Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: troiB3PxPdtFfsEDps4anekC508+0wIu3A8Shb7AjyE=
Subject key identifier: AF:36:A1:8C:66:99:50:34:0E:F5:72:C8:23:14:46:40:C4:30:D8:75
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019A21E4D492071C8410D2050C65E314643F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0AB2
Signing time: Sun 26 Oct 2025 19:00:35 +0000
Manifest this update: Sun 26 Oct 2025 19:00:35 +0000
Manifest next update: Mon 27 Oct 2025 19:00:35 +0000
Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: XxibY/TPfpi9Crix1XIx2AGOCddEVRbGCI6BsrNul3Y=)
3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:d4:92:07:1c:84:10:d2:05:0c:65:e3:14:64:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Oct 26 19:00:35 2025 GMT
Not After : Oct 27 19:00:35 2025 GMT
Subject: CN=af36a18c669950340ef572c823144640c430d875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:60:ab:c9:b5:09:50:b2:b3:37:a8:77:dd:
69:83:1a:4e:0c:40:61:88:e2:e2:e3:5f:ff:be:56:
67:c9:fb:84:63:39:ca:de:75:ae:98:ec:c6:f3:fe:
61:09:5c:f5:27:6d:95:3f:9c:1f:5f:cf:42:b9:42:
b0:6c:3c:6c:e4:5b:e2:d7:41:75:c1:d7:e8:02:f7:
d4:8f:91:d3:c5:82:c1:b5:eb:d9:77:a8:80:26:56:
5d:bb:c3:6b:07:96:25:b7:6b:e5:ff:4d:5e:97:d0:
23:ff:0d:2f:8e:9f:bf:9f:31:05:7f:9f:f6:6d:28:
05:cc:57:41:86:ca:1b:45:47:5f:9b:3d:15:d8:88:
e6:f2:a7:1a:80:ba:86:c2:4a:c1:f7:db:6c:69:0c:
ba:99:02:4a:a2:7a:b3:dc:a5:ce:47:98:f0:86:fd:
75:bf:59:f5:27:f2:0d:d0:5c:98:aa:2d:cb:d1:8d:
81:52:87:99:3d:a0:e5:cc:86:9a:fa:b9:c4:d3:e0:
66:bd:62:6f:1a:c9:11:f2:9c:4c:42:f0:90:6a:09:
86:e7:63:c3:54:35:46:99:6e:5a:20:1b:b0:ec:86:
55:0b:14:18:6b:fa:db:78:18:04:11:0b:dd:d9:90:
03:52:d9:01:6a:c3:7a:65:eb:67:33:fc:cc:c5:68:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:36:A1:8C:66:99:50:34:0E:F5:72:C8:23:14:46:40:C4:30:D8:75
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:74:61:18:ca:db:6d:d4:dd:46:5a:cf:eb:9f:92:6d:46:76:
a1:ad:12:9b:10:66:09:12:8b:34:1c:0a:6b:e6:6f:32:a4:fc:
93:a3:ce:e4:3f:f8:b8:4b:0e:3b:83:2c:65:88:92:a8:f3:3b:
07:69:70:04:a5:8b:d5:9d:9c:78:87:2c:02:60:c6:47:15:78:
e4:44:43:89:f1:ad:24:09:f6:ff:69:8b:83:f8:2b:1e:a9:7e:
eb:d1:00:df:15:7b:d2:0d:a3:b6:31:57:87:75:57:57:48:32:
60:a7:ec:41:2f:59:ec:25:4f:d1:14:65:2f:a3:90:cb:b9:b6:
28:55:ee:48:e5:99:0d:7f:ce:51:63:c2:e2:5f:c9:a6:e3:1c:
81:bf:68:0f:32:5a:85:88:ba:d5:db:b7:c4:d3:4e:97:7c:47:
df:dd:18:fc:ff:41:c2:8e:6f:bf:e7:df:96:fd:c1:5e:91:e4:
95:5e:84:f8:11:9d:39:b8:01:6e:1a:cf:52:b6:bd:25:b8:78:
8f:4c:8d:68:c1:4e:fa:f7:a0:36:dc:e7:a2:a9:bf:0e:0d:ad:
88:9a:31:6c:a4:35:90:ee:b1:31:8b:17:94:ed:ba:46:df:8c:
91:0d:58:ff:a1:62:d3:4d:4a:81:f3:4c:06:21:90:ca:6a:5e:
eb:ef:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:53:23 2025 by rpki-client