Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: SjJSNCGPqWFPUuh7gtXrnj37T3W1s647RA8KWI1jXSc=
Subject key identifier: 15:36:D4:51:DC:03:1C:D0:F7:74:96:05:26:69:AF:C9:5F:1A:58:D7
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 019A285475582A07AB9C8C6DBD3809BC82AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 0948
Signing time: Tue 28 Oct 2025 01:00:14 +0000
Manifest this update: Tue 28 Oct 2025 01:00:14 +0000
Manifest next update: Wed 29 Oct 2025 01:00:14 +0000
Files and hashes: 1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: OCR6hiHBefGiGjA5gAkLGa7VOdsKeiCjvdECRvr8PN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:75:58:2a:07:ab:9c:8c:6d:bd:38:09:bc:82:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Oct 28 01:00:14 2025 GMT
Not After : Oct 29 01:00:14 2025 GMT
Subject: CN=1536d451dc031cd0f77496052669afc95f1a58d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:03:aa:e6:09:b3:df:27:4b:89:68:3e:2f:
32:5c:d2:44:79:52:d4:6f:21:d7:35:73:2f:14:ab:
d0:32:58:00:15:7f:d9:42:0e:0b:04:49:92:b2:a3:
76:53:6b:ac:05:ba:b8:ee:db:2c:ea:a0:d5:be:ac:
ea:fa:e2:8a:d2:94:f9:c0:5c:c5:e6:23:8e:30:bf:
6f:3c:82:41:c2:bb:af:8c:d6:70:e3:f1:98:60:9e:
7d:ce:9c:2f:07:39:55:45:8d:12:a9:c1:6f:71:3b:
20:1c:f3:f4:9b:46:8c:17:fe:47:2a:e2:b9:d9:18:
11:41:26:d3:25:65:f3:14:3b:89:5c:6f:e6:85:04:
43:fc:6b:2a:d5:96:5f:cd:1d:6d:33:a5:4e:f9:9b:
ac:9e:b0:53:63:9a:f1:5c:45:47:2b:50:c5:ed:92:
80:cf:ed:c6:06:38:d7:f3:8d:93:03:aa:9f:72:79:
27:59:78:af:56:37:1a:4e:5e:35:15:23:09:11:d0:
00:11:89:3b:2c:90:2c:87:15:82:23:bc:5d:b2:94:
e7:d0:09:05:8d:c5:03:75:d9:74:e4:2f:a0:ad:b9:
7d:db:a3:2a:1d:ee:00:c1:d2:cd:93:cb:e3:10:5b:
27:1a:f8:b9:3e:b8:7b:d3:82:b1:9f:2a:d9:fc:2f:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:36:D4:51:DC:03:1C:D0:F7:74:96:05:26:69:AF:C9:5F:1A:58:D7
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5e:ee:85:f0:c7:c2:cc:28:26:cc:7d:c3:71:d9:ff:6d:2c:
df:98:5a:cb:16:c8:34:f3:de:e3:ef:1c:36:21:3e:b7:c4:9c:
39:3d:a7:c8:27:5c:38:e4:c7:58:23:f1:6e:0e:47:ea:5e:52:
b5:31:ae:5c:6c:61:b7:0a:ac:b1:e2:a2:01:48:d7:33:f4:d6:
a8:46:a4:d2:40:25:94:11:95:a8:4e:50:f4:80:9a:44:4f:e6:
6a:e2:dc:cd:bd:e1:b8:76:f6:de:b6:c6:89:78:0e:bb:26:d0:
bb:97:e3:f3:96:19:dd:66:5b:fe:66:4d:40:c1:43:cd:65:11:
13:7d:5c:28:a6:3b:6c:dc:50:64:5a:1f:77:13:d5:bd:2e:bb:
ed:a9:30:87:07:a7:dd:5c:ed:03:c9:db:c8:22:aa:5e:02:45:
68:ef:a9:35:5a:9b:63:30:a9:d3:04:aa:af:78:d4:ac:64:a6:
11:31:c3:61:58:16:bb:d2:f9:55:5b:64:42:ea:cc:70:cc:81:
13:f7:7b:bd:61:7a:ba:cf:ac:db:48:af:bb:c7:30:b6:76:43:
53:b3:12:50:cd:17:db:cf:66:f8:89:d8:49:8a:45:91:e3:bc:
66:a8:e9:16:86:06:7e:33:55:8a:76:e0:49:18:c5:aa:d2:ae:
bb:54:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:56:51 2025 by rpki-client