Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: 9he28U0XDWK3VTh1WD6CZfXoIOgaagRm39mSIqJRUDQ=
Subject key identifier: 3D:96:21:AD:AC:32:35:EA:52:9F:73:85:D7:F4:F2:ED:9E:B2:AF:D5
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 0199FC590CBAADE5328873730C13BCE3210D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 06CB
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: HQp_yUg92FF87DlWPtvQf8oIbtU.roa (hash: WdzVBva5nz5iKOf23yLPoQ+M9QxUiJxb8xYxHWes+RI=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: GWgqJbIHBuIvpP4gqc77GhjnCn688tS51uJljwIxpMQ=)
3: zCw-9AZjP26xMi8ifkh6cllXO9s.roa (hash: D1nIK1UZwod09XQftoKXhB7rZyXrZ+n2IZxVQbyl2wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0c:ba:ad:e5:32:88:73:73:0c:13:bc:e3:21:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=3d9621adac3235ea529f7385d7f4f2ed9eb2afd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:79:a5:49:fe:2a:e7:70:fd:80:16:51:05:
77:d7:70:42:f7:8a:f4:75:d8:af:48:4b:43:5f:cb:
cb:cb:59:a3:06:06:cb:93:2a:ab:c8:b3:48:e7:13:
38:cb:11:b1:ff:50:47:eb:ab:64:41:d4:a8:fc:ba:
ff:36:c8:85:d4:39:4d:cb:64:0a:cd:15:34:b6:a8:
8c:e8:0a:98:95:a9:8a:2b:99:d9:f6:f9:d9:50:0b:
35:f6:e6:b3:85:ca:45:62:1a:36:83:e6:b0:3f:af:
35:51:0d:d7:55:0c:5e:51:b1:b1:4d:7d:ae:07:47:
7b:2b:a2:bd:9d:52:33:e3:91:8c:34:79:7d:b4:b1:
e4:1a:fe:7e:c7:3f:1f:40:19:4d:38:a4:62:42:75:
66:8b:67:8f:2a:ef:ee:0d:da:4e:3d:e5:ce:76:c0:
c5:af:3f:d6:34:58:44:bc:dd:d4:39:ec:bf:8d:8a:
05:67:8b:4c:c8:ee:d1:d3:6e:f5:9a:aa:f7:cf:df:
93:8c:61:53:36:be:62:95:4e:13:87:9c:f6:1c:22:
04:d6:1e:7b:ce:2e:1f:aa:be:80:37:aa:1e:a4:0d:
d5:39:17:78:9c:88:d9:ee:56:6f:de:6c:52:86:fb:
7a:07:58:ef:cd:83:70:6a:33:f4:97:0a:c0:aa:da:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:96:21:AD:AC:32:35:EA:52:9F:73:85:D7:F4:F2:ED:9E:B2:AF:D5
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:31:48:18:78:57:1b:90:5d:68:1c:ed:eb:c5:06:59:7f:9d:
43:5f:29:47:5d:4e:3b:2f:c4:39:c8:b2:38:c5:50:06:70:35:
60:ec:63:77:46:d9:14:24:fa:43:cf:12:2d:e9:46:e7:b7:6a:
6f:0d:10:44:b3:01:fb:c2:3c:66:b4:15:64:92:f5:e1:3a:77:
29:52:eb:a5:77:5b:46:aa:c9:04:b3:93:1a:a9:7c:93:3b:8c:
17:77:1b:58:c6:df:c5:e8:17:aa:ec:58:f3:e8:6a:49:bd:10:
f1:97:ce:c5:53:8c:8b:0e:5b:a5:ed:46:06:3b:ec:52:a1:96:
34:3f:c4:4a:8b:af:b3:a1:3a:f3:83:03:4d:93:97:97:14:39:
df:88:56:b2:43:92:7f:fb:9a:e0:e4:fd:f6:65:d4:00:f5:9a:
00:ac:e3:cd:88:fd:38:7c:3d:17:fc:28:2b:ce:4a:0b:c2:2a:
87:eb:f2:a7:67:f6:2c:aa:6a:96:ef:03:27:2f:4b:94:61:93:
95:75:dd:ed:8b:88:27:d1:c3:4b:fd:03:b2:48:a5:f0:fe:bc:
5b:5d:1d:6c:30:95:22:9f:ab:2e:b9:09:80:28:90:9a:43:88:
f2:c6:80:73:0d:2a:a6:fe:ab:68:fb:25:f9:2d:cd:00:d4:b2:
31:81:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:43 2025 by rpki-client