Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: m8rkQ3zWESum9h1xcMiUIZ04EQOYvLuwDbgW7+XAAaA=
Subject key identifier: 32:B9:D3:3F:D3:94:99:F5:75:1E:97:85:ED:B9:31:95:37:98:4A:09
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 0199FBEC11CA5C5F672BDAD3F55FCAF3284B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 0759
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: 1-7dAZzRBbFa11Vn8DGlQ2QYhnKQ.roa (hash: paOrHtzZ6Pf1no7vHSa5YDI9HD1Gf08R7MZd074FoNM=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: F6/GjXJD2SmfQmqy1tr830UlYosmQ6izk4EO5JvDqEg=)
3: aAUDoOMiIkIoTxqpgiR2vBHCYiA.roa (hash: bEbrJBN9qOyrrJrbKszXph6Dv/8oZGFIwIyFCbBw1tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:11:ca:5c:5f:67:2b:da:d3:f5:5f:ca:f3:28:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=32b9d33fd39499f5751e9785edb9319537984a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:9a:a3:73:f7:2c:0c:01:ff:2a:6b:8a:b8:
f3:2c:75:32:9f:1b:50:c9:3a:44:8e:95:8c:85:75:
45:22:4e:f2:5a:de:0f:38:0a:65:d5:5a:7e:c8:86:
1d:28:18:99:9e:d7:43:40:e8:5a:15:db:4c:3e:7b:
56:30:de:53:c9:91:57:71:77:db:b3:96:73:03:fc:
3d:27:02:cf:51:73:1c:fc:6e:41:aa:13:a0:e8:5a:
62:6f:d9:3f:f4:38:25:a2:d0:0f:8f:e0:77:12:bb:
62:83:5c:f6:0c:58:f2:df:40:33:c3:69:72:84:80:
87:2e:85:b4:59:8f:8e:14:ba:f5:1c:1f:ba:21:0e:
7d:a6:1c:6a:61:aa:61:7b:17:5d:e2:22:7e:47:de:
58:31:25:e2:f9:75:bc:35:89:88:90:9a:68:79:df:
ab:47:b3:80:7d:02:30:1e:8d:31:11:b6:fd:98:43:
fb:8a:56:29:6e:eb:2f:de:d0:14:d8:1d:50:2a:a3:
39:6d:80:41:5a:d5:18:c8:cc:42:03:21:e8:03:f9:
17:e9:c4:83:61:4f:4e:cc:47:e0:8d:8f:10:56:61:
c5:15:e9:ea:6e:a1:8d:ce:9b:6e:b1:22:53:a7:c5:
67:7d:71:3a:6b:19:8f:93:d4:17:e4:85:2b:bf:12:
88:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B9:D3:3F:D3:94:99:F5:75:1E:97:85:ED:B9:31:95:37:98:4A:09
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:c4:8b:26:80:f8:a0:6e:12:d2:be:dd:66:c5:17:72:1b:
2a:92:b4:f9:5f:cc:d7:1a:63:a1:99:21:c8:62:6f:35:38:c0:
23:34:4f:ce:04:6b:56:d1:e4:b6:df:97:bd:4f:f9:c2:f0:3f:
e7:f8:56:2b:36:ff:28:34:fe:92:2a:e8:ec:ee:28:bf:26:f3:
a4:fb:4b:8f:ca:1d:96:9f:d8:37:5c:06:04:9e:cc:5a:4c:0f:
a1:f7:9d:2c:e6:6c:c7:70:d7:75:b8:c9:f7:d7:14:bc:47:3f:
cd:80:b7:ca:3f:48:f4:a9:17:88:02:1c:2d:d0:13:ef:4e:99:
c7:6a:69:43:44:73:7e:73:a8:75:ea:a6:48:05:26:60:8d:4f:
7e:15:71:1a:33:16:67:2d:ea:d8:fc:df:e5:75:31:f7:56:99:
8f:a0:dc:1f:25:0c:0a:81:59:84:c8:7f:9e:e0:d5:2f:8d:7c:
38:82:4e:8b:61:a8:be:96:24:f0:eb:8b:5e:d2:8b:12:01:6f:
d5:73:f6:eb:87:67:8f:7c:a1:bd:5a:a0:db:9c:dd:b7:b8:fa:
4b:1c:2c:c5:3e:82:75:be:ef:1d:39:81:65:36:34:bc:f8:99:
c5:93:e5:da:59:ff:fe:b4:17:f9:c8:44:ff:61:8a:1c:7b:15:
86:35:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:00:02 2025 by rpki-client