Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: EK2xPNI5zXOSGm3tW/03cd+YzGaqY6xcAmKxINmii3E=
Subject key identifier: D0:39:4E:FF:7D:F0:25:9C:E7:AF:A6:01:A0:31:09:E7:79:5C:6C:9D
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 019A947AA4FF915DB2003DC4B58BB0C2B6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 1325
Signing time: Tue 18 Nov 2025 01:00:56 +0000
Manifest this update: Tue 18 Nov 2025 01:00:56 +0000
Manifest next update: Wed 19 Nov 2025 01:00:56 +0000
Files and hashes: 1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=)
2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=)
3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: Ynsyr18BcFZUicZFdeGw2bC2Uru0ytoXQxY9UB8jt0w=)
4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:94:7a:a4:ff:91:5d:b2:00:3d:c4:b5:8b:b0:c2:b6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Nov 18 01:00:56 2025 GMT
Not After : Nov 19 01:00:56 2025 GMT
Subject: CN=d0394eff7df0259ce7afa601a03109e7795c6c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:3d:88:b4:b8:b4:88:ff:66:79:c5:7c:f1:
17:ea:d1:39:42:9a:1a:d6:61:b5:6a:e4:70:b4:cb:
6f:04:da:b4:b9:da:4b:c8:51:06:f5:69:93:bb:1e:
e0:4d:1a:05:51:2e:24:c2:01:16:11:64:5f:87:5a:
cf:33:5b:68:96:05:93:f4:ce:b4:bb:13:6a:55:b9:
d4:66:c6:0d:9d:3c:b8:b7:2d:36:c8:a9:32:fd:68:
d1:d7:2a:80:42:82:b0:9d:c0:71:bd:dc:2d:53:f8:
5e:bf:6d:34:83:59:b0:c7:fc:52:b1:6e:78:2a:8b:
17:9b:8e:26:2b:4c:73:04:1d:a5:25:6a:70:0b:50:
28:53:3c:58:0c:7f:74:4b:75:3f:c6:33:52:39:eb:
0a:ab:32:14:95:34:b1:4d:da:78:87:f9:f5:e7:d2:
cf:bc:3c:6f:1c:8c:ee:cb:92:54:ce:e0:be:c1:e4:
4c:5d:ca:93:09:29:bd:a0:a9:28:5d:14:d9:b4:27:
a5:9f:c9:9d:f0:a9:64:84:b8:16:28:34:13:04:07:
da:ab:b9:56:04:b8:7b:e2:64:c0:18:3f:35:c5:a6:
d3:6a:5d:53:3b:92:33:6a:d8:70:53:3a:92:69:37:
26:d0:79:b9:40:c1:57:4c:b1:46:52:df:a7:ab:cf:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:4E:FF:7D:F0:25:9C:E7:AF:A6:01:A0:31:09:E7:79:5C:6C:9D
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:90:dc:e8:5b:a6:82:31:36:43:eb:aa:2d:2e:f2:e9:49:a6:
e5:99:1c:5e:38:a1:29:50:0c:06:c9:48:7b:e5:b1:01:67:09:
43:9b:85:3f:26:6c:49:59:22:40:30:6a:38:e8:76:bc:f3:ab:
5a:4f:5d:38:ed:35:8a:f1:fd:6a:41:8c:d9:11:34:7a:1e:b0:
d2:62:fe:b8:2c:7f:b0:cc:5d:98:0f:56:eb:b3:70:4a:43:40:
da:f4:62:53:af:a0:0b:e1:dc:1a:8b:4f:e6:57:18:d8:db:95:
07:88:dd:1d:f1:89:0d:b2:95:c7:6d:8a:12:0e:23:fa:7e:b9:
86:05:7f:d3:bf:48:e1:7f:22:76:35:7e:ba:b8:29:1a:1d:59:
40:1b:74:05:ab:a4:47:3b:63:dc:ca:d1:ad:b4:06:4c:a7:c0:
a5:57:86:e4:8a:0d:27:d1:52:c2:48:2f:d9:31:1d:8d:8c:40:
39:12:0a:94:5c:13:4a:60:fc:57:cd:aa:07:5e:03:59:99:c4:
da:11:4c:50:be:0a:a7:38:e8:15:0f:47:55:f4:42:11:e6:0a:
61:04:54:dd:05:13:85:0a:dc:52:ab:17:c6:c1:51:6f:3e:ad:
b9:81:94:fe:44:7d:50:c8:02:80:27:81:60:0a:8e:6d:2f:45:
6f:aa:b6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 07:03:08 2025 by rpki-client