Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: FvKcPKV4o9le7r7PXCK8MDIPeH/Z5FX6qeRmeVx+pz4=
Subject key identifier: F9:D7:9A:3D:77:AD:B7:97:67:6F:3D:BE:19:F9:3A:92:F2:0D:7F:E2
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 0199FDD93B2354ACDF663535BCAEA419EFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 0F3D
Signing time: Sun 19 Oct 2025 19:01:35 +0000
Manifest this update: Sun 19 Oct 2025 19:01:35 +0000
Manifest next update: Mon 20 Oct 2025 19:01:35 +0000
Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: g34iF3zrJvJKwvS4rR3Hb+qGGq7GgLZtj/mym5NQ+DU=)
3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:3b:23:54:ac:df:66:35:35:bc:ae:a4:19:ef:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Oct 19 19:01:35 2025 GMT
Not After : Oct 20 19:01:35 2025 GMT
Subject: CN=f9d79a3d77adb797676f3dbe19f93a92f20d7fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:8a:ed:45:cc:71:f5:0a:8c:65:d9:14:d5:
b0:a3:e1:6e:7c:1a:51:ac:35:e7:90:61:9a:7f:59:
12:05:fd:bd:63:fa:9c:c0:56:c6:bf:a3:c6:f9:e5:
c2:d8:aa:ff:06:f0:b4:71:f8:c8:ba:4d:86:91:86:
93:48:ae:b2:9c:63:02:b3:9b:9c:b1:94:a1:9b:d7:
87:56:69:b7:6a:a8:9c:5e:02:6b:6f:ca:43:93:1a:
d4:26:25:07:29:29:b7:72:23:2a:7c:18:82:bc:3c:
26:18:59:c4:6e:4a:9f:fd:e1:8c:49:fe:f6:f6:03:
27:00:67:e5:3a:51:0c:f8:8a:2a:e4:9f:97:4f:9c:
9d:11:de:bb:39:10:be:29:be:7e:cb:38:ae:81:95:
62:da:90:14:5a:f1:a5:66:e5:e5:c7:30:3b:1c:d3:
bf:db:bb:2b:82:ef:64:35:60:71:0f:20:34:d4:e7:
c1:9b:4c:33:25:c8:c8:ac:bd:54:bc:5e:d6:df:37:
8d:d0:f5:fd:94:b3:28:15:69:79:fb:6e:02:85:80:
b2:a4:fb:9c:8b:74:35:f1:8d:58:a2:d2:4f:1f:8c:
0e:3d:ba:a4:08:e6:4c:24:3a:b2:fe:f1:51:90:31:
cf:a8:e6:81:0d:87:d0:c9:54:5e:d4:c5:aa:ec:1e:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D7:9A:3D:77:AD:B7:97:67:6F:3D:BE:19:F9:3A:92:F2:0D:7F:E2
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:46:57:5f:69:a2:4b:fe:d4:2c:8f:5a:5d:35:cf:cf:14:8b:
b6:cb:31:f1:4c:bd:b3:93:f3:15:3a:68:12:fa:7f:e7:a0:a4:
a0:72:1a:22:65:c9:90:6f:66:87:e1:e4:dd:c0:b9:b0:be:dc:
73:3e:24:ba:31:10:36:8f:f7:78:ef:1f:ee:88:4b:fa:26:d7:
d0:10:60:2d:3f:6f:11:c6:65:98:5d:fd:72:63:2d:11:33:c2:
3c:96:f0:5c:a2:e2:c2:e3:a4:d8:40:f1:68:10:eb:31:5b:99:
e0:02:e4:d8:02:62:98:48:74:26:5e:3d:86:41:da:ea:7f:47:
42:5e:1f:3c:d6:f5:e6:ac:5e:0a:98:e7:9d:ec:7d:9e:20:56:
33:f8:01:ec:d0:89:b5:0f:53:c3:6b:04:73:a8:30:8d:98:c6:
9a:93:bc:9d:99:7c:93:e5:70:10:30:84:5a:ad:3e:d7:af:51:
a2:29:68:a8:9a:02:41:6b:fb:9d:1b:aa:4d:bb:f1:aa:31:31:
a8:0c:0e:78:04:5c:42:5b:c3:eb:04:f1:58:ad:c9:44:a7:fc:
64:f8:60:fc:a8:1e:18:b8:c3:99:ee:93:a8:49:84:18:ad:ec:
80:cd:14:15:90:9b:e3:e1:b5:4c:81:2e:ec:a5:f2:10:9e:db:
01:ed:06:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:19 2025 by rpki-client