Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: oOENiDPn1dlDlH1TSPWQGF/SkYyYTYeFdHGibUk0CYg=
Subject key identifier: 87:19:18:05:E8:45:E9:C1:D6:3A:CF:19:17:CA:19:5F:C7:DB:56:05
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 019A71B8CC60E5475478FA523F1A8DD477C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 06E8
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: 3DVmYVWdEFXpfGfd8oXaxkeQRUqQVqOvgdRPmo5OdME=)
2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cc:60:e5:47:54:78:fa:52:3f:1a:8d:d4:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=87191805e845e9c1d63acf1917ca195fc7db5605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:80:ed:4c:9c:b0:44:2a:fb:08:27:28:d6:
15:1e:d7:17:d6:28:30:69:b0:1a:da:a6:b6:32:14:
6c:9f:94:27:90:41:59:37:c2:99:2d:c4:ae:68:05:
ec:e9:28:03:ec:d6:37:47:42:c4:77:65:84:0f:58:
13:1d:aa:f0:4e:d8:52:8b:db:03:c7:80:bc:ee:1e:
46:a0:25:ec:1e:f5:1e:a2:b3:ea:f3:b4:7f:50:27:
02:e3:42:2e:4e:b8:e8:a5:dd:ec:82:ea:16:12:3d:
b2:89:2b:31:3c:8e:77:c8:58:15:05:49:ca:2a:16:
b2:84:cb:0a:ab:9a:3c:f7:a7:58:31:49:ac:78:60:
c9:46:23:cf:03:40:b6:d1:38:5e:20:23:7c:bc:c6:
dd:b1:aa:3f:0e:cd:d1:6d:d1:c9:89:2e:cc:2b:bc:
9e:4f:05:01:9d:3c:da:51:ff:c3:2b:65:6e:67:f2:
59:08:36:3b:71:e2:1f:1e:61:bf:f9:e5:34:54:ba:
1e:dc:e3:84:a0:5c:27:6a:56:ea:41:99:fb:15:94:
60:69:59:7b:d0:1b:68:ce:b5:06:82:13:0f:5c:6a:
81:e1:b8:dc:fe:52:54:9f:e7:c9:51:d8:d6:5a:d3:
b5:da:22:1a:06:28:f8:27:a4:d2:6b:14:90:ca:6b:
cd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:19:18:05:E8:45:E9:C1:D6:3A:CF:19:17:CA:19:5F:C7:DB:56:05
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b1:96:a3:d1:b7:49:e6:66:a5:ec:c0:20:1f:2d:00:4f:b7:
55:34:f3:a9:ad:1e:18:b0:a7:65:95:e9:02:cc:ed:02:5c:4f:
8f:8d:48:5d:a2:ee:c0:81:fe:97:6e:9b:8f:e7:f6:30:34:7a:
57:76:73:de:e6:ac:5f:1c:8f:1b:05:d7:12:b2:1d:f7:f1:f1:
1f:af:b2:07:b8:ed:b5:3b:70:47:47:91:43:1c:3f:06:0a:f1:
cc:4b:11:1a:4d:5f:a6:36:2a:94:91:15:98:b5:e7:15:68:69:
64:10:b5:ae:2a:f4:ba:c9:fd:ca:a3:f8:4d:0f:e0:61:39:97:
b6:aa:9c:3b:40:d3:69:f0:c6:1a:e8:b6:b8:2d:23:d1:bb:2c:
e6:08:fc:cb:a5:7b:00:c8:82:6e:17:2e:fe:2e:c2:16:71:dd:
1c:0d:97:29:da:80:c8:37:b5:0f:09:75:95:e0:34:0d:d9:34:
fe:74:15:06:d5:b1:4d:8d:94:65:77:5c:ac:8f:ff:02:39:f8:
d9:03:54:93:16:f4:bc:fe:ba:58:a7:e0:d2:d0:fd:2a:1b:f0:
78:02:9d:7c:ff:f4:b6:cf:2c:63:88:b0:1e:85:0c:40:98:3b:
6a:07:43:2c:f1:19:0b:b5:ea:38:ab:8d:75:b6:b9:97:b2:73:
d3:98:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:14 2025 by rpki-client