Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: d9eApXydNNUCjHKiYQB5FXqBkzMWS4p8xIzy4wCAP7Q=
Subject key identifier: 37:63:A9:55:F6:87:8B:84:8C:B5:29:41:8B:BD:94:82:15:30:6E:CA
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 019A288BEF2BAEF388C2EF84EAF5A1A61B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 0FE1
Signing time: Tue 28 Oct 2025 02:00:50 +0000
Manifest this update: Tue 28 Oct 2025 02:00:50 +0000
Manifest next update: Wed 29 Oct 2025 02:00:50 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: 6pdqf5sAnx3UuDh378JVMdcuCp71fT6q0MWBP7di9tE=)
2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:ef:2b:ae:f3:88:c2:ef:84:ea:f5:a1:a6:1b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Oct 28 02:00:50 2025 GMT
Not After : Oct 29 02:00:50 2025 GMT
Subject: CN=3763a955f6878b848cb529418bbd948215306eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:c8:6c:a0:6b:64:04:40:f4:e8:e1:82:53:
75:8c:9a:20:f4:b4:e9:ea:20:d5:9f:6f:86:6a:e7:
7d:02:74:b3:90:89:1b:a6:80:02:ba:03:84:8f:02:
87:6f:60:37:62:22:99:d1:8b:81:3f:76:a5:17:32:
ba:77:32:4d:1f:92:8d:89:50:24:54:99:3f:c8:13:
6c:1e:b5:47:ef:aa:52:f5:58:da:94:ed:4e:94:d3:
45:44:60:bc:08:fe:cc:fb:59:b3:6a:eb:ff:c1:73:
80:06:47:b6:61:ab:68:c2:75:54:2d:e7:85:58:5d:
c9:9f:d0:88:83:30:be:8b:5b:0b:06:85:4c:0f:ef:
2a:fa:b9:b9:fb:d7:ba:3c:57:c9:45:5a:d3:e4:4a:
0c:49:85:68:92:b5:fe:13:9d:50:37:21:f8:15:28:
8a:0f:b3:d9:ec:89:2e:c3:33:5e:b9:d0:86:e9:d3:
8b:57:f3:94:aa:71:95:9e:e6:ac:ce:8c:44:ca:2f:
44:3e:42:09:5b:83:00:6e:58:de:c1:51:f2:98:b0:
f5:81:f5:24:22:bf:b2:8e:16:4c:11:37:f0:23:79:
2a:b1:f7:9c:45:ee:b8:7a:e3:c3:a2:15:bd:dd:73:
02:5a:f3:08:b7:1c:15:10:64:70:3d:87:9a:b8:e2:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:A9:55:F6:87:8B:84:8C:B5:29:41:8B:BD:94:82:15:30:6E:CA
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:01:80:e2:05:25:05:4f:d0:d0:db:32:40:5f:45:7a:c4:bb:
ca:b3:e4:eb:14:be:0e:6f:4a:1b:85:5b:30:4b:0f:6b:ad:a9:
15:d1:3e:c6:36:9f:b4:f8:77:a6:58:58:b6:84:65:b8:ca:3d:
30:f4:72:6e:be:7c:69:74:5b:83:4e:30:1e:30:91:7e:bc:e4:
b2:91:2c:80:34:d5:09:c3:7f:f5:2f:38:d5:ab:1e:d9:38:4a:
fa:ba:f0:77:31:ba:c3:6a:69:db:63:4e:eb:31:de:2d:7a:3e:
9a:ae:11:6b:36:3c:7a:48:cb:32:41:e0:8e:13:63:82:39:62:
0d:c7:3c:96:e5:30:29:86:a9:1e:b2:c7:2b:95:3b:00:05:cd:
8e:46:b2:0e:ad:09:73:b4:bf:e7:9f:9a:5e:cb:3a:15:fa:7d:
22:1c:ab:be:13:f9:a2:27:85:2e:1f:04:ce:d7:6a:99:ff:ca:
98:6a:75:72:d7:83:ae:3d:ab:ad:42:3b:56:d4:60:b9:0f:91:
15:56:c2:16:9d:6a:f2:b1:d4:3b:13:cf:fa:a9:d5:70:d2:46:
86:8c:16:b2:b8:82:72:b5:97:94:5d:5b:36:fc:4a:2d:14:f3:
23:9a:09:2a:a6:95:60:73:08:85:c8:48:f2:51:8c:43:66:89:
62:19:39:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:19:39 2025 by rpki-client