Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: XHmo1/vk5KSpqrrRlyHTXxTYVkXdhB8Y8QWS85RvRws=
Subject key identifier: 60:B5:D9:69:75:63:38:44:67:60:59:F2:42:3D:AA:A2:33:2E:5E:49
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 019A70DBE399B795B78B77442662BBDA5AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 07F6
Signing time: Tue 11 Nov 2025 03:00:50 +0000
Manifest this update: Tue 11 Nov 2025 03:00:50 +0000
Manifest next update: Wed 12 Nov 2025 03:00:50 +0000
Files and hashes: 1: 7NPjy0_LNEtrF1BCG60HRzqdKlw.roa (hash: QFPKpHBMjVle5FlNRbqdK60lHpC8YmYJkA7cV7MHx8U=)
2: MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa (hash: JedpLzW0zBpuOTjRbrIzIVmoqdb1dCTDslO3G1N2Fuc=)
3: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: zODyN8Qcyyt9nlp9c51eEFN/xIoLEWjG0dSRwykiluA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e3:99:b7:95:b7:8b:77:44:26:62:bb:da:5a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Nov 11 03:00:50 2025 GMT
Not After : Nov 12 03:00:50 2025 GMT
Subject: CN=60b5d96975633844676059f2423daaa2332e5e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:fa:c1:a6:1e:f1:1e:f2:7f:b5:19:9d:ee:
f9:61:15:db:fa:8f:24:79:a8:8e:62:c7:2f:4a:8f:
eb:9f:cf:71:8e:5e:52:09:5f:6f:87:9a:6c:ca:07:
c2:48:68:1a:03:90:85:ad:ad:83:79:bd:68:d8:8b:
29:26:19:62:3c:ce:59:48:08:f3:78:e5:c6:11:f8:
0c:aa:5e:d5:93:98:f8:d8:8d:1f:96:57:cf:33:5d:
86:77:c3:0c:f5:00:29:8b:5f:f0:49:ef:c9:fe:f2:
2d:b8:b6:d3:9a:37:0e:78:02:83:b0:27:37:13:66:
17:18:8b:5f:eb:d5:fa:be:18:4a:6b:18:d7:77:60:
d6:16:10:39:70:3a:56:b9:96:f4:d0:0e:d5:68:38:
22:be:9b:20:14:6e:f0:4e:b0:d9:92:79:fe:92:02:
75:80:83:6e:e1:1d:32:8d:28:6d:73:11:5f:6c:e4:
2c:2a:00:55:f8:64:ac:e9:53:49:25:11:fc:fd:00:
08:88:4d:2c:9d:82:02:62:48:f0:c5:fb:66:45:3a:
a4:c3:6f:47:05:a0:cb:5f:77:35:9e:94:ad:d7:dd:
1e:a4:10:2d:88:ab:dc:1e:c8:38:35:33:30:98:1a:
25:02:74:27:f5:79:70:4d:11:9c:d6:87:ae:51:89:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B5:D9:69:75:63:38:44:67:60:59:F2:42:3D:AA:A2:33:2E:5E:49
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6b:ed:28:c1:80:cd:a0:bf:70:9e:ac:70:a3:f3:d2:71:d4:
01:9f:7d:81:b9:8f:02:8c:c4:67:af:43:c2:5b:65:7b:1e:43:
bb:dd:c7:b2:3f:a5:13:af:3d:a9:62:5c:8a:6a:6e:d7:73:70:
d6:98:9b:5d:0f:53:90:e1:65:37:9d:28:95:ed:b3:66:4c:81:
97:e7:6f:ba:48:a1:fa:6f:59:81:ea:a6:c4:c5:da:6d:37:39:
65:2e:f6:58:f8:b1:9a:06:3c:98:8f:16:2c:7a:b5:fd:07:df:
4b:3a:15:86:9e:c4:71:4c:f2:25:0f:80:72:98:62:cf:44:92:
c6:e8:23:84:58:35:dc:26:90:62:c3:64:de:f2:d0:de:b7:e9:
2e:90:c0:d4:8d:68:2a:d5:f2:a3:5a:8a:f8:78:cd:cc:74:7f:
5a:3e:98:8c:64:34:a2:ce:9f:92:d8:da:36:54:c4:a1:ea:db:
56:10:4e:3d:1d:8b:25:06:f1:d9:a9:09:3f:88:8e:b5:3d:26:
12:c7:d9:eb:2d:d3:0e:95:4c:95:da:73:8c:be:b4:c5:fd:42:
d9:27:7b:d5:bf:45:82:a7:1b:89:56:3e:ba:2c:7a:67:25:04:
58:d5:e3:81:03:b7:fa:0e:b3:a0:3c:ac:22:a6:7f:f4:5c:36:
53:a5:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:31 2025 by rpki-client