Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier: 2bVrWCmt7OXyjVcdJEkLUmkbmywpTrcXojdZ4XznEAI=
Subject key identifier: 64:7B:90:2A:1F:5E:65:E4:F8:80:17:10:19:DF:2E:A1:05:80:D2:03
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 019A71B7A351278D3FE49E54BB231F06B5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number: 0E76
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (hash: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=)
2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: gENAJto279WMdNDEA9XusNMiszx8tmbtcJVpIGs3w/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a3:51:27:8d:3f:e4:9e:54:bb:23:1f:06:b5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=647b902a1f5e65e4f880171019df2ea10580d203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:f5:60:2f:56:4d:2c:c6:71:13:33:b4:ce:
54:9d:07:ee:fd:21:36:b3:5e:fa:d1:31:fe:34:ff:
44:3a:be:9e:37:29:dd:ed:c1:f5:c1:5b:a5:69:98:
1a:e1:0a:5b:35:3f:4c:bd:86:40:09:0c:25:03:1f:
12:e1:ad:c1:70:29:e4:2a:37:d4:4a:33:8a:51:34:
06:47:3d:9b:83:74:1c:d0:69:73:9b:8f:16:81:77:
43:dd:72:07:7a:fd:d1:39:5f:68:84:71:07:c7:47:
18:7d:03:08:b0:10:26:f0:c4:64:19:30:54:75:4a:
43:75:a1:d4:87:cd:73:6d:e2:a9:6b:0f:0c:3d:2c:
5b:1f:5d:fb:81:24:7f:d8:61:55:91:7b:0a:a2:bc:
71:aa:ab:77:f2:fd:1e:f8:ca:59:ef:e8:69:47:15:
94:2c:82:88:c7:d4:f7:cf:cf:c2:27:57:83:81:f0:
c3:47:0e:46:63:1b:73:f9:86:3a:e6:21:b9:c5:8d:
e5:17:9f:0c:d1:7f:99:52:33:fe:90:25:73:af:c4:
13:05:ea:c3:41:cf:0f:bd:cc:f0:5b:05:22:50:53:
83:d7:ee:55:ad:d9:b7:7b:9a:d8:e1:2a:f6:3e:c6:
6d:8c:92:c7:e9:4f:ec:e9:a5:66:a3:3c:1b:80:a7:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:90:2A:1F:5E:65:E4:F8:80:17:10:19:DF:2E:A1:05:80:D2:03
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:eb:b3:54:df:68:35:1a:03:f6:c6:ab:70:e6:9f:b1:f4:00:
c3:df:c1:3d:bc:d1:78:94:aa:00:06:59:15:70:11:62:2f:a8:
37:6c:9d:3a:ee:e5:54:24:2d:aa:c4:c2:7e:a8:38:6d:d7:ec:
e8:de:02:7f:e9:6d:5e:1c:cc:98:0f:6d:70:3b:e5:e9:52:93:
ee:c2:b2:3c:ed:b8:9e:d2:3a:e0:4b:08:f7:4b:bb:48:7c:6e:
79:d2:d4:7e:a6:f8:de:b9:28:49:01:dc:3d:3a:14:cb:6a:32:
71:8f:56:b9:dd:d3:76:44:2d:cd:d5:b5:b4:ca:f4:04:1b:7f:
4a:28:be:f1:f9:01:35:13:1b:59:c8:33:46:dd:9d:d8:7c:fe:
5d:d5:2f:da:8e:d2:51:ed:d8:f5:b3:ba:0c:c8:d1:4b:2f:61:
1a:37:da:78:63:38:13:ca:c2:c6:f8:b9:70:a0:5a:f2:ce:b3:
85:95:8a:58:97:72:23:7b:d9:ea:ef:a0:95:9b:41:c3:02:84:
d1:9b:aa:47:5f:ff:57:79:8e:3e:3b:17:f0:47:98:b4:21:53:
54:00:83:72:24:a8:ca:f5:7d:62:e9:03:d4:cc:f5:ef:17:ba:
21:bf:3a:47:eb:dc:80:2a:16:6f:5c:3e:3f:d8:88:eb:be:65:
7d:60:b8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:02 2025 by rpki-client