Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: IKZsoA16x+/gsv3KnwphRYHUfQf17AAs2czRJsNy3Ek=
Subject key identifier: 11:AF:E5:42:C0:3D:B1:7C:05:B9:43:7E:68:B0:1B:ED:EE:BA:7A:96
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 019A1C198966F19464E8FD794FD937C0C601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 0F60
Signing time: Sat 25 Oct 2025 16:00:26 +0000
Manifest this update: Sat 25 Oct 2025 16:00:26 +0000
Manifest next update: Sun 26 Oct 2025 16:00:26 +0000
Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=)
2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: bNeIBUfWAcQ2hdBfjqirQOwB8dAT/ZTn62qyzrX87+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:89:66:f1:94:64:e8:fd:79:4f:d9:37:c0:c6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Oct 25 16:00:26 2025 GMT
Not After : Oct 26 16:00:26 2025 GMT
Subject: CN=11afe542c03db17c05b9437e68b01bedeeba7a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:56:00:d2:61:22:95:d7:f8:e9:0f:d8:3b:23:
c0:01:64:bc:62:45:f3:f5:6a:26:e5:e8:24:33:2a:
f2:cd:f0:a9:a7:a7:a3:85:a0:77:3d:d5:8d:d2:55:
54:df:3a:0b:77:e0:71:d9:7d:1d:59:cf:57:1d:5f:
2b:2f:fe:31:78:44:d7:68:d1:ba:41:54:a5:69:45:
41:cd:e4:5c:2b:2c:a7:22:34:65:73:b0:64:c7:06:
d5:09:c1:59:79:6b:f5:a9:19:b6:9c:0c:bb:bf:fa:
1c:fe:03:d6:62:b5:6e:ac:a1:21:28:a4:ac:82:f4:
38:b8:d4:52:bb:36:47:24:48:df:57:7d:d4:16:04:
de:ea:1d:8e:e6:c3:f8:91:e6:36:39:97:3c:a2:42:
53:af:ae:21:0e:8a:66:3b:00:cb:7f:13:ce:49:5c:
e6:a9:f8:63:3c:5a:8d:45:10:e8:c0:02:3b:c4:52:
2b:e2:4f:48:ef:cb:1c:85:2e:0c:9e:00:f2:9e:61:
0d:be:30:19:38:33:05:07:f9:ab:28:e7:b7:65:ae:
28:50:02:bb:8a:c4:3e:6a:25:7b:d3:95:b3:f3:da:
c5:4e:82:e3:dd:da:f3:74:de:98:bf:c8:4c:6e:b1:
6a:55:4c:e9:0c:3b:65:cc:f6:01:dd:1e:a3:1f:71:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:E5:42:C0:3D:B1:7C:05:B9:43:7E:68:B0:1B:ED:EE:BA:7A:96
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:84:f0:bc:25:04:2f:c0:81:38:b0:54:cc:a3:5b:3f:33:a7:
94:fb:c6:39:a6:06:43:8b:2b:23:e2:26:f2:88:7c:cf:08:5d:
55:16:b1:5b:47:9d:bd:14:3d:dc:bf:65:84:c4:4d:72:61:e2:
5c:ff:88:bc:64:5b:13:e5:17:4e:38:d6:02:c6:ff:a9:41:8d:
bd:b9:8f:15:d6:73:53:5c:9a:14:18:67:af:da:17:f8:43:6c:
5b:37:dc:55:a0:bb:04:10:a5:ae:bf:af:89:f5:75:4b:2b:09:
dc:9e:63:5a:6a:d4:7f:4c:76:21:f9:0c:c6:be:9f:7a:fa:37:
8d:e8:e2:20:e7:0b:47:a6:f6:a0:c8:29:3c:9b:95:39:68:d2:
5b:1d:ea:d2:17:4d:11:25:0d:1c:77:28:82:19:f1:b7:13:ee:
c1:e0:10:17:1c:17:75:bf:0f:08:6f:e5:61:b7:a3:75:35:5e:
6e:95:0e:ae:31:4a:67:4d:c9:f3:58:c6:82:b5:fb:66:ff:7a:
17:4b:c1:42:33:3c:8b:93:7b:ae:24:99:ad:a1:8d:8c:cb:85:
2e:3d:35:f8:63:93:b7:b3:66:2c:0b:9d:1a:c6:4a:33:68:09:
99:d0:97:0f:93:df:d6:a9:78:fd:22:e7:a3:f1:8a:7a:9b:4b:
e4:93:4d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:03:10 2025 by rpki-client