Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
File: YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json)
Hash identifier: q1di1nJ5sLs9yBnjl6wqYBGlMIRoGrsSYxU4lwLpAAg=
Subject key identifier: 19:F7:99:14:05:13:F0:24:B2:FA:27:2A:97:28:07:6D:31:40:F9:55
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial: 0199FDD9CB4A6FB7F8F9CDC6DCCC32534A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
Manifest number: 0FBE
Signing time: Sun 19 Oct 2025 19:02:12 +0000
Manifest this update: Sun 19 Oct 2025 19:02:12 +0000
Manifest next update: Mon 20 Oct 2025 19:02:12 +0000
Files and hashes: 1: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: U/qP9ZLL8BQlMWlIC89TLhDs6RphU+EFNqk3Fp4qa0U=)
2: qx-NGj8MV_Cd9zpPet-1VEa08Ro.roa (hash: cxZbSa6oQLmYFFxeIAfjlhTWw1+qGjLvscb3SdGJg1o=)
3: r2K_C06ic0Dj0a3NFZhhI6ooNvs.roa (hash: bne8Sm5wB0CMu858I+GoE6ZpkxWpdhA80NITFW1Cun8=)
4: yeRaarOsqQL6T8MId8Dw-zjDpyI.roa (hash: PcKi02vr0pDiDVlpa/LbtFTT0UyPuUQNtlWvZyQzOuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:cb:4a:6f:b7:f8:f9:cd:c6:dc:cc:32:53:4a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Validity
Not Before: Oct 19 19:02:12 2025 GMT
Not After : Oct 20 19:02:12 2025 GMT
Subject: CN=19f799140513f024b2fa272a9728076d3140f955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:24:08:72:6d:d8:e0:dc:c0:2c:8b:51:1c:
0f:70:3b:4e:ff:86:2c:84:43:a0:8e:5b:fa:1b:87:
5d:7d:79:9e:48:df:af:c3:b7:6d:2c:6c:1b:09:1b:
a3:d5:b3:cf:4f:22:4b:30:77:d9:ce:ea:48:f0:a3:
b3:52:1e:0c:32:e3:7b:e1:de:3f:17:f5:e3:69:46:
7d:82:49:13:90:62:68:08:be:f5:76:e2:ae:bd:b2:
ba:b4:4b:fe:d7:a9:47:36:b7:79:7a:9a:90:16:d1:
88:9f:43:f9:45:17:91:8b:92:c8:d1:07:3d:30:72:
73:8e:77:99:21:cc:ca:43:da:3b:d9:dd:62:e7:a4:
a9:91:51:70:9d:eb:b3:79:27:41:7f:81:0c:09:fc:
18:0f:a8:7b:d4:a7:e9:d3:f7:d3:d4:8f:b3:7a:c0:
68:a0:ab:86:e9:9f:65:53:16:c7:cd:91:46:a9:59:
8d:dd:12:e5:2b:68:54:3b:e2:ce:7a:f2:b6:77:e5:
d8:35:38:bd:ea:68:58:c5:20:6e:48:fa:97:db:6c:
d7:83:01:9b:a7:2e:0b:24:d8:21:f6:14:28:0d:f1:
83:c0:f6:f3:ec:9c:01:64:04:eb:c5:6d:3b:e3:22:
1c:2f:92:2d:94:bd:bd:d9:f3:06:a0:58:86:2e:da:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:99:14:05:13:F0:24:B2:FA:27:2A:97:28:07:6D:31:40:F9:55
X509v3 Authority Key Identifier:
keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e3:62:4b:cb:fa:f0:bb:4f:7d:0f:99:14:d7:ec:35:3b:43:
b5:be:e7:21:cc:92:6e:03:04:18:79:98:43:c4:fa:e8:e5:7b:
de:2e:9d:7c:1e:c9:5b:f6:96:c5:11:39:91:78:d9:0a:2d:94:
a2:e3:20:a0:a7:11:f8:da:22:f0:bb:cc:e1:30:95:21:aa:66:
03:e1:d1:e7:72:40:45:c1:2b:d5:12:f4:e6:ca:c5:d9:50:69:
78:83:d9:80:d8:05:58:07:2f:5f:a1:4c:42:db:0b:25:c4:19:
d5:fb:e7:7d:a6:3a:91:19:d3:d1:76:32:8e:43:7b:83:e2:32:
06:b9:8f:c1:9f:0c:5d:c5:6e:f5:0a:9a:88:db:42:15:eb:1e:
66:d2:13:62:8e:45:f8:0c:48:29:82:ee:44:0e:1d:bd:9c:8c:
53:91:b4:19:f1:f0:4d:82:10:bf:c5:5a:fd:83:fd:fe:07:9b:
1b:52:97:f4:d0:7a:99:32:fe:fb:69:2e:e6:01:6b:9c:c1:e4:
3f:77:4e:0d:6c:a2:af:98:97:b7:ea:e2:26:77:7c:ff:b9:a0:
b6:82:74:d7:64:a4:a3:79:23:e4:4a:4e:33:13:50:72:e1:80:
6a:4d:d2:56:4e:a5:ce:52:4b:b0:8e:2d:79:73:89:b5:4a:2f:
03:68:a6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:55 2025 by rpki-client