Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File: YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier: qGX9m3G81xk3LatdMeGOhXFCOi9/kV3m0CDttJ0/vrk=
Subject key identifier: 21:06:36:BD:6F:84:41:16:B2:7D:EA:19:8E:88:ED:A7:89:8A:93:1B
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 019A7225DFF3368302F073DCAE2264AFE5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number: 0EB9
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=)
2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=)
3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: vOzuRWt3zD0n01vDXZFhR3JntyfpML0pJqkf6YID7V0=)
4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:df:f3:36:83:02:f0:73:dc:ae:22:64:af:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=210636bd6f844116b27dea198e88eda7898a931b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:6c:56:77:08:a8:78:cd:d0:25:df:4a:c0:
55:38:b8:65:a8:b2:aa:09:95:36:b6:8d:7b:81:05:
60:2e:f8:68:ff:44:6b:db:dd:d8:fb:80:19:63:fe:
bd:6f:63:b2:8c:1a:bf:e1:2d:53:cb:b8:60:fb:d0:
21:aa:62:65:a5:5d:ad:6e:b2:14:e9:73:af:e0:c0:
b0:95:06:d3:cc:82:f3:48:cb:e6:c0:66:9d:88:c0:
d5:88:4d:a0:0e:8a:62:f6:12:76:d6:8b:44:41:58:
97:90:8b:78:30:48:d4:f5:07:79:90:e2:bc:37:e9:
72:05:f8:fa:9f:ca:f2:1d:4b:38:24:4e:b0:82:bb:
33:a7:7d:32:fd:84:35:8a:2b:1c:1b:95:66:40:25:
24:c0:d5:1d:ed:74:4a:7f:94:34:cf:65:2f:b0:e7:
a2:7f:fd:10:de:16:5f:44:5e:0b:8e:16:1c:65:4c:
0e:b7:57:6a:36:65:cb:fd:4c:4c:85:26:16:a6:75:
c8:69:8b:9c:06:2c:99:18:43:a6:64:8c:42:6d:53:
6b:07:06:ea:50:5c:b1:ce:2f:a5:f0:7e:eb:83:3a:
19:7f:96:7b:7c:8e:34:98:7c:b8:b3:7a:84:f5:89:
08:83:7b:d3:6f:2c:f0:93:0e:38:12:1c:52:e9:11:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:06:36:BD:6F:84:41:16:B2:7D:EA:19:8E:88:ED:A7:89:8A:93:1B
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ad:bb:1d:5b:2e:e4:53:94:52:f0:22:13:c9:f7:d2:81:0c:
e7:63:a1:a8:ea:62:04:2a:44:77:c1:13:1f:9d:8b:d4:3c:ca:
d7:54:ea:5c:80:62:04:2d:ca:28:e9:8d:cb:88:aa:e7:56:96:
77:18:79:a7:fb:25:3b:e5:d2:29:07:8d:01:3a:c2:48:0a:5f:
49:c0:97:eb:a9:71:d3:53:b2:7a:42:d5:2f:09:bf:a5:f6:0d:
e3:94:39:24:d7:a9:17:d3:e0:da:b6:a5:0c:46:05:b6:b0:7a:
90:50:e8:c5:b7:92:76:5e:fa:b9:2e:0a:9e:5b:68:2f:32:99:
17:0c:7d:a8:d8:fc:d1:d2:2c:93:f9:d8:59:75:61:a6:43:b6:
e1:5e:f2:4e:44:b4:06:83:23:ab:c9:7b:44:ed:e0:4f:a0:45:
3f:48:d1:21:89:28:d8:52:78:4a:6c:88:87:a6:bb:43:58:78:
ec:27:eb:fc:2f:e5:a2:5a:e5:b1:f6:b6:95:12:96:59:00:e8:
05:cf:81:a8:db:93:59:fe:07:95:52:cf:cd:af:3a:40:5d:b2:
2b:73:e9:74:14:4a:cf:bf:62:3d:fe:39:fd:21:63:6d:9e:d6:
32:f4:cd:02:66:a0:eb:35:19:53:70:cf:b0:a5:4b:48:a9:e2:
f8:44:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:17 2025 by rpki-client