Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: 4NeLe6q0dVwMqE2g4ljatqhD5SnXmhpY2BmTzEI8CG8=
Subject key identifier: 92:F6:37:B0:1D:9E:EB:71:61:4D:E3:0A:A7:54:52:79:EA:B6:EF:4E
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 019A71EEF686168976FA88721DC284FB0C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: 03DD
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: SiF2KjmKiPdVyQrFCnfxUG+tpiuVOGsbSrYzxSRHrUg=)
2: kGTMJp8YWdhCRnyfOKgxhKChBJQ.roa (hash: ZVU5RQX8MRgj32JsdxWQo2xXu6d3VcvuzIOlJ8aVzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f6:86:16:89:76:fa:88:72:1d:c2:84:fb:0c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=92f637b01d9eeb71614de30aa7545279eab6ef4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:f6:a5:f8:d9:ef:f0:cb:2f:1b:0c:30:f0:
58:81:78:1e:e8:a8:e1:57:aa:90:ac:75:57:24:67:
d5:09:52:23:80:11:a8:40:a2:09:f4:01:06:12:ea:
63:34:23:68:61:88:86:ce:a8:34:7e:6f:4d:db:b9:
3c:86:7b:64:e7:ac:da:3e:3b:0c:7f:5e:3b:c0:99:
ed:82:86:de:2d:06:a0:92:38:95:c1:d5:d4:b8:81:
7e:79:46:1c:6c:02:02:7c:eb:51:94:4a:ab:82:1d:
c6:c2:54:a3:af:06:da:f3:08:d3:2b:38:f6:1a:c7:
82:de:9a:da:77:8c:b2:53:5b:95:9d:3f:66:7d:23:
72:a5:aa:36:b5:f3:23:28:8c:f6:1a:b5:c3:b4:9a:
a3:05:d8:4e:e2:44:75:12:c5:68:8e:9d:dd:ab:87:
93:09:71:8f:8f:60:02:ae:79:83:76:37:32:26:cc:
76:ad:29:2b:af:3c:1d:2d:92:43:f2:58:35:ea:92:
1c:5b:18:c5:8f:a0:b9:7a:a5:f7:2a:91:6e:84:5c:
7b:ad:05:b6:d5:a6:3e:3e:30:4d:0e:7a:74:9e:00:
3d:00:54:3d:89:c2:dd:b2:4e:91:b6:1b:e5:59:05:
9c:4f:df:0f:29:09:4a:59:f8:1e:79:ee:3c:e4:c6:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F6:37:B0:1D:9E:EB:71:61:4D:E3:0A:A7:54:52:79:EA:B6:EF:4E
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2b:08:09:38:75:c3:46:73:1e:38:1e:c4:bd:dc:4d:89:a3:
c4:c4:7d:8f:f6:a0:4d:f8:83:e8:05:36:9b:64:cc:96:8c:e3:
fe:83:e9:df:86:9a:4e:9f:e3:be:f9:8b:e8:d7:cc:f2:dd:dd:
87:de:2c:2e:05:8c:5b:cf:b4:74:e4:14:61:8f:3d:42:0b:cd:
44:86:7a:29:99:e0:3e:0c:8a:7e:a6:8f:c1:89:0d:60:71:02:
f7:7d:44:97:56:9b:d4:2d:d7:ee:9f:64:90:3e:f5:db:76:30:
c2:4a:39:38:bf:bd:4b:49:7d:ba:b0:83:b6:51:aa:82:34:d8:
56:3c:1f:25:41:de:f2:14:5b:54:74:b4:5d:dc:3a:f0:0c:a2:
28:d5:d9:8c:db:5a:73:45:77:df:82:a9:8c:08:ae:dd:14:fa:
ea:0e:47:94:25:8e:2d:09:65:ce:6f:c6:49:da:2b:d6:44:ee:
7a:06:b2:ec:81:5d:86:4e:da:76:e7:df:69:ac:b6:a9:55:24:
e8:e9:79:d3:62:ea:d0:25:84:b5:7a:80:a9:3b:47:7a:e6:2e:
2d:96:49:6f:c9:c2:29:e2:fb:90:19:f8:55:ad:a8:2f:d9:54:
3f:68:bf:43:7c:40:f3:f2:e8:d4:e2:91:45:62:ab:ea:df:a5:
d9:f5:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:36 2025 by rpki-client