Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
File: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft (raw, json)
Hash identifier: 0mX6nawPmFF8DVI0X5lmTvSeKFilF3wNe63zpb9MudU=
Subject key identifier: 2F:DA:AC:89:7D:6D:4A:C9:38:EC:E5:17:E0:24:F9:8A:77:B8:24:7D
Authority key identifier: 63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
Certificate issuer: /CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Certificate serial: 019A72260BBC3819CA2BEA868D5512F2C605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
Manifest number: 087D
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: Xh4ptPl3loyr5HsYAeq5bigmrnc.roa (hash: y+GdTxJAoh6FrrDJ6BHqIZq0hI9csiMuoRcI0N0qK/0=)
2: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl (hash: AcBQPjOpSDpSnL+xPnYdmKN3lHE5T6/gqXX7Xe7aWG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0b:bc:38:19:ca:2b:ea:86:8d:55:12:f2:c6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=2fdaac897d6d4ac938ece517e024f98a77b8247d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:f1:28:c1:96:57:17:70:81:f0:f0:63:00:
fe:02:c6:ba:cc:36:f4:25:64:42:af:92:11:b5:1b:
ae:5d:f3:8c:49:2a:32:38:d7:cb:0f:f3:cb:ee:d5:
8c:18:ea:32:49:18:36:43:4a:41:4c:d5:e5:0c:3a:
35:ea:cf:05:ea:f7:57:07:f4:b2:c9:ec:60:6b:49:
70:a7:52:f2:fd:62:a3:37:5c:06:2e:e6:7c:89:24:
32:4f:06:46:31:78:b8:c3:5c:7f:8c:80:a9:32:d3:
27:ea:2b:bb:23:6c:d6:b2:e7:67:f1:65:58:5b:ac:
ad:dd:1b:7f:d8:8a:0d:a7:e8:4d:87:18:68:c3:4f:
c4:00:21:d6:ed:ec:60:3c:18:02:57:61:48:59:25:
b3:96:83:98:08:70:3f:01:fa:1f:1f:60:20:bb:fa:
5b:6d:17:34:e1:e8:35:fd:77:be:d7:77:a8:fb:71:
05:d3:79:2a:9c:7a:85:f7:57:20:af:88:b4:87:65:
4b:2f:0c:f9:46:15:7b:6f:0f:e4:2b:c6:c8:05:f7:
d4:87:e1:06:eb:61:83:1b:8c:74:1a:db:93:3f:39:
cd:25:6f:82:00:a5:89:44:d8:41:fd:4d:14:33:be:
50:0d:b5:1d:e8:4c:e4:d2:0d:5d:f9:49:77:97:28:
e5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:AC:89:7D:6D:4A:C9:38:EC:E5:17:E0:24:F9:8A:77:B8:24:7D
X509v3 Authority Key Identifier:
keyid:63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a2:f1:44:9f:91:e7:ee:54:26:dc:f7:f0:55:70:e9:95:d3:
60:52:5e:05:55:85:75:47:25:53:0d:63:5b:27:35:00:7e:8f:
3c:b5:33:e5:d9:be:2a:f0:37:83:23:5a:5e:b5:56:da:a5:e6:
b0:c8:67:0d:b8:25:c3:ca:b8:9f:f1:29:a2:35:53:da:df:2c:
34:05:b7:99:63:db:ca:54:66:8c:4d:88:b5:4d:38:a0:10:ae:
f1:69:a3:1f:ae:f8:d2:05:22:ab:49:53:ac:ba:39:46:58:e2:
63:1e:1e:fb:c6:48:83:03:29:a4:84:48:a8:a8:e8:d8:36:5d:
7b:a3:5a:b4:a4:9e:9d:00:ab:76:9e:9c:fa:93:53:32:df:e6:
6c:3c:77:59:4f:88:c9:12:31:a1:14:e9:45:31:ae:41:5a:ff:
b4:53:3a:30:91:c0:e2:41:e8:21:d9:39:5f:99:4d:c0:79:54:
9f:c6:d6:04:69:e2:51:06:68:90:55:a4:64:67:83:16:0b:a5:
ae:ff:47:77:e0:58:d0:ed:72:e2:e0:40:18:16:ce:ae:0c:06:
e6:b6:d8:48:b4:7d:f5:9a:5a:11:ed:de:f3:97:0e:43:3d:88:
a6:74:30:26:c7:ac:b6:bc:53:ed:54:92:1f:89:0c:c4:1c:74:
e2:dd:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:07 2025 by rpki-client