Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json)
Hash identifier: ivTxJATEQeUTyYre87AIkMV9DI5Kvncu+Jwr2RhppC8=
Subject key identifier: FE:05:00:A3:7A:DC:0D:9C:B1:65:7C:E5:3F:C4:9E:D7:D6:09:25:56
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 0199FC213FDD4E9F6BD865E398702556D439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
Manifest number: 03C3
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: GXfnftSUtZVYSmEnhsSPV4bBMYv5M4tgORaYTXpjgNg=)
2: nsWYD62GXvXwJfFUS4kAQcZmYTU.roa (hash: jHcDfB6LIATegfSEiVgq0NQFeMD0sWc8LqYc2Z+2oaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3f:dd:4e:9f:6b:d8:65:e3:98:70:25:56:d4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=fe0500a37adc0d9cb1657ce53fc49ed7d6092556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ec:78:75:73:0f:62:29:98:82:16:2a:7c:07:
25:6d:a2:3f:24:e8:08:78:1d:12:45:d4:44:cd:aa:
f1:9d:18:a9:46:b8:eb:4d:06:57:ef:14:8d:dd:83:
7e:e9:c4:f1:7f:0c:a2:93:32:0c:c3:c9:36:d1:d3:
90:e5:5c:34:b5:26:41:48:a0:ba:d8:d4:17:5b:46:
59:a4:9d:11:f9:da:00:0e:1d:f2:d6:64:63:ca:23:
fe:36:41:60:ae:5f:ca:88:74:5a:e5:b7:86:a4:84:
22:3d:ce:b5:86:d0:bf:3d:23:70:b9:f2:b8:b7:25:
e0:0c:99:f7:95:ce:4b:c7:cb:52:09:f4:97:59:60:
2d:12:99:d5:06:04:65:df:d1:5b:7a:cf:52:26:3c:
e2:c4:8e:e6:f5:b2:3e:07:98:2e:fc:0e:2b:18:80:
a9:35:45:ec:00:10:39:5a:b2:78:f4:04:0d:34:49:
c0:89:23:ec:e4:c4:5f:bc:ca:c6:a3:9f:87:8b:87:
b9:9f:1d:92:13:66:a1:92:3c:75:d2:73:2a:1d:43:
4a:82:7e:8d:42:33:df:d1:e0:97:6b:f1:b6:f5:76:
8d:32:1d:98:70:ce:fb:c8:26:b4:b5:6c:6e:28:94:
96:d5:80:19:ef:2b:50:1c:47:c3:f2:23:79:41:1c:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:05:00:A3:7A:DC:0D:9C:B1:65:7C:E5:3F:C4:9E:D7:D6:09:25:56
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f2:65:d0:4f:21:89:b1:8c:68:78:e2:81:33:17:fc:56:f1:
63:9b:ef:4d:3a:43:94:49:58:29:9a:d9:99:5d:9d:23:4e:b5:
14:e5:46:48:76:92:f8:88:c4:89:9f:5d:95:73:65:12:72:13:
e6:43:73:ea:32:06:0d:4e:21:93:64:2b:0c:4a:b8:f4:c4:4c:
fa:33:aa:0d:d3:23:8e:59:3b:39:15:7f:6f:bc:0b:34:c1:90:
2f:24:66:9c:be:08:f1:05:eb:d7:e2:79:62:cb:66:cd:95:75:
64:53:19:81:39:a0:7a:b6:c4:06:18:57:43:20:37:54:03:69:
5c:8b:1f:51:24:6f:d9:41:ec:5e:65:ec:0d:90:eb:78:c0:ea:
69:eb:4d:8b:da:2c:aa:9b:77:8f:81:2c:7e:c5:00:45:10:83:
eb:87:c3:94:1d:8a:1e:47:5c:dd:a8:ee:fb:94:17:7e:80:51:
19:4f:01:49:ac:70:d2:c1:b2:b7:27:0f:11:d6:9a:97:48:39:
dc:7d:c4:2d:40:8b:60:32:a4:4a:be:ed:d2:75:11:a4:d6:4b:
e7:5f:e1:90:51:03:61:07:50:38:9c:0e:f4:33:32:76:d3:b1:
75:45:46:d7:5d:c5:ae:58:26:91:f8:f1:a1:c3:3e:15:bd:5d:
e5:d4:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:51 2025 by rpki-client