
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier: /qg3ZeHoOMHJ87sj+dI8G7jyEytBgLL+GfGpg00oR6o=
Subject key identifier: 1A:73:B0:60:94:58:46:37:8F:92:84:5B:AE:8A:08:0D:F9:CE:4B:38
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial: 0199FAD80FAF6469EF90A8AD48561102FC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number: 0DAB
Signing time: Sun 19 Oct 2025 05:01:27 +0000
Manifest this update: Sun 19 Oct 2025 05:01:27 +0000
Manifest next update: Mon 20 Oct 2025 05:01:27 +0000
Files and hashes: 1: O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa (hash: +gEwwbOSwfP86nIPB3Wi8wpxpGPoq4z6Qo3YWsrmtuQ=)
2: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: qUJbPoxIOxi1g155A5AyIWoxpVRqJxFnqv6fYEEfDuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:0f:af:64:69:ef:90:a8:ad:48:56:11:02:fc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
Validity
Not Before: Oct 19 05:01:27 2025 GMT
Not After : Oct 20 05:01:27 2025 GMT
Subject: CN=1a73b060945846378f92845bae8a080df9ce4b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:de:5f:bd:2c:2e:68:4f:c8:65:15:8c:78:1b:
a5:ab:10:ce:aa:1c:e1:8b:8c:e3:6f:58:28:10:2f:
00:31:45:54:54:c2:3d:60:6b:58:7f:89:b6:1b:20:
88:00:a0:1d:1c:4c:3e:7e:78:95:28:91:a5:f9:5d:
e5:5b:07:89:e6:d3:35:44:db:1e:4d:f7:7e:45:62:
77:0c:47:88:73:4a:76:7b:3a:86:ca:15:31:3b:62:
94:45:c4:f0:b8:86:19:77:90:a5:6d:7d:9e:ee:34:
a9:c2:60:61:a8:b8:72:98:56:30:75:05:f4:05:18:
0e:55:36:26:62:4e:6e:3f:b6:c5:2c:61:19:0f:b8:
4c:5a:11:2a:6e:84:01:89:90:f1:76:1c:9e:ea:32:
bc:87:06:73:3c:4e:e6:8f:92:ee:54:5a:0e:f1:8a:
4f:82:ce:76:1b:af:64:d0:89:4e:a0:a7:70:f6:f8:
3a:a1:39:c6:90:88:9c:ff:da:2b:25:b1:d9:d2:4c:
39:ea:60:64:c4:57:ab:dc:fe:a6:b7:98:6e:6f:cf:
0c:f2:2c:28:61:bd:da:0f:f7:4f:f8:81:2c:d6:02:
59:36:3f:42:d4:a4:68:35:81:b1:03:06:72:a6:ba:
60:c6:d2:1b:3f:0d:40:94:c5:90:27:a5:22:11:aa:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:73:B0:60:94:58:46:37:8F:92:84:5B:AE:8A:08:0D:F9:CE:4B:38
X509v3 Authority Key Identifier:
keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2e:aa:2a:83:20:2a:93:22:6e:9e:73:87:ba:0d:85:70:58:
21:5b:c2:84:de:32:1f:f5:7b:7f:1d:47:c8:e5:0f:b6:db:a9:
9d:63:1a:f0:71:66:b6:58:30:70:e4:41:c4:2a:8d:bc:6c:6f:
62:45:19:c0:d6:c5:c1:fa:ca:da:b5:b7:53:83:14:84:51:21:
c3:8a:82:72:9b:46:cf:63:a6:83:64:cd:6f:15:9f:ad:c4:cd:
37:51:5d:77:a8:1c:5c:6d:43:3d:dd:a6:06:f5:e0:0c:8e:7c:
44:ae:df:ff:ea:ee:8c:a4:db:5c:ea:4e:7e:0b:b7:41:b0:10:
ce:f5:59:c2:7d:c8:a3:1d:b1:6a:26:f5:bc:8d:9b:3c:bc:c9:
18:84:7d:11:a2:1b:d4:fd:47:b7:90:00:ad:91:2d:db:46:5c:
3c:74:e5:47:9a:14:c4:3c:cf:67:5e:39:9a:07:33:79:9d:2f:
55:d4:1f:09:b1:d3:c9:dd:1f:95:bf:e2:5d:48:c1:49:5c:12:
7e:4f:d8:5a:78:0a:27:b5:75:64:00:30:27:79:47:d4:b8:7a:
7e:2e:7b:56:f8:fb:5a:3c:dd:63:8c:0d:85:74:5e:c5:a5:6d:
64:50:8f:dc:57:d0:e7:fe:e8:04:f5:a2:e2:d9:c1:fc:52:1f:
1c:ff:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:14 2025 by rpki-client