Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: orfwWfpyZV2gvLINL/kr7IXWUZ5a001CTl7NKZTYRmo=
Subject key identifier: 9B:FA:87:27:90:84:C5:7C:38:E3:26:32:12:C5:65:05:38:33:18:51
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 0199FCFD3D8EB9275C0844FA74385B63A226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 11A6
Signing time: Sun 19 Oct 2025 15:01:18 +0000
Manifest this update: Sun 19 Oct 2025 15:01:18 +0000
Manifest next update: Mon 20 Oct 2025 15:01:18 +0000
Files and hashes: 1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: MGdpSjE9eGzNeSf7VAN3mDy1krJZFtdxmr1hTzd3GtY=)
2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:3d:8e:b9:27:5c:08:44:fa:74:38:5b:63:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Oct 19 15:01:18 2025 GMT
Not After : Oct 20 15:01:18 2025 GMT
Subject: CN=9bfa87279084c57c38e3263212c5650538331851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:24:ec:02:04:0b:c2:c7:f0:a8:ec:56:62:
2b:f7:4f:6b:5c:92:b1:34:7a:1b:41:50:b8:83:8a:
fe:ab:d6:08:c9:0a:c1:a1:d1:19:00:d7:fc:0a:a0:
e9:8b:10:1c:d0:01:37:e2:5c:0d:69:ef:1c:2f:aa:
b5:8d:4a:ab:ad:72:02:ec:b3:cc:a4:83:22:79:43:
ba:4b:68:0d:c9:9e:e2:b8:51:13:8e:89:71:ff:0f:
20:5c:36:8f:be:f9:43:6f:6f:d6:6d:d1:90:34:96:
82:1a:30:b3:87:bc:f9:7e:52:bd:a0:41:0a:01:b8:
8c:a5:03:7b:3a:b7:a3:15:c7:59:07:3e:c3:6f:ff:
8b:7f:7d:f6:0f:04:f2:7e:1b:df:6b:a6:7d:08:8e:
50:54:41:2c:b5:74:d2:f6:9e:1b:63:66:63:93:fd:
5f:ee:3a:eb:6e:6d:cc:1f:42:bf:6e:99:07:18:a0:
35:f2:48:fa:bd:3c:6c:7a:53:b0:fa:92:39:6b:e2:
84:d2:44:6d:4f:26:b5:a0:ea:63:9b:57:9a:cd:3c:
bc:b7:68:f5:a7:64:94:21:47:61:7c:b1:72:d2:1f:
72:6e:86:bf:a6:e9:0d:83:6b:9e:e2:15:d7:3b:3c:
c3:8b:af:22:61:70:71:78:bf:47:41:fd:a0:e9:af:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:87:27:90:84:C5:7C:38:E3:26:32:12:C5:65:05:38:33:18:51
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6a:ea:4c:5a:79:db:e7:b3:25:bf:20:1a:4a:68:3d:26:d3:
01:2b:2a:30:d2:7e:fc:03:cf:a7:bd:31:70:d0:8e:8a:dd:69:
ef:db:74:97:9f:92:ba:07:f5:1b:c9:8e:2c:d5:9d:f3:08:47:
6d:2b:76:8e:63:0a:c3:87:d3:89:b3:a2:a8:f2:b2:ac:81:38:
33:4f:6b:21:5e:76:f4:40:f7:65:86:e4:93:a2:77:55:ec:32:
d0:0c:12:37:1f:a4:98:e7:33:0a:ff:da:69:21:ea:c9:99:92:
be:f4:38:34:3b:3b:d8:63:a3:ce:ae:23:20:7c:c2:3f:e6:b5:
aa:db:4f:0a:1a:ae:69:a6:c5:f9:ef:69:90:ac:99:01:de:d2:
d3:d5:ae:7d:8e:34:6d:d2:2a:a7:a4:1a:f8:3a:be:7d:7e:e1:
65:c9:fb:fa:e5:44:f1:52:72:42:9e:37:e6:21:47:10:1e:d4:
90:70:bc:ae:8a:b6:b1:53:1e:99:41:97:19:8e:34:68:71:f9:
2c:12:7b:fe:2a:2a:7c:06:fb:c2:d8:be:67:fb:e1:28:85:17:
df:d3:d1:a0:c2:3f:69:c7:93:2a:07:33:dc:85:08:9e:e5:33:
04:c9:41:10:7a:70:43:71:9a:0b:0c:43:03:03:44:59:54:50:
3b:4d:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:59 2025 by rpki-client