Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: 87eSevh5UDRTzETPLUQDbJGiPpvTmfm4WQf2i0PC/BI=
Subject key identifier: BD:93:CA:BA:99:D4:4B:BF:4B:88:80:AD:13:E8:1E:5A:FF:4C:3D:3E
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 019A4AE0673C21710F442BA259616F95109F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0D21
Signing time: Mon 03 Nov 2025 18:00:11 +0000
Manifest this update: Mon 03 Nov 2025 18:00:11 +0000
Manifest next update: Tue 04 Nov 2025 18:00:11 +0000
Files and hashes: 1: Ccywd-EFb-47zGXwVvm1HK3gD5g.roa (hash: tofGggOpzVU4QpBRLmwlmpDY705qfzw44/NrLhvXC/s=)
2: I8Tt-Zu-4KuSLBycV3-omKCgA2k.roa (hash: Zd+eY+EVCzF5gjwTJThQ6dJvOjSgC7ThbQkI/3E4k6Q=)
3: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: QFWCiwpe3MDnxtHyBIgJcl5RmJkcCPGmuiBVqrVDFdg=)
4: hqQDTg86IXDCJKqDxF4L3S5iCf8.roa (hash: H2Wy84IqHXcbFRYxZCEIcsyGOCDB08MT81RQd+tDuH4=)
5: sDw4_lTU4iQJOaN0yUvzocqZ23c.roa (hash: 9muZnI3+r+Noi3k3hRSo6GnSQDK9o1ZrpIfj14cPaHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:e0:67:3c:21:71:0f:44:2b:a2:59:61:6f:95:10:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Nov 3 18:00:11 2025 GMT
Not After : Nov 4 18:00:11 2025 GMT
Subject: CN=bd93caba99d44bbf4b8880ad13e81e5aff4c3d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:18:31:46:ed:14:84:fb:96:b0:29:86:d7:
f4:1c:8b:44:9e:8f:93:56:02:59:91:45:c7:6a:7d:
1c:f6:7d:c1:1b:64:e2:f4:ea:6c:6d:66:67:39:19:
dc:eb:7b:c6:bf:88:58:db:92:2a:92:f0:02:36:ad:
fd:7c:9a:84:2f:f4:5f:e2:16:54:2a:a6:b9:6e:91:
ab:0e:9d:b1:b6:c8:51:4d:73:83:29:e0:7b:f8:5a:
09:00:c4:d6:70:df:70:d1:71:c0:30:7e:cc:26:c5:
37:49:6c:98:ff:44:d5:9b:52:07:08:0f:4b:0d:e6:
74:ca:70:ab:ad:11:04:d6:be:1c:31:4c:f2:a7:57:
0e:eb:f7:85:47:b7:3c:7b:9f:52:c2:1f:11:c0:c0:
08:50:2c:17:2a:0b:f6:4d:9d:70:1e:33:9e:20:bf:
95:dc:ae:8f:19:e3:3e:9d:24:e8:0d:35:38:f9:cb:
38:64:fd:38:6c:1e:80:33:07:fe:05:3f:46:cb:23:
b6:50:e9:5d:2f:b4:62:a8:d7:0e:23:fb:63:6f:8a:
57:9d:fb:1e:6e:63:6d:46:f1:66:c0:c2:ac:b5:39:
15:0d:ad:ab:51:b4:fb:ee:40:99:03:a2:40:81:43:
d5:06:0c:6e:17:9a:7d:3f:30:52:25:f1:f4:9e:26:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:93:CA:BA:99:D4:4B:BF:4B:88:80:AD:13:E8:1E:5A:FF:4C:3D:3E
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:52:c7:bd:e3:be:2d:b4:a9:d9:bd:d5:99:0e:06:e7:86:7e:
30:3d:84:58:13:0f:3d:65:f7:77:47:5b:63:f7:e3:36:0d:67:
ef:72:94:fa:25:35:3e:72:56:28:6d:1a:39:45:fa:aa:87:04:
9a:7c:17:80:80:b6:1b:70:17:f8:9c:3b:e2:b0:41:85:a9:f2:
5c:dc:76:78:7b:88:6e:52:d0:d7:79:c8:a3:e6:6b:0d:a3:a0:
90:ca:aa:e7:c4:f3:7b:7f:10:43:c4:88:00:5b:c1:5b:4d:30:
a8:06:d5:0b:aa:f1:9b:2a:33:57:a5:6f:6f:42:fb:61:7d:db:
4f:f9:ec:af:da:0a:ee:e6:a1:66:06:c8:44:a2:0e:67:ea:2f:
fb:80:c8:09:c6:e5:f2:3d:b6:7f:8d:6e:6d:87:2f:74:c1:7e:
65:63:f1:cb:2c:16:b9:d8:81:23:7b:2f:cd:64:ea:2e:05:24:
cb:d7:ad:a3:56:3e:07:d2:9a:a5:6d:68:4d:bc:67:1c:05:95:
6d:bf:27:e6:43:a3:c7:cb:b0:07:10:10:a3:ea:54:c5:b6:01:
8e:26:a1:e8:64:e8:99:6c:3f:66:a9:e2:37:28:4c:d8:48:f6:
e0:cc:50:54:01:4e:fc:5e:69:ce:5c:56:6c:0e:56:e5:5b:30:
e1:32:16:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 03:59:58 2025 by rpki-client