Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier: raSSZG5jgezr1Wga+nztMTGgN3H7+BVSOUTc+nhkkRU=
Subject key identifier: 3A:EF:9D:FB:D0:9C:1C:E5:9B:2E:10:F8:08:B4:3D:83:EC:61:AD:FD
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 019A7294052895E137F7BAEA8EFA677F8BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number: 077B
Signing time: Tue 11 Nov 2025 11:01:34 +0000
Manifest this update: Tue 11 Nov 2025 11:01:34 +0000
Manifest next update: Wed 12 Nov 2025 11:01:34 +0000
Files and hashes: 1: Wb7gIaowM175_4hbQACvXGxElnc.roa (hash: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=)
2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: /sqx86TFG4Apc0rdhZbbvUfY6+8OltmByNrbAMRUYDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:05:28:95:e1:37:f7:ba:ea:8e:fa:67:7f:8b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Nov 11 11:01:34 2025 GMT
Not After : Nov 12 11:01:34 2025 GMT
Subject: CN=3aef9dfbd09c1ce59b2e10f808b43d83ec61adfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:c3:46:a1:45:2a:3f:3f:d3:da:6f:49:81:
0b:b2:50:b2:6e:b9:d9:b9:a1:c2:18:fc:fb:78:a7:
b9:30:bc:15:3e:21:fd:2c:f5:3a:04:5e:e4:d9:e8:
81:dd:e9:8b:eb:d7:9e:d7:d3:91:70:a5:8a:f8:43:
59:ee:06:c6:ac:14:36:e7:fe:fd:13:67:ae:4c:59:
78:15:97:80:53:0b:c0:05:2c:a9:6a:13:69:5d:27:
45:44:6d:4d:03:fa:74:16:18:86:78:9d:43:32:84:
98:fb:59:ca:ee:32:85:88:df:9f:6a:bf:af:49:b0:
15:d3:c3:e5:e3:6e:eb:16:66:5d:11:b1:6a:e5:f7:
61:34:55:f6:2a:81:25:e5:ca:5b:89:8f:b0:b3:76:
4b:12:c7:10:e7:a4:47:11:ad:78:6d:f8:b1:ef:93:
66:a2:b9:ae:13:2b:fe:aa:59:ad:6f:96:7c:0a:c6:
28:97:4a:3d:f8:ec:43:67:29:f6:ce:f8:d1:8d:8e:
cb:ca:5d:96:86:f5:0c:c4:dd:c3:35:fc:f4:b3:c4:
c4:7e:ce:42:1c:b1:f0:23:9e:8b:42:10:48:3c:d1:
fe:11:e1:b3:6b:ee:8f:5e:5a:47:aa:23:2b:9e:ae:
97:86:1d:e3:cd:4f:32:56:09:ce:ae:93:99:30:ff:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EF:9D:FB:D0:9C:1C:E5:9B:2E:10:F8:08:B4:3D:83:EC:61:AD:FD
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5e:c6:f8:06:b7:cc:68:38:74:ca:c7:c1:65:e2:9f:fc:3d:
79:d0:91:65:04:6e:4c:ed:2a:b5:fe:ed:8f:4f:b1:4f:9f:25:
cd:62:e2:f2:ba:63:fb:98:c0:0c:74:38:ea:19:ac:ad:ed:21:
13:35:99:c6:75:2a:d7:4b:3c:97:56:f4:41:32:b1:6f:bc:9a:
ae:96:75:4f:e9:93:4f:7e:cd:d7:d7:f0:76:b7:a7:0a:dd:4e:
04:f3:12:39:17:eb:c8:57:25:1b:75:01:8b:86:75:cc:2b:a5:
7a:99:46:ef:c2:78:f8:8f:52:af:65:b2:eb:79:76:9e:d3:63:
72:3d:06:41:75:98:58:61:03:f8:8c:b2:f1:06:16:ae:2d:fd:
f7:35:dd:e7:f9:b2:7d:c4:5d:9d:f7:5f:c2:43:10:05:47:f9:
5c:ef:3a:a3:78:88:b7:3d:f5:82:ed:b1:b0:4a:25:49:12:69:
f8:08:36:dd:43:26:29:a0:f3:f2:4d:5f:c7:24:e7:65:f8:4f:
6b:32:14:bc:69:e1:eb:e7:d2:f2:c1:c8:0e:7e:e7:bf:cf:d1:
bf:d5:b0:7e:f9:f1:0e:d1:86:76:d6:3e:eb:a3:c5:29:f5:9f:
c9:01:0a:3e:30:41:31:a5:ef:67:b4:b8:1f:5f:ff:ea:d4:d7:
7c:b8:16:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:08 2025 by rpki-client