Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File: Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier: B80vWYJ0esoOLfVuDHD45tG2+3bfra7gpnjQ1FULuJQ=
Subject key identifier: 62:BC:9E:3E:8D:91:10:86:B9:DB:F7:DA:CB:E2:21:FC:F8:03:5E:C6
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 0199FF903248B08E2AA088CDEBB6CC077D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number: 0D14
Signing time: Mon 20 Oct 2025 03:01:04 +0000
Manifest this update: Mon 20 Oct 2025 03:01:04 +0000
Manifest next update: Tue 21 Oct 2025 03:01:04 +0000
Files and hashes: 1: 8HjMGt2u-FXw7B9KaNMeiFRl_SI.roa (hash: PIXJikr44w+6nZYZyCRJ915rQc/SIe+DvX16n4ZT0no=)
2: G_qyBKK6ClXdG1bs8Wh_ckDLkeI.roa (hash: 05zKtGqeHJmsZPaIinYmSC+r/nrmG7SF+AMON4UTZOQ=)
3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: Czyahj5V/hc0glQ8gEhphY+oHQtqWqrqgaKvAbJfk84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:32:48:b0:8e:2a:a0:88:cd:eb:b6:cc:07:7d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Oct 20 03:01:04 2025 GMT
Not After : Oct 21 03:01:04 2025 GMT
Subject: CN=62bc9e3e8d911086b9dbf7dacbe221fcf8035ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:6e:46:96:02:56:9f:8b:4f:62:ff:96:c5:
66:60:8a:b5:be:c6:2a:cf:99:e1:74:f5:3f:9e:f1:
0e:69:98:ba:87:d6:39:97:06:68:f7:6b:f6:f7:b5:
89:b1:d2:a2:d2:a9:0f:27:de:4e:ab:92:3e:3b:4b:
2e:4b:0c:67:f0:d5:d4:ad:a0:1f:99:5b:9d:dd:6a:
47:5f:50:69:02:ce:81:a4:a2:5d:b4:55:da:94:94:
e2:bb:91:a9:6d:b3:ec:23:ed:58:ad:47:b1:99:25:
ec:9e:aa:13:ad:92:76:72:a8:a4:4a:a1:87:32:91:
83:13:fb:8c:8f:a3:6b:5b:74:0b:5b:1c:91:54:d7:
98:93:c1:fb:6b:0a:b9:5b:b6:a7:ec:4f:b6:7b:31:
d7:c7:7e:b3:af:bc:af:c4:0e:f5:12:8a:c1:cb:f9:
32:37:5a:fd:74:3f:52:8c:97:79:92:f0:f0:a2:8c:
af:19:d4:71:45:2d:c4:86:02:03:ec:73:bb:0e:a3:
b1:da:cf:7e:29:7c:44:24:6c:47:27:4e:ed:a0:4e:
ce:a7:2d:43:ae:d0:a9:6c:75:6b:04:23:7d:0c:69:
1e:e0:fe:fa:b4:1c:07:86:a0:14:57:68:ac:8c:1d:
28:14:1e:b5:a3:62:04:f0:ca:bd:18:67:74:8a:f4:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BC:9E:3E:8D:91:10:86:B9:DB:F7:DA:CB:E2:21:FC:F8:03:5E:C6
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2b:9d:ce:de:b3:60:d9:96:06:d1:48:1d:bb:9c:fb:48:96:
38:a9:f0:54:28:0f:cd:cd:77:03:2c:7f:93:08:2d:79:c6:40:
2b:18:ba:34:0a:9f:70:7c:55:e6:95:a0:a8:78:78:56:27:28:
2d:f1:da:63:8c:f4:2e:3d:95:af:2d:4b:64:11:b1:37:9e:84:
9f:2d:ea:e2:5e:c9:cf:96:17:a5:13:b1:de:13:cc:50:11:34:
f3:0d:80:c0:63:40:9b:98:7a:3d:83:b5:6d:7d:fb:a6:18:49:
c0:b9:06:1b:fd:6e:0f:cb:99:59:d1:a2:a3:e1:62:b5:51:b8:
9d:b3:f2:66:0d:6f:ff:f6:ad:5b:ea:0b:a6:a4:1d:66:33:ba:
45:cf:51:47:40:3b:18:ba:75:39:43:2c:81:29:82:9e:29:77:
0e:f8:24:1c:42:3b:c0:89:26:94:e1:05:31:bf:02:22:b9:cc:
02:cc:61:c5:56:00:a8:a5:a9:1f:a4:cf:eb:80:e5:4b:87:fa:
e0:2c:4e:c7:44:88:79:88:b3:92:39:33:91:07:fc:73:20:34:
26:86:bd:0a:46:2e:4c:99:e7:91:9f:c1:c6:e3:f2:22:ee:2f:
d3:fd:68:70:b3:be:85:49:07:72:19:f9:df:ca:01:f8:8c:b9:
f2:d3:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:49 2025 by rpki-client