Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
File: YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json)
Hash identifier: 2Z0Wra3amwAKzUEovfA4HfkKL9bAeKh8rBkJDrlgy9E=
Subject key identifier: 38:7B:A6:26:9C:5E:C7:10:3B:03:A3:35:EB:0C:AD:BC:CE:8A:59:7E
Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
Certificate issuer: /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Certificate serial: 0199FC2175DF1780B508E0C23F4508EEBE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
Manifest number: 42
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: R3nIJXfkLuuHtzC01LNQ4csbV9c.roa (hash: 2UAzqJkEQaJ/zes9bFjleD0zd5Rzn35uxEBaqQdnoYo=)
2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: af4rUqg06U3VCAT1gHUkE+vLWCYOnRIqtruzIrVE0Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:75:df:17:80:b5:08:e0:c2:3f:45:08:ee:be:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=387ba6269c5ec7103b03a335eb0cadbcce8a597e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:1b:f5:28:09:bb:8f:55:76:ff:9a:32:b4:
aa:7b:ac:cb:51:6c:76:f1:9c:bb:a7:cc:2a:c8:51:
bb:f6:b6:37:e6:01:d2:23:85:6c:b0:e5:91:70:9d:
fb:db:3f:7f:a7:ef:45:95:26:c7:a4:8b:e9:ec:83:
ff:94:40:9d:4a:53:e2:aa:b0:90:57:4e:3f:6e:b8:
a7:41:14:4b:d0:c4:81:7a:3b:0c:95:88:5a:b3:01:
19:f3:c8:a2:e6:a1:23:64:a6:13:97:ab:92:21:ab:
f3:92:de:bb:a6:61:00:ca:44:ea:2e:f6:c4:6f:04:
57:5e:5e:91:a2:6a:41:13:39:dd:7e:4a:5f:30:46:
d0:7b:43:8c:e8:f4:71:92:3b:e4:63:2a:ad:a8:4d:
77:b3:f7:25:4f:47:fd:68:d3:20:3b:b9:64:d4:a9:
93:e5:f9:53:8f:94:4a:cc:8d:53:2b:9a:b9:8b:1b:
4c:ad:27:78:1e:d8:1d:46:11:1b:73:7c:f6:96:08:
68:33:1a:8f:0e:43:cc:52:00:f1:3d:9c:e2:47:fc:
d2:24:98:2a:01:3d:af:9c:49:a5:46:aa:ff:a6:57:
89:b0:f7:fe:dd:00:76:44:cc:03:57:60:92:5f:18:
13:55:f0:78:c9:d6:cb:1e:21:95:ab:a6:85:2a:0a:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7B:A6:26:9C:5E:C7:10:3B:03:A3:35:EB:0C:AD:BC:CE:8A:59:7E
X509v3 Authority Key Identifier:
keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:3a:91:50:57:6f:0e:3c:6c:ba:5f:42:98:92:79:72:ca:
53:a3:c3:80:9b:cc:cf:e3:24:58:cd:ff:63:e3:95:d9:69:71:
92:da:17:72:b5:63:ba:8d:01:57:e3:1d:9c:25:39:be:09:a3:
71:86:fc:34:41:bd:80:c8:57:e8:a9:2d:91:a6:98:d5:50:3d:
36:4d:c5:92:8c:5a:4f:4c:f7:08:c8:29:e0:11:ac:3a:78:e5:
d2:db:35:22:af:f9:bc:d2:ab:90:33:de:10:87:0b:07:12:63:
a8:83:c2:fc:a8:ee:cb:9d:f6:40:1c:9d:54:ac:2b:6f:e7:6f:
be:c2:8b:19:ea:e9:c0:d5:f5:4b:56:ae:0f:dc:00:96:db:b1:
29:e6:25:f6:4d:a9:bc:e1:cc:00:fd:03:d4:bc:5c:dc:e5:2f:
85:a4:a2:5e:11:ef:13:5a:15:46:36:61:bb:0b:cb:b4:ca:33:
33:ff:41:c5:e9:eb:39:20:5a:7f:05:92:30:b2:cd:1e:14:1b:
86:87:20:f6:83:0f:7b:1a:5a:ac:e8:69:23:a8:a9:de:0a:76:
dc:78:ef:8a:80:33:02:b9:7e:33:01:cb:18:1d:a1:34:cc:4b:
85:6e:c8:d1:1f:58:0b:14:49:a1:ac:3c:90:85:b6:f8:d7:f0:
c1:28:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:04 2025 by rpki-client