Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier: yzawvyprCLk4nD+NWM/VgPp8CQSpeb4cfriE0+tsxYM=
Subject key identifier: B9:22:18:3C:69:92:36:5F:A3:75:9C:3E:A6:DF:FA:65:E9:49:CC:E4
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 019A559B2FD373B38754A7290680257C8535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number: 08F2
Signing time: Wed 05 Nov 2025 20:00:24 +0000
Manifest this update: Wed 05 Nov 2025 20:00:24 +0000
Manifest next update: Thu 06 Nov 2025 20:00:24 +0000
Files and hashes: 1: 1-dSr_bwrsUwvfc9qQEvsXILMv3w.roa (hash: SF5ovM+mleomLfSZp/NHDAE5s82AVbxDbWTJFXrQrE0=)
2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: FF1XsC1GPe3qsSiYWWduFYoHvuE1YVfMLIU6YmX08O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:2f:d3:73:b3:87:54:a7:29:06:80:25:7c:85:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: Nov 5 20:00:24 2025 GMT
Not After : Nov 6 20:00:24 2025 GMT
Subject: CN=b922183c6992365fa3759c3ea6dffa65e949cce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:4e:af:00:ca:8f:22:0e:e5:fd:e5:d6:9e:
4d:d7:e1:6a:cc:77:56:0e:45:2c:0e:44:76:c1:d7:
7b:39:26:bf:cd:a5:ef:10:40:de:cb:bc:78:86:90:
df:32:bf:7a:07:f2:b0:fc:53:75:12:b2:e4:a8:8b:
e9:b8:49:7c:9f:fc:3c:40:34:e3:ca:f8:23:90:4a:
5e:eb:f2:68:a2:4f:f3:a9:29:4e:b2:29:3d:2d:c2:
35:01:c0:48:90:4d:d5:ec:c0:bb:59:c7:0f:7c:d3:
00:fc:fb:5a:9b:1e:ac:35:73:30:b0:18:d4:35:34:
22:67:b0:0a:1c:40:79:a0:53:5a:8b:c7:f3:1f:55:
39:60:ca:84:9c:0c:48:79:1d:56:d4:f8:fd:2c:11:
d9:95:4e:4f:57:99:5a:d4:2c:2e:c0:8f:e8:b7:b9:
72:38:98:68:be:97:ae:23:89:f7:42:d7:32:1d:6d:
14:14:3a:69:c2:5b:18:c9:a9:6e:45:0f:ed:2c:92:
b8:0b:27:ae:c2:e5:32:40:e5:29:97:86:3e:30:03:
a4:22:b5:d5:7f:51:d1:ae:ad:a6:61:fa:70:c2:92:
45:53:d4:b3:b2:b0:94:3f:49:4f:74:70:6b:32:e5:
c9:3e:ee:5e:23:ab:ba:ef:a5:f7:55:52:ff:e2:1f:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:22:18:3C:69:92:36:5F:A3:75:9C:3E:A6:DF:FA:65:E9:49:CC:E4
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d7:d5:6e:ab:85:a0:da:aa:48:68:08:dd:e6:ef:a7:ed:45:
ca:8a:88:02:33:f1:ab:ee:05:8e:3b:f3:b7:48:ee:da:a0:d7:
fc:af:b7:78:d6:25:81:ef:a3:7f:1f:f0:cf:5c:9f:89:7d:d6:
99:ef:ca:a5:55:d6:a8:88:e3:95:a2:7e:3c:58:82:dd:71:0b:
e5:11:29:4b:65:05:63:dc:9c:52:ce:82:a5:a3:e9:ca:76:21:
01:0a:ea:73:3d:2d:2a:fd:19:2c:5b:39:b2:e7:09:18:22:bf:
da:a8:91:65:3b:07:9f:48:7f:eb:1c:8b:c7:22:1b:16:09:7a:
5a:ee:47:cd:f5:4a:f4:a8:77:a6:98:e2:97:e6:6d:49:da:e8:
81:93:6d:4b:1e:2b:f2:5c:fd:f0:80:b4:11:73:16:49:40:53:
de:81:af:a0:66:f8:ff:c4:2d:d4:94:50:2d:b9:7d:e9:49:b0:
e0:61:ef:f8:7e:e6:fb:c6:77:64:b0:a8:2f:c6:71:88:78:28:
21:93:1b:8b:5e:9e:3a:1a:bb:fd:b7:01:21:0d:b5:33:5c:8f:
60:93:b9:0d:de:35:8d:3f:7d:50:f6:67:b3:25:22:94:bc:14:
79:51:d5:2b:a0:dc:df:d0:85:65:1c:e4:20:ac:02:90:ca:3c:
a8:f8:0a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:47:44 2025 by rpki-client