Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: 4q09266q/YdZHgAnMu3SJLbEHDLVWOXowxn33KsL1iY=
Subject key identifier: 5C:EC:8C:FC:7D:CF:D9:13:AE:08:D6:C4:9E:E5:EA:82:1A:7C:3C:44
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 019A330F6338E08CC33C7A2EC95365F6083A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 1703
Signing time: Thu 30 Oct 2025 03:00:37 +0000
Manifest this update: Thu 30 Oct 2025 03:00:37 +0000
Manifest next update: Fri 31 Oct 2025 03:00:37 +0000
Files and hashes: 1: HQDN-aj0TQhAX2FXvaTFWzQChUg.roa (hash: blFOlAR9sydif32qAhRClbIbQgCg0n31LrtAjrgoEug=)
2: M0bYeyfyOrMV_gB5qblOfbWilh4.roa (hash: f9XZswY2l4oflWNgmE9zU0KMUAtHHlyk4r3L1HHO+uE=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: zA03rnFis6wFGGdijY+lLDgVto1q/JSLm6vXsnz4+8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:0f:63:38:e0:8c:c3:3c:7a:2e:c9:53:65:f6:08:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Oct 30 03:00:37 2025 GMT
Not After : Oct 31 03:00:37 2025 GMT
Subject: CN=5cec8cfc7dcfd913ae08d6c49ee5ea821a7c3c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:7f:10:03:b3:e9:1d:d7:84:2b:31:95:f8:
40:a5:71:94:f7:1e:11:37:a1:47:75:bd:71:a4:dd:
3b:43:5b:31:a4:00:d8:4b:b2:ca:2d:7f:b9:4d:ec:
90:aa:81:41:ec:53:3b:95:bf:f4:36:5f:66:e4:34:
b7:04:ac:ea:9a:71:a2:35:ad:16:16:a7:ae:18:59:
b8:a0:01:53:69:75:9b:6c:10:bc:80:54:bd:ce:2a:
5c:f9:fb:8d:8c:d8:50:6a:2a:c8:87:31:ca:3d:73:
90:3d:58:a6:33:f5:f6:ab:0e:2a:78:1e:7b:ae:b8:
46:34:52:1e:0c:79:15:e8:67:98:fb:4d:bd:10:87:
ad:ad:8f:9d:aa:46:fe:a2:82:24:b3:96:23:35:ca:
3d:07:bb:ac:aa:ef:52:e1:85:d6:6f:2f:18:ff:07:
dc:c0:27:19:5a:35:06:30:2c:f6:16:d3:f4:a9:77:
da:39:2e:07:87:3f:64:80:4a:c9:99:0c:61:35:51:
30:94:26:33:3b:bd:c5:a2:df:61:80:fe:06:ca:51:
51:35:d3:c8:06:dd:d0:b6:90:fa:82:2b:e4:5f:22:
9a:e5:49:c2:8d:7b:d7:1c:15:62:d4:fd:40:6d:bc:
e5:4e:84:3c:fd:87:b7:f1:9a:64:70:10:31:cb:69:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:8C:FC:7D:CF:D9:13:AE:08:D6:C4:9E:E5:EA:82:1A:7C:3C:44
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5a:bd:c1:bf:d1:86:07:ef:08:4d:d2:6f:f2:87:bd:ce:11:
e5:41:35:a3:c9:07:79:37:42:a8:40:f7:cb:af:5f:9d:d9:f3:
c9:45:13:35:1b:58:c7:b9:83:8a:db:a4:2a:61:78:5d:42:23:
21:89:26:36:e6:95:ad:92:95:a8:9b:8d:34:a9:7f:3f:8d:3d:
ff:f6:86:06:21:7c:3b:cd:01:60:4e:e6:fb:6a:ce:44:a9:0a:
2a:27:c4:ee:7d:0e:0a:58:fe:12:7c:b7:26:58:fc:e5:4f:a7:
d2:f5:dc:af:92:a3:ba:18:38:ac:59:e3:ad:29:ee:a8:71:77:
a4:67:d1:c6:06:ce:65:90:45:e0:9e:9f:80:26:41:af:8a:90:
96:95:6e:ca:4b:62:5d:20:1d:c6:d6:41:32:f9:87:21:57:d5:
a6:b6:14:7f:0f:72:75:68:fe:9b:a8:b1:9c:fb:d3:56:5d:c0:
9b:3a:ea:30:ca:df:c1:cb:95:8c:35:8d:51:ee:bb:a0:1a:b5:
45:a3:66:99:f2:4f:51:85:a8:80:4e:33:9a:3f:93:76:e4:c5:
b0:27:d4:1f:6b:5c:f5:0f:33:5b:1f:50:16:cd:27:36:1d:7b:
fb:15:88:9e:9d:ae:a0:62:cd:ba:b7:77:28:0e:6a:ae:01:91:
a0:62:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:50:05 2025 by rpki-client