Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File: ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier: EglsNUcqHSLgqxOLiP20CHX8H05J6YgN9iO7icjrXNg=
Subject key identifier: DD:3F:DB:A9:56:9D:D7:A9:EF:29:2F:51:6D:27:AA:81:87:EA:9E:48
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial: 019A0B5D0F148DBA47F600E0898F41CEDFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number: 0970
Signing time: Wed 22 Oct 2025 10:00:39 +0000
Manifest this update: Wed 22 Oct 2025 10:00:39 +0000
Manifest next update: Thu 23 Oct 2025 10:00:39 +0000
Files and hashes: 1: KsdzajN30uY3uVW5kyMxHSnmmxU.roa (hash: zPl4WlZ128vZPWoXYgcZMpH4uHo4BsQGARRVppJ+QiM=)
2: astDnoUMy7KdbJvyyxpisdgmA6U.roa (hash: bNOHZXfFwYEoQ+krisGaY+9Oi+royBJVdqPCFFROjZw=)
3: mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa (hash: w701bJj/u4XbtOJf+uHhePRlT4YH8B1JtsulPqw9bWk=)
4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: 35tSS13O9ovyuRtKOUdNXt4A2TV+7JocGIQUA5HFHCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:0f:14:8d:ba:47:f6:00:e0:89:8f:41:ce:df:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Validity
Not Before: Oct 22 10:00:39 2025 GMT
Not After : Oct 23 10:00:39 2025 GMT
Subject: CN=dd3fdba9569dd7a9ef292f516d27aa8187ea9e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:0d:5c:b2:ea:95:a3:93:13:f2:08:d8:a3:
37:85:a8:ee:11:38:b5:0d:97:50:33:ad:14:1e:21:
c3:a9:1e:81:af:7f:44:cd:44:cc:5c:f8:d0:8b:a4:
ec:b0:59:30:6e:b3:ef:c5:82:1b:10:27:d2:e9:7a:
c5:b2:a5:99:ae:2c:0f:e4:42:d9:ae:3e:d3:81:d5:
a1:c7:fe:71:94:5c:19:ff:87:38:c3:97:b3:f0:0d:
a6:16:55:27:2b:9c:df:4c:64:30:18:89:e0:7d:7d:
1f:93:05:b1:a2:91:a4:27:05:97:c1:5a:ec:2e:51:
cf:5b:a7:53:9f:9b:6b:b3:f7:28:e2:30:4b:de:db:
56:01:f8:88:02:ac:a3:00:f7:dd:32:78:dc:e2:b8:
43:51:7d:40:f8:5f:bb:e0:77:ab:7c:9d:d1:32:56:
44:c4:68:a5:38:46:b5:ae:d4:0e:a0:da:e2:4b:f6:
c6:2a:78:3d:2c:4d:31:a0:7d:b2:d4:4a:30:28:d9:
0a:c5:fc:b7:58:59:02:18:10:47:d8:31:c5:53:42:
d3:e2:44:42:1b:24:5a:c5:bb:e2:5d:93:6e:80:46:
27:ce:62:6c:67:88:78:92:6d:5b:20:b0:e5:a0:c7:
df:43:03:64:03:f5:24:d8:06:b4:76:a9:ac:75:72:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3F:DB:A9:56:9D:D7:A9:EF:29:2F:51:6D:27:AA:81:87:EA:9E:48
X509v3 Authority Key Identifier:
keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5b:4f:86:c6:03:06:45:33:42:40:99:74:ee:26:e4:59:54:
b1:1e:33:a7:8d:11:33:ea:eb:31:32:e4:7f:f3:3f:58:a8:20:
ba:11:64:02:97:c1:81:9b:10:47:f8:47:69:62:e8:83:52:e9:
35:90:7f:f9:d5:0f:81:83:95:6c:9e:23:56:33:e8:6b:4d:96:
ce:0a:66:9a:37:30:16:7a:f7:69:42:0a:ee:de:28:77:05:31:
eb:37:d6:8d:be:94:6a:5a:c7:1d:22:2a:31:46:da:48:c0:87:
ca:b7:2c:39:53:d4:01:eb:0a:c0:c4:0b:73:94:80:0a:b5:16:
d1:42:9d:e2:ed:f8:71:81:7c:51:0c:e1:07:01:53:9b:72:6a:
56:2a:6b:63:ed:6b:0a:ed:86:bc:25:11:2b:3f:a9:8b:57:3f:
ef:6e:38:e3:9b:88:cb:7f:33:cd:f5:97:3c:0e:fa:e5:95:da:
a3:6d:1e:48:18:39:d1:f4:19:b3:b5:e4:10:d4:15:f5:76:74:
9c:26:68:7c:3d:46:2d:f5:68:76:ed:75:8a:19:1b:80:4d:fb:
89:bd:4a:9f:8f:86:75:00:f7:6f:ac:3e:4f:cf:00:01:a6:a9:
13:9e:54:ea:45:24:74:fc:3d:d5:19:e7:37:0b:7e:31:10:b6:
77:5a:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:56:41 2025 by rpki-client