Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
File: YNxaADaNiuH7qZVDHwOkExrdipo.mft (raw, json)
Hash identifier: Sg/BUT6jM1IPjzawX2le6bTR+WTJKsPuVD9BJ6iJpC0=
Subject key identifier: 1A:A9:68:A2:77:45:FD:91:45:51:72:2C:24:AA:C2:7F:11:B4:58:7C
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 019A7225E840195EBFB5C115EFEBA1691BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
Manifest number: 08CB
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: 2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa (hash: XnJT5JSjqE4Adj+ylm025sl/JK+1c1iwTV7Ra2tEO8w=)
2: YNxaADaNiuH7qZVDHwOkExrdipo.crl (hash: 28rbJZ+4UJvlpFn6PglLnsGJFCcBgmNSwxp4brQlZjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e8:40:19:5e:bf:b5:c1:15:ef:eb:a1:69:1b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=1aa968a27745fd914551722c24aac27f11b4587c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:68:ca:22:fc:f4:44:fc:39:ee:cb:a9:f6:
76:f2:95:e7:f8:77:3e:a9:85:9b:76:af:81:97:d2:
03:23:98:0b:dd:e8:d8:78:aa:73:0b:90:5b:c1:db:
8e:a3:1a:6e:21:60:be:43:60:27:77:f6:73:fb:ca:
f9:54:a6:1e:0e:c2:8e:f6:4a:99:97:9f:9f:67:55:
5e:aa:d8:78:1c:db:da:44:97:53:ad:5f:65:65:d3:
00:55:fc:ca:77:aa:16:19:5d:c4:20:84:7f:10:73:
63:e8:98:59:d3:a7:17:d7:00:b0:83:3e:23:e2:aa:
31:55:ef:d8:49:e1:79:27:f7:ff:3c:f4:55:8f:64:
cb:2b:65:e2:7a:3c:13:db:a6:f2:06:47:7a:e0:d0:
02:fd:af:78:55:84:9b:b2:2f:00:3e:34:78:87:3f:
ed:41:0d:e9:32:ab:82:65:2f:75:a9:35:6c:1f:90:
b3:93:f4:c0:a5:e5:c6:79:3b:7f:28:23:dd:b3:58:
5e:73:d3:ff:7e:fd:88:86:63:0c:26:e1:0a:54:0a:
ee:2b:b5:7b:87:c4:b3:25:ef:07:d3:f2:18:7d:28:
c5:bb:c8:9b:59:b4:83:e3:13:92:54:72:ee:a3:8c:
69:89:1a:f0:14:7f:20:db:83:9f:39:4a:d3:18:76:
68:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A9:68:A2:77:45:FD:91:45:51:72:2C:24:AA:C2:7F:11:B4:58:7C
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f3:9e:f3:eb:d4:09:fc:14:c7:8c:b2:e7:dc:85:7b:f1:80:
7b:b7:0d:ac:6b:05:fa:ad:a1:c3:47:bc:3f:df:8d:ac:f7:66:
1c:e2:c4:c6:4e:98:67:a6:24:ec:ad:ff:69:b9:b4:5b:f3:2f:
b7:b8:1f:27:e0:a8:7c:73:69:51:78:69:a6:d5:3b:3b:be:7e:
02:9b:54:25:6d:00:09:b2:9e:d7:c9:b3:be:fa:ba:13:12:b3:
f0:55:1b:19:13:2b:d7:a7:80:0d:20:e1:06:a3:36:44:59:93:
4c:30:85:f2:3f:da:9b:42:97:6b:57:59:58:dd:2e:02:2a:2c:
be:61:e3:d5:15:64:ae:22:65:88:59:4b:19:ec:00:ad:dc:a6:
d8:aa:80:b3:30:c5:40:62:0e:d7:48:d9:da:17:df:40:61:6e:
55:0f:cd:fd:4e:16:e3:1c:fd:86:50:66:a7:55:a7:f6:86:49:
ff:45:3c:32:91:57:d7:07:47:70:4f:87:30:07:8a:73:ae:be:
2b:87:bf:97:50:df:98:cb:f4:6d:b7:21:f8:74:47:dd:a3:4f:
55:b3:65:92:0c:5a:43:30:a3:f1:e7:a5:3b:52:9a:18:4e:f7:
27:a1:bb:dd:16:c1:73:e4:61:d9:2f:44:7b:8a:4f:ed:61:12:
c8:51:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:50 2025 by rpki-client