Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: UVSn414lgW4zk1paucBiWXPJjfmq+fnC1nAfaKHX5I0=
Subject key identifier: 6A:DD:CF:CB:68:F7:EF:06:CD:39:4D:98:71:DF:78:CC:2C:55:E5:7E
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 019A71B8FD14562B81A24F04AC0A1A636437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: GfwfUcwHTukLuF72Yq1T1s2ayX8mSPiA67UWsH9qJ6s=)
2: aQpN_AazwsYK521EYwQJi9M2iSk.roa (hash: GQsuDZdcScHpctBuVbdbtj6CCFBXdaH1ubDgAN0EZ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fd:14:56:2b:81:a2:4f:04:ac:0a:1a:63:64:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=6addcfcb68f7ef06cd394d9871df78cc2c55e57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:90:e4:8c:5b:ef:f4:dc:10:e9:9f:41:69:31:
76:0b:4c:94:ed:c8:43:1f:4d:00:06:3d:2b:fe:ed:
05:46:24:85:86:53:4a:de:e8:0e:d2:b1:24:5f:97:
47:20:dd:13:44:d5:0e:47:e6:d4:6c:21:50:19:6f:
e4:2c:92:16:80:d1:7d:45:ac:e4:77:f0:2a:31:16:
f4:ab:05:cc:4d:60:da:23:06:3f:2e:db:97:41:8e:
42:55:3b:ad:f3:c3:1e:24:81:2f:d6:b8:d7:6a:b8:
e4:dd:0a:53:4a:10:43:64:48:60:9e:a8:82:7a:ad:
24:98:d5:fd:c0:32:b9:2c:d4:47:f3:32:18:55:c8:
17:d1:b6:f9:b3:8e:fc:a5:e8:dc:a1:5c:e2:18:92:
ad:c6:cb:0e:a7:88:cf:73:83:79:c2:19:ba:2e:8d:
da:cd:f1:0f:a1:fb:07:83:35:3a:83:09:4b:58:7c:
d5:7f:3a:48:d1:f4:ca:8d:c8:ac:a3:8e:01:74:68:
6e:a8:6c:8b:c6:03:c0:71:d0:62:56:c3:e1:35:03:
0b:76:56:a1:73:37:32:99:68:5e:c5:f1:d9:a0:d0:
95:3f:b2:f6:66:f4:17:99:53:e1:38:f2:8d:4a:c8:
28:eb:23:0f:6a:41:71:0a:8e:1d:e5:fd:7f:18:5e:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:CF:CB:68:F7:EF:06:CD:39:4D:98:71:DF:78:CC:2C:55:E5:7E
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c9:cb:87:ee:d0:63:cd:83:e7:83:1c:d5:0e:b7:d3:70:ea:
1c:af:22:7d:a0:4f:a0:3e:24:3b:ba:4f:ba:ce:ad:05:21:fd:
fb:67:ec:62:38:ff:d1:c0:87:a6:3e:a6:4b:83:20:73:4c:70:
88:80:bc:17:09:05:0a:d0:05:b9:f0:01:9c:8e:f6:63:58:cd:
6a:0c:bf:d6:09:b3:f6:6b:14:a7:79:76:ed:35:55:07:ae:a3:
7e:b0:91:88:2b:d7:4a:b3:c4:a2:49:cd:62:81:99:e4:cc:f9:
2a:d2:4c:23:da:1c:9e:00:6b:6f:1b:c7:ed:7e:85:c6:2b:04:
9c:65:60:3d:79:66:1f:cb:83:b3:77:11:6b:03:29:7d:a4:d8:
d5:26:52:b6:34:94:b0:dc:2d:c7:e6:39:a7:4c:92:47:55:b5:
a6:f2:83:0b:75:19:d9:76:be:fe:50:fb:41:44:dd:6e:6f:ea:
1e:a2:49:7f:7c:bd:3c:4c:0b:77:ea:50:06:23:89:59:24:a8:
19:6f:40:fb:f1:b8:9c:b4:b8:d7:0a:cf:be:22:66:e6:c5:a7:
69:16:e1:a5:15:c1:c9:f3:48:d2:c6:95:a4:81:97:1f:47:0b:
8a:7b:fa:93:d1:2e:e1:1e:27:32:d8:04:f2:89:ff:55:72:22:
db:86:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:46 2025 by rpki-client