Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier: CSyUrZ9k6es8PHa546adA1748S1h81nwlYzjLWVOUaY=
Subject key identifier: 23:D6:9C:D1:F9:E6:7F:67:91:55:44:0E:3C:2B:AD:A8:C1:D9:7D:DD
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 0199FBEC1E645BFC877FBBD467A1FB04D0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number: 1340
Signing time: Sun 19 Oct 2025 10:02:59 +0000
Manifest this update: Sun 19 Oct 2025 10:02:59 +0000
Manifest next update: Mon 20 Oct 2025 10:02:59 +0000
Files and hashes: 1: Cr1GM2aFxsaZd-ImInN4uI7kXRc.roa (hash: PpfCM8zWq8dmU00l723EMPcIhVPj7pc1erECtwg1IFw=)
2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: QqahIQQOsTrmemDmtWN8oESP6RPiU4g2FuK4lacDBqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:1e:64:5b:fc:87:7f:bb:d4:67:a1:fb:04:d0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Oct 19 10:02:59 2025 GMT
Not After : Oct 20 10:02:59 2025 GMT
Subject: CN=23d69cd1f9e67f679155440e3c2bada8c1d97ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:2c:11:fc:d2:06:87:a5:e6:7f:b2:f0:c9:
9a:c6:14:03:e8:02:0a:a1:83:25:e5:70:06:ab:56:
df:33:35:17:bd:8e:ae:3e:66:bb:89:e0:f0:19:8d:
e7:3e:86:fc:f2:b5:2a:1a:1b:b2:30:e1:67:88:02:
79:22:e7:79:6c:26:40:6d:9b:b0:c9:4c:5c:e5:71:
31:e2:34:da:7a:df:21:09:7b:a3:35:90:4c:2f:78:
aa:31:ef:87:67:d6:a5:c1:8c:83:40:c3:2c:03:19:
17:a6:fe:fa:35:d1:66:77:60:8a:1e:da:a0:20:b3:
9f:24:96:02:b0:3b:cf:19:ef:42:cc:1c:8e:cf:5e:
cb:39:96:86:17:ed:2b:08:03:7c:e5:da:6e:98:f1:
a9:87:59:5b:97:a6:f3:c3:98:13:92:7a:ad:19:83:
db:17:71:95:dd:7c:ce:4e:70:9d:f9:16:8b:88:37:
77:97:88:d9:51:5e:32:c2:b6:67:f5:eb:8a:bf:8b:
ae:d2:32:b7:0c:b9:ad:dc:a3:26:f8:f8:93:2d:df:
58:5c:15:0f:dc:7e:df:22:32:18:24:7a:15:65:9a:
5f:6e:a2:2a:5f:04:bc:5c:81:39:f9:f4:04:3a:80:
c9:3d:2f:d1:e6:51:ec:c5:e0:1b:85:93:26:46:d5:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D6:9C:D1:F9:E6:7F:67:91:55:44:0E:3C:2B:AD:A8:C1:D9:7D:DD
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ed:df:02:b3:c2:f8:2a:4b:cd:f4:f6:45:af:49:98:8c:2e:
f0:da:ea:44:f5:2e:81:5a:dd:ea:45:f8:9a:8e:15:07:ee:7f:
b8:45:80:79:33:67:e9:53:11:68:46:ce:2e:29:1f:64:85:51:
72:19:2a:20:03:57:1f:b1:ff:3d:24:5a:92:5a:e4:b9:ab:c2:
da:4a:f6:6a:4a:64:48:3e:8a:22:4b:19:99:c3:2b:31:65:4e:
1f:1b:54:67:c5:e9:64:e5:9f:f8:36:a6:bd:04:50:5b:b4:89:
d6:ae:2c:f7:3c:35:72:86:74:54:e0:f2:eb:fc:fe:1e:81:ec:
80:2e:a9:c4:4c:46:5b:29:0f:51:ee:fc:df:18:e8:71:a2:a3:
44:7f:d7:a5:9d:91:1c:3a:57:e0:69:e0:f9:4f:9b:55:24:36:
37:f1:23:fd:99:15:24:01:5e:69:91:ce:5a:4f:87:3a:fd:85:
1b:ab:ef:45:a3:46:c5:c8:0d:94:41:5f:74:5a:f7:c0:da:09:
c7:7a:81:ab:cf:bb:8a:45:50:af:5a:62:6d:30:85:3c:bf:d6:
66:c2:a9:90:2e:44:17:46:d5:dd:46:4c:a4:50:29:14:67:ee:
58:c9:13:7b:e0:56:36:ac:75:81:11:c6:96:97:ee:0d:c2:60:
fe:90:36:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:43 2025 by rpki-client