Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
File: _YgaVMfaqF6iOSqTEpRXjbzWp3c.mft (raw, json)
Hash identifier: zM3Xk8QFoBmJcY6qBRUPwzcN+3AQncfjqTAMmpnam9c=
Subject key identifier: 86:82:19:0C:7C:35:60:6E:BA:B7:D7:4F:CD:0E:18:F4:03:3E:C9:8C
Authority key identifier: FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77
Certificate issuer: /CN=fd881a54c7daa85ea2392a931294578dbcd6a777
Certificate serial: 019A725CD6417CD7247DCC01DF515EC46094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
Manifest number: 028B
Signing time: Tue 11 Nov 2025 10:01:17 +0000
Manifest this update: Tue 11 Nov 2025 10:01:17 +0000
Manifest next update: Wed 12 Nov 2025 10:01:17 +0000
Files and hashes: 1: Nrv8RmxCZSwlroYNjaCzC_gNRbA.roa (hash: z0Wt+SHMhk+eKo3V2z0COv5ilnG0T4vZIO6vh0M7eRI=)
2: _YgaVMfaqF6iOSqTEpRXjbzWp3c.crl (hash: qU1ceWYe6uzuJ9aOmO6j61JqvvMgjFHcaHUL4dz/OoA=)
3: mP9V6Aj18VCMrj4XFwGFW0OW6UE.roa (hash: toSYJiG8N793iae27SJdKYFpAYguNX3k92Kzmh23MYM=)
4: t_aUQpjmHC8hsa9s9dp7snO6GLM.roa (hash: EMjKr1hOyaIzjfvQlqtk+HjL3E6MN7ciA1JY5E4ZJKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d6:41:7c:d7:24:7d:cc:01:df:51:5e:c4:60:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd881a54c7daa85ea2392a931294578dbcd6a777
Validity
Not Before: Nov 11 10:01:17 2025 GMT
Not After : Nov 12 10:01:17 2025 GMT
Subject: CN=8682190c7c35606ebab7d74fcd0e18f4033ec98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:da:3d:d9:8b:7b:f1:40:37:9b:10:df:74:57:
cb:f5:14:06:60:b8:7e:62:72:95:91:31:1f:16:d3:
77:c9:77:6b:28:6f:11:a8:76:5c:4a:7b:88:07:dc:
c8:43:6d:2f:8e:9f:c6:cf:b9:d0:49:b2:77:7b:33:
88:29:4b:56:dd:df:cc:91:a5:4a:e9:b2:b2:d5:99:
c0:5f:7a:cd:47:df:67:82:e2:8b:f4:f9:b3:dd:32:
ba:22:e5:2f:5e:0b:dc:f8:c8:bd:88:2d:45:68:f3:
8d:12:ed:12:06:dd:f4:46:5b:9b:b5:dd:96:1c:ef:
51:4a:27:e6:7e:41:da:ed:27:37:4c:75:82:69:11:
84:a8:f9:98:55:ce:a6:0c:f6:d3:8a:7d:3d:e5:fb:
d1:7c:f5:55:8d:64:be:d6:f5:d8:1c:e7:86:f5:cd:
26:be:2f:41:d2:49:22:1a:be:36:15:5a:90:b7:8a:
e9:ce:e2:99:95:c6:47:1d:bb:1a:71:aa:56:51:fc:
9d:c7:11:96:1c:2d:c2:e8:18:b7:a5:87:d7:f7:4b:
3d:cc:43:29:04:ba:15:6f:24:b4:25:ec:98:32:12:
12:fc:a7:58:2b:b9:44:a9:b3:e2:9a:f6:f3:3d:ed:
fc:48:cc:ec:7a:08:c8:73:c7:30:41:12:1f:60:0c:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:82:19:0C:7C:35:60:6E:BA:B7:D7:4F:CD:0E:18:F4:03:3E:C9:8C
X509v3 Authority Key Identifier:
keyid:FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:08:8e:21:2c:37:62:cb:c5:6d:65:ff:63:f1:f0:56:a2:0a:
36:65:cb:c8:75:65:2e:4a:b7:46:04:1f:e5:80:0d:a8:b9:02:
13:8f:8a:2c:1b:aa:cf:8d:8f:af:1c:1c:b0:e9:18:9c:39:8c:
05:16:04:1e:c7:e7:02:17:43:a9:1f:63:39:be:fe:14:87:59:
62:dd:5a:45:7a:bf:53:1c:1c:7a:76:ac:dd:56:f9:84:2e:f2:
eb:b1:89:bd:8e:aa:99:41:00:e5:49:50:be:86:a0:fa:08:b8:
3b:d7:14:cb:68:67:7c:9e:78:77:f1:7b:df:b0:3c:eb:15:01:
e4:dc:b5:2b:ea:9b:a5:b8:7c:64:c6:18:39:76:ca:eb:fc:06:
d4:fa:35:97:33:1a:a7:37:0d:21:a8:c0:9f:cb:bc:f3:a0:90:
ad:e3:9b:96:bb:f5:4d:94:35:99:d3:fc:ce:18:2a:35:88:01:
2d:e6:9b:32:75:95:c0:6b:c7:a0:80:14:03:2c:39:ff:16:15:
99:39:88:17:4d:7c:b3:40:59:cf:73:d1:b7:3a:c4:28:e4:7c:
19:3a:a5:75:6f:47:76:e0:4e:dc:d6:8b:6f:19:b4:aa:7a:cf:
83:cd:a5:9d:cc:33:b1:89:ac:a9:67:22:9d:6b:33:6f:bd:1a:
b4:2a:a0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:38 2025 by rpki-client