Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: LMVX4jmVP87ojER28Ifo8qFQDUVR7tR8BuR15rp8nUo=
Subject key identifier: 0C:1F:93:D0:01:0D:F0:0B:78:4B:80:3C:CB:5B:10:99:8C:A4:27:0D
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 0199FBB3713B5BB9C4BFEFA6615B5CA670C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 0645
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: VAzYkQRTgwiJaHwxuivv8ZFztSM.roa (hash: JX1t8tGMn8nyq5oj+S/xubK6nVg6WbHVtaOCdwSyvtE=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: aLm6OdzLxrH3NN2rrQ3ktbk/RyOKni76uA5+lB4d3DI=)
3: mduHn1Ba-swk6VOib9ml9GoEMsc.roa (hash: 3VvwRqUaU666bsiQcBrlluuEPtapExzv8dYQUHsb8Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:71:3b:5b:b9:c4:bf:ef:a6:61:5b:5c:a6:70:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=0c1f93d0010df00b784b803ccb5b10998ca4270d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:82:fc:2b:ad:b4:d4:2e:7e:d8:5e:fc:55:a8:
f9:1d:c7:5f:92:21:cc:26:f0:6a:87:cb:4b:69:11:
c4:4a:81:c2:54:83:1d:d2:8c:9c:f3:3e:31:b8:5c:
38:16:71:9f:a0:61:ac:84:52:9f:1e:9d:7d:45:76:
63:2e:54:47:ac:ea:af:8a:76:75:3d:a7:fe:88:1b:
f4:ee:fa:f0:8c:a9:51:c3:49:65:90:b1:70:68:ed:
b5:92:8f:cd:ff:8a:ab:3c:d3:9d:a3:4d:0b:f3:f7:
18:02:d7:d6:d1:db:a2:29:a0:e8:82:ab:a4:57:cb:
79:16:a0:07:13:86:67:75:c3:7f:6f:c4:d2:6b:65:
5f:d6:d2:07:a1:53:29:1d:29:66:af:ee:02:db:ee:
24:f6:cd:73:a2:19:9e:83:66:4e:d6:80:96:16:ff:
d9:21:11:4c:26:0b:f2:56:b4:c7:a7:82:66:35:b9:
48:7a:d4:0a:fe:20:80:b3:bf:08:17:ed:a7:69:2b:
65:e1:18:dc:89:94:5a:b3:38:49:94:3a:e5:17:b9:
42:3b:c5:c3:4f:59:3c:f8:a1:ee:e0:3b:ab:fb:ba:
05:fa:9f:ee:46:ab:b0:5b:eb:e3:aa:68:bb:b9:cc:
38:a3:60:f5:09:6b:b3:f7:7e:ce:ca:35:d4:e1:a3:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1F:93:D0:01:0D:F0:0B:78:4B:80:3C:CB:5B:10:99:8C:A4:27:0D
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:26:14:91:c8:7c:04:78:82:5d:32:34:1a:8a:bf:bb:dc:7c:
12:af:20:33:92:e8:a4:97:11:fe:7a:8c:46:af:30:24:d7:27:
3c:8d:22:f6:c6:35:8c:df:b4:05:e2:a0:37:b6:f4:cd:56:42:
3d:39:7a:a4:9f:1f:42:b7:f8:6e:03:f9:c1:10:f7:db:1e:12:
47:d5:d6:57:7e:75:53:93:6e:95:db:fb:77:09:ce:59:62:60:
19:97:ca:26:86:ae:85:9c:3f:a4:7b:70:29:50:5a:1f:e8:f9:
9b:7b:d2:56:cf:e5:5b:30:c7:14:79:d8:7b:d6:1c:ef:50:ec:
2b:eb:79:87:3b:f9:4e:17:97:78:03:3a:6b:9d:6d:73:c0:82:
7a:15:22:46:45:7f:19:37:9e:75:50:86:c2:e9:9d:61:3b:a6:
d2:a7:85:c9:70:48:d9:c7:af:9f:fa:2c:60:d3:07:68:95:e6:
c8:ae:59:ef:08:8e:eb:72:7e:0c:25:19:3d:31:0f:e8:0f:85:
a8:8b:d1:b5:fc:df:1a:3c:43:a1:33:c0:42:07:cd:25:e7:2a:
b9:59:5c:34:48:57:a1:f6:68:11:d8:d7:4f:0f:b0:3c:16:f6:
70:5a:91:51:39:0e:1a:65:7f:47:40:6f:72:46:1f:b6:f7:97:
ba:12:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:15 2025 by rpki-client