:5a:d5:bd:3e:34:67:24:ed:bf:5e:60:
ff:4f:51:cd:89:a1:f0:9a:41:8d:00:50:c7:d8:76:ef:cd:44:
a5:3f:f8:f2:d4:3e:d9:3a:7e:df:0d:1a:5d:05:c5:e0:35:a2:
59:1b:7e:59:b3:0d:c2:63:87:af:81:8e:9a:07:5d:c1:8e:80:
1b:60:83:8c:bd:23:03:f6:0d:14:93:36:75:8b:da:ee:15:b4:
33:40:70:3a:d3:41:68:a4:73:a0:a8:fa:38:e3:c8:66:48:99:
e1:ad:0d:b5:92:35:13:a4:25:7f:cf:49:5d:7b:54:6f:19:18:
ed:4e:50:66:38:70:3a:87:89:56:73:20:d5:ca:50:e2:4b:4d:
f4:49:0f:9d:93:e3:09:cd:e3:6e:7f:7c:bb:cb:21:7f:05:91:
9a:6b:d6:99:b8:2f:1b:0a:b0:66:44:20:8f:b9:e3:ad:a7:f6:
fd:b2:9a:e1:4b:55:35:21:94:f1:48:eb:57:24:b9:cc:1f:6c:
07:e1:80:23:83:05:93:c8:ae:8a:70:6e:29:8c:1a:6a:60:89:
54:3c:f1:16:f4:82:f7:92:e7:3a:5f:94:0b:a4:1c:f2:4f:f1:
d1:c3:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:16 2025 by rpki-client