Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier: AbtCXVRMSzTkHWQal1UGZY/nQ5vGa1zkLEgRS2hFslU=
Subject key identifier: 56:77:54:1A:11:39:83:C2:A4:A6:02:3D:1A:58:EB:A7:55:7C:75:43
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 0199C48E2D378195523EB0E286A249B66806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number: 1406
Signing time: Wed 08 Oct 2025 16:01:15 +0000
Manifest this update: Wed 08 Oct 2025 16:01:15 +0000
Manifest next update: Thu 09 Oct 2025 16:01:15 +0000
Files and hashes: 1: 4shZBDKZZPGnSQMfuQiOImBHql8.roa (hash: Jfoq3n1s/kyNKvCWlVGyWbHUx4CSO8/9+CCCYgnc/Us=)
2: FA2h5OHRpegZzdAFMMwkYVBg-BM.roa (hash: 9GzazJbnHKp6+I1Ph8x2q38kHV8Nlnih0rihfAr5aBo=)
3: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: VQUu7EFbzn/da45+CV7247WSf095HU/tLL2YweS+vYA=)
4: ZEOW67E73LjGkhRbjT8p8HAuQ7g.roa (hash: 3byQhC85THLNsX/WfVA4T3mVllKuuMpO1Ynx6g/Ksak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:8e:2d:37:81:95:52:3e:b0:e2:86:a2:49:b6:68:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Oct 8 16:01:15 2025 GMT
Not After : Oct 9 16:01:15 2025 GMT
Subject: CN=5677541a113983c2a4a6023d1a58eba7557c7543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:81:02:19:bf:7e:46:ea:0d:30:5f:dc:24:
49:b4:11:f8:c8:88:57:db:df:ff:e7:32:d6:87:35:
8e:c5:f3:5f:51:67:a9:36:2a:d3:f4:8d:9d:ac:05:
2f:fd:94:a7:27:ec:a3:c2:b3:ea:19:fc:22:f3:44:
44:33:6f:9e:d1:1b:41:33:a8:bf:29:d4:05:76:a5:
02:cf:f3:88:16:69:12:8a:d7:b2:69:99:53:52:dd:
e7:1c:a7:02:9a:ff:89:25:b4:77:f4:07:0f:6e:df:
0f:92:47:20:45:b1:63:10:2e:26:7b:4d:d4:a2:1c:
c7:84:c4:4d:c4:97:17:cf:41:f7:a0:53:e7:a8:b8:
ea:83:b0:ea:9b:07:5b:28:34:e7:15:bf:89:83:8d:
2d:40:aa:78:9f:f7:e6:d6:59:ee:89:b5:bb:4f:4d:
2d:f6:3b:d1:f7:9d:a4:5d:a8:e0:76:42:99:25:91:
a1:31:20:a1:0c:b7:06:73:b1:7f:95:e3:fe:30:57:
0e:50:78:3e:e8:f4:bc:2e:b6:f3:41:f0:31:03:89:
a2:55:d8:fd:f8:8f:ef:75:1e:c1:a4:bc:e9:c9:17:
60:3c:c8:8a:f6:5d:a2:9d:6d:9b:3b:d6:60:4c:d6:
60:c3:a2:59:d9:8d:b5:fb:92:6e:f3:e9:02:60:78:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:77:54:1A:11:39:83:C2:A4:A6:02:3D:1A:58:EB:A7:55:7C:75:43
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9c:ba:a6:8f:98:d4:53:7e:4d:6c:4b:ba:46:bd:5d:76:1b:
b4:d9:53:73:2e:3c:2b:4a:47:6c:ae:60:fc:8d:e4:6b:c2:14:
c4:9d:5b:c8:7e:a3:67:e3:2b:97:7a:7a:84:c5:99:19:29:0a:
f4:30:76:e9:ba:17:7c:53:ff:18:ea:3c:4e:22:32:c9:04:6a:
41:41:4c:27:08:17:0e:22:72:0b:84:e4:e0:b7:3d:7f:08:b9:
c8:a6:c7:df:12:b2:03:e4:dd:51:08:e7:be:48:5d:5f:b4:76:
31:1a:02:1f:4b:e2:9b:50:9d:cd:7d:b1:88:25:e8:16:1d:f7:
2e:b1:fe:da:6a:7d:d5:15:2e:82:41:48:56:74:f5:55:96:e1:
69:fe:df:6d:4d:75:c0:e5:52:cb:81:85:85:f6:a8:ad:f3:29:
f5:63:bf:e4:bd:d5:b8:3f:c3:52:65:1b:38:3d:e1:a5:0a:fc:
cd:5d:3f:4c:36:22:bc:97:c5:f4:cc:1e:e3:2c:7f:3d:87:a3:
17:8c:74:fa:b7:80:d3:38:13:6e:38:79:aa:95:ac:09:f6:93:
d4:c0:41:19:85:d3:05:ba:87:5b:c5:f6:2a:67:b9:4c:65:e7:
55:d8:1f:3d:af:56:48:4f:56:d1:22:72:51:45:8d:60:99:d7:
e4:8f:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:20 2025 by rpki-client