Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: 2pJHO3hiL6Vw6IdJApvEqJz3NjOcrJ6TwJ8es3y60AE=
Subject key identifier: F8:56:BE:63:4A:93:FB:F5:44:C0:E4:0C:B7:DD:E9:0A:47:02:54:8F
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 019A2478F6F6A470618F2017C94513D56619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 0713
Signing time: Mon 27 Oct 2025 07:01:38 +0000
Manifest this update: Mon 27 Oct 2025 07:01:38 +0000
Manifest next update: Tue 28 Oct 2025 07:01:38 +0000
Files and hashes: 1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=)
2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: CYULou/HUD0OjCpSImMsQbb9uGcEQNZBXgSYdbjHpp4=)
3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:f6:f6:a4:70:61:8f:20:17:c9:45:13:d5:66:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Oct 27 07:01:38 2025 GMT
Not After : Oct 28 07:01:38 2025 GMT
Subject: CN=f856be634a93fbf544c0e40cb7dde90a4702548f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:27:e1:00:b8:46:0f:64:94:29:88:f8:79:
d7:0d:67:23:7a:b0:fe:20:94:b2:9a:f7:79:d1:bb:
54:9a:2e:a0:b4:57:30:80:12:0a:aa:6c:b3:3a:e1:
e8:94:50:64:f0:b6:02:71:96:d3:02:27:8b:d4:f0:
88:ff:01:c5:06:51:17:82:a8:3b:73:48:45:f8:57:
3e:14:34:a3:93:e7:84:6e:a7:5a:69:0e:39:56:d5:
df:58:79:3f:20:9a:4d:4a:9c:d6:4a:84:16:48:7a:
07:37:0e:b1:0c:cd:0c:d2:ab:96:20:06:78:71:1e:
8a:29:6b:58:b7:94:77:5b:11:cd:12:31:91:74:74:
5d:ec:a5:e4:a1:1a:b7:01:ea:dd:a5:d7:83:c2:73:
c0:bf:e5:2a:3a:c7:f9:ca:49:78:ef:14:db:0d:24:
41:e4:2a:ad:b4:6b:5f:34:b3:a8:54:d8:bf:e1:3b:
57:8a:54:b8:a1:ab:7a:f4:9c:11:be:27:ab:a5:83:
fe:cf:c8:5a:be:37:3e:75:9e:6b:48:59:f6:54:47:
13:d9:cc:fc:8e:a2:56:fc:cd:ec:34:48:dd:9d:56:
95:97:3f:f9:45:4d:66:bb:37:bd:21:35:64:97:59:
dd:16:82:21:a5:4e:bd:9b:97:38:c0:9f:e7:14:34:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:56:BE:63:4A:93:FB:F5:44:C0:E4:0C:B7:DD:E9:0A:47:02:54:8F
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:09:61:ad:19:9c:a6:6a:43:3a:20:3c:8e:82:3d:c4:23:60:
d7:ce:b2:fe:90:11:49:9a:7e:94:37:cf:05:dc:b1:d3:7d:5d:
69:f4:16:4f:61:4f:ac:4f:ec:4c:bb:50:be:9a:28:39:d6:a0:
f8:4a:ec:95:e8:a5:ee:2f:82:36:95:c3:ec:f4:44:40:47:37:
c7:8d:3b:98:ed:4e:bc:89:5e:d4:de:51:6e:16:d2:cc:2b:c7:
62:6c:a3:70:bf:ea:86:13:fc:f2:5d:e2:02:81:92:b2:07:71:
7a:aa:a9:aa:54:6d:ed:cf:90:b1:2d:55:9c:c9:50:0f:63:7e:
13:0e:5e:a8:75:61:cb:9b:9a:7b:6c:f7:f5:49:d9:24:12:b6:
06:92:27:65:1f:7a:41:e0:b6:f9:48:92:e7:f8:3e:cd:cb:e6:
20:48:8c:7b:1f:a8:3b:2c:47:fb:92:8c:57:3f:b7:f3:bc:43:
04:62:7f:c7:43:5a:cf:62:b4:9c:2b:42:6c:c8:ff:c9:fa:03:
da:88:01:85:27:ad:ff:95:40:01:90:af:50:66:ad:8f:87:83:
32:8a:ce:c3:f0:59:b3:6f:5f:90:17:34:e0:dc:0b:0a:eb:82:
ff:e9:42:8a:c2:03:3d:e9:52:c7:1e:5f:21:59:c0:88:a5:83:
f6:60:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:16:04 2025 by rpki-client