Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json)
Hash identifier: Y0JMuZSyJFfZz2hgHGGtZz+rBTFWK75o6NTHAT5h4yg=
Subject key identifier: 6D:1B:EC:B4:AF:1B:DB:60:BA:F2:DA:2B:7F:14:7E:AA:49:66:32:C6
Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858
Certificate serial: 0199FC5913EA0728AC248C229044E22620AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
Manifest number: 02CD
Signing time: Sun 19 Oct 2025 12:02:00 +0000
Manifest this update: Sun 19 Oct 2025 12:02:00 +0000
Manifest next update: Mon 20 Oct 2025 12:02:00 +0000
Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: k6NfOk9QlfukJDWiepN+oVteI0KOu09NES6NTL3EB6k=)
2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:13:ea:07:28:ac:24:8c:22:90:44:e2:26:20:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858
Validity
Not Before: Oct 19 12:02:00 2025 GMT
Not After : Oct 20 12:02:00 2025 GMT
Subject: CN=6d1becb4af1bdb60baf2da2b7f147eaa496632c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:ea:54:b7:2c:65:ec:21:6b:48:99:24:a9:
2e:d6:8d:2c:36:59:28:d6:61:8e:2a:a8:49:96:55:
f8:05:ba:32:8f:ae:f9:42:a9:aa:3a:8b:83:07:49:
6f:0c:e5:e6:64:86:8e:71:30:bb:e0:7a:99:f4:2b:
06:a9:b6:55:ae:8e:5c:37:b3:58:6b:a2:10:a6:fa:
73:50:35:c5:0f:53:c7:fa:5d:96:7b:a0:94:a2:a4:
0f:dc:ed:e0:ad:c2:c2:4f:aa:73:3a:0b:10:a7:5a:
26:98:f1:03:1b:05:34:03:c6:84:d7:da:6b:51:68:
26:74:d7:67:3d:fc:6d:8e:20:da:3d:33:01:bf:0b:
9f:78:43:a2:3b:0a:27:15:5b:e5:10:26:46:62:5f:
14:61:57:60:10:4f:99:66:d0:81:1c:b9:d2:4f:23:
da:87:04:65:1d:80:da:62:9a:7b:03:21:10:0e:34:
9d:2d:6e:89:2f:0e:08:79:89:df:0c:97:92:ed:9e:
7e:9b:30:39:ff:cc:f5:ab:6a:fc:f6:65:8f:7b:72:
7d:76:75:ca:28:b6:6f:c2:7d:b5:49:74:37:2e:dd:
f6:6e:e8:3c:37:a7:52:20:79:60:57:3e:39:9c:28:
5a:41:71:b0:88:86:c7:c5:71:49:fd:e8:7c:5e:cf:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1B:EC:B4:AF:1B:DB:60:BA:F2:DA:2B:7F:14:7E:AA:49:66:32:C6
X509v3 Authority Key Identifier:
keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6d:df:98:45:2c:71:05:d7:f5:61:54:f8:4b:66:c8:6e:62:
f1:01:7c:df:0a:47:ee:e6:91:19:33:04:ab:d8:07:e7:27:fd:
83:24:c4:e5:3e:72:d6:a2:cb:00:23:f7:db:49:c7:65:de:50:
ad:63:5a:bf:a9:1d:35:4b:8b:e4:9b:01:23:8c:3f:51:37:0d:
36:26:e1:7a:ad:16:ae:3c:cc:71:d7:a8:23:4b:cc:05:86:40:
8c:4f:f3:33:d1:96:01:a1:98:93:f8:ed:a6:65:36:41:97:bb:
98:de:8d:90:52:85:e4:ac:06:e1:53:0e:61:69:a4:28:57:97:
36:b3:b2:96:b3:b2:0e:5a:3b:df:40:b0:c5:d5:3b:8b:1b:a9:
4c:0d:bd:12:4d:15:a8:d7:27:3e:96:80:a4:52:95:ec:c6:51:
27:ab:1e:eb:f9:cc:f4:ae:20:33:73:4a:88:47:ef:e4:c5:1b:
f2:7b:3e:2f:ac:02:00:43:47:ee:27:d6:e3:1b:79:27:46:53:
b1:6f:cd:c5:b3:08:82:3d:a7:51:a4:01:9f:cb:12:91:db:b0:
f4:3b:2e:93:30:7a:84:d9:77:4f:fd:bd:cb:29:c1:ed:8b:64:
1d:30:cc:01:c5:a5:88:57:92:b9:5c:ca:47:63:c3:ba:ec:19:
b4:00:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:39 2025 by rpki-client