Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: fECKX2ADDy6dfMzPVKLbT7ghEdfkpF1hE9bmUyuXq2k=
Subject key identifier: BD:F5:B3:77:1F:81:B7:3E:18:0E:7B:9C:A9:39:B9:E9:D2:CB:89:4A
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 0199FCC61CEADA42F5F17EE76D9EC71F7878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 0363
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: OaEC4Gts++eAbWvPEDnFhE0+LutGZlSwWd10qfCjJdQ=)
2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1c:ea:da:42:f5:f1:7e:e7:6d:9e:c7:1f:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=bdf5b3771f81b73e180e7b9ca939b9e9d2cb894a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:fa:66:70:57:e9:0a:a1:9b:8a:cc:90:9c:
43:a9:b8:a0:de:60:6d:cc:1c:2a:f9:8e:b7:d9:90:
d6:3f:b9:76:e8:b5:ff:06:35:02:9a:cc:fc:63:38:
19:21:bf:8b:8e:9a:ea:59:28:09:67:ea:95:d7:ac:
54:9e:d6:70:7a:8b:b6:48:57:86:18:5e:86:c6:ee:
53:47:e2:bd:8a:d9:59:55:c4:ce:4b:8d:2a:f5:76:
85:be:3b:ac:84:66:5a:f2:22:cc:1f:55:83:b6:dc:
9b:60:c4:48:2a:ff:eb:c8:01:96:b9:b3:a4:38:d0:
12:1d:91:b3:d2:f1:67:76:67:fa:6d:fa:b4:cb:0c:
99:13:89:71:14:d4:71:15:73:98:f4:b1:ba:d2:4b:
53:05:13:26:8c:27:af:b2:da:d5:ee:a5:d9:5b:77:
96:af:be:24:01:04:4f:f2:68:34:73:da:cc:1d:61:
67:c3:73:dc:e1:c3:c3:1e:9a:c5:b1:b0:28:8e:03:
2e:a9:e1:48:e5:11:8e:5a:6f:cb:2e:bd:c9:df:42:
28:20:f1:5f:b4:c9:4b:17:f1:c1:99:a1:8b:05:27:
e3:7e:a6:9e:15:da:38:a5:03:eb:2d:1c:22:23:7c:
70:4d:ea:a4:47:57:79:1b:1d:4d:06:4f:6b:2b:0b:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F5:B3:77:1F:81:B7:3E:18:0E:7B:9C:A9:39:B9:E9:D2:CB:89:4A
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:03:20:cd:f7:7d:84:38:a4:92:ba:7b:1f:2f:1b:5b:19:3b:
c3:62:bc:16:06:1c:82:18:91:46:4c:97:7f:fa:3c:64:c6:75:
6d:1b:f8:cb:9b:95:4b:c5:b5:93:af:c7:96:16:5f:44:dc:64:
76:71:74:58:1c:4f:2f:4f:2c:21:e4:b9:2b:21:68:cd:07:15:
75:3d:26:e0:d1:5f:a8:59:17:09:36:9f:44:d9:8a:82:51:05:
59:c6:d2:cb:d0:64:5f:91:ae:81:21:df:88:47:24:5b:97:70:
35:5d:4f:24:90:cc:ef:30:0f:30:66:1b:02:30:39:5a:8c:f0:
77:4f:1e:d0:3f:c1:00:a6:34:1a:a8:36:b7:ed:70:3d:ae:6a:
27:11:75:ab:82:e7:bf:5b:b2:82:21:ec:2e:90:fe:9a:3c:7f:
08:72:6d:a4:41:3c:c4:90:c2:0b:40:c1:3b:1f:96:73:77:bd:
7f:c0:c0:f0:ee:73:a6:25:3f:15:d2:5b:fd:88:53:5f:28:32:
58:f8:e7:40:3a:4e:61:10:75:85:6c:79:90:a7:ad:82:dd:66:
fe:d4:13:dd:9d:9c:dc:09:4a:57:4e:ca:85:94:b8:36:02:3a:
05:44:77:17:aa:69:a8:6d:ec:7d:fd:bc:58:34:f3:e6:da:44:
7f:c4:65:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:26 2025 by rpki-client