Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json)
Hash identifier: b6Nq+CfHJF1TNY1/8kF1fFPBzn1ncGEVHDGhNrIlSwo=
Subject key identifier: 7D:84:25:D4:FC:AC:D9:5E:AC:EF:69:84:B0:3C:38:48:A4:EF:CF:27
Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347
Certificate serial: 019A71B89F6DE582088FB4F4085A108084B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: UGjGolH12_x3cCDDDs-wfhhaN4U.roa (hash: FV6D5mk0nwiH6BRySmQ169aN1Z1SEVl4Kc/yfJEULos=)
2: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: nIdq9uW3My6xMqqMjfeexqI71Cc/0Y5zzNZQJM4MxxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9f:6d:e5:82:08:8f:b4:f4:08:5a:10:80:84:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=7d8425d4fcacd95eacef6984b03c3848a4efcf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:d5:8d:f0:40:3b:25:fc:86:e6:78:45:35:
f1:9d:a0:3c:41:d3:b1:e2:a0:e2:a8:c7:ec:35:68:
01:dc:df:38:80:93:0c:ca:78:3d:23:cd:f2:27:04:
19:f5:bf:b4:d9:5a:15:7b:b5:cd:2f:b8:cb:29:d5:
0c:13:90:47:27:f8:45:b4:04:56:4c:29:98:86:84:
37:b4:b5:ed:ca:61:f0:ec:d5:68:af:17:54:2c:49:
af:c7:2c:4e:ac:0d:51:29:68:af:60:85:b1:f3:86:
69:0f:76:e7:ee:fa:69:35:1b:21:f9:9c:8d:ec:92:
4b:7f:5f:73:fc:25:15:f3:00:43:02:16:a0:5d:ca:
2e:15:2e:3e:0c:31:cf:f6:18:b4:6e:88:af:29:16:
d8:5c:74:2d:55:3b:09:91:69:18:4d:ab:fc:62:b4:
91:b5:b6:02:dd:c3:bd:d9:ed:d6:d2:da:98:7f:34:
ab:91:dd:c0:d7:50:89:7d:0f:c7:12:cd:11:aa:b1:
f2:f0:f0:a2:28:67:05:cb:48:9e:35:40:b5:58:91:
49:58:94:69:8e:a9:bb:2b:63:29:a8:2a:15:f5:ff:
4f:96:02:7a:a2:59:a7:8a:95:35:ef:d2:64:91:24:
e2:54:61:4b:c7:8c:7e:22:da:b9:86:a3:48:f2:07:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:84:25:D4:FC:AC:D9:5E:AC:EF:69:84:B0:3C:38:48:A4:EF:CF:27
X509v3 Authority Key Identifier:
keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a0:2c:3a:b9:b3:14:39:43:c6:55:04:4d:fb:9d:7c:69:0d:
df:04:fa:15:6a:f5:ac:14:47:76:f0:1a:6a:ab:11:22:c6:b7:
62:d2:c3:8d:d8:21:cf:cc:e7:94:54:e2:85:2f:ea:a4:95:63:
9e:71:65:05:1b:76:d1:fb:7e:c7:1d:10:8f:06:8c:e7:26:ae:
4f:21:1b:ce:9c:34:29:41:69:5c:08:08:c7:33:d8:e2:69:5d:
0a:12:50:89:a0:e4:7d:ab:4c:d7:42:77:5d:a4:c8:d0:99:9d:
fc:c0:2c:26:06:51:5b:74:ca:97:9c:de:33:e6:bd:80:81:a3:
f0:a7:4b:34:04:58:17:1b:d4:62:be:e4:24:5a:9d:53:99:9f:
ed:da:32:59:91:2d:5b:fb:77:05:1a:03:1f:d9:05:d0:96:e6:
73:0f:56:72:94:ec:19:e8:eb:e1:c9:2b:b7:9d:63:74:fc:53:
28:e6:40:7e:63:2d:9b:06:84:4f:35:b2:e6:ee:e3:9f:c6:cf:
9d:f0:a9:4e:5a:21:47:ef:36:82:d2:43:87:dd:d8:33:11:2b:
6c:b3:c2:ab:ff:2b:df:25:8a:8b:1b:b9:9d:fb:eb:7b:ff:70:
92:5f:c8:a6:60:7f:fa:e2:7b:34:03:b4:7e:bb:8c:6a:02:d2:
5a:65:42:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:09 2025 by rpki-client