Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier: ojbVfDtq7UzzP7dHI3vE4+dm8AJoat2CcT6LH5RQfTg=
Subject key identifier: 8B:17:A6:26:D5:4C:AE:5E:AE:BF:C5:07:AF:05:19:D5:00:A5:3A:1D
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial: 019A72932C87FD7A185E97A2D3A929EADD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number: 06DD
Signing time: Tue 11 Nov 2025 11:00:39 +0000
Manifest this update: Tue 11 Nov 2025 11:00:39 +0000
Manifest next update: Wed 12 Nov 2025 11:00:39 +0000
Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: zZo+/o+iOvswBhVyoQYANLtjFUd/U2SNGKU8ux0SOzw=)
2: gQ1Mk4Ko4bazOy7pZDxAv9B_6qk.roa (hash: FoB5dUGf24mZ9gRXtihHS6AK0Gj+K7gCvGHMZywvDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2c:87:fd:7a:18:5e:97:a2:d3:a9:29:ea:dd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
Validity
Not Before: Nov 11 11:00:39 2025 GMT
Not After : Nov 12 11:00:39 2025 GMT
Subject: CN=8b17a626d54cae5eaebfc507af0519d500a53a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:be:46:3c:e9:28:e3:e2:f7:04:0f:48:fd:
05:2c:b9:d8:68:15:6a:f8:98:5f:c2:44:a0:c3:47:
94:c5:f2:06:36:ef:08:0e:3a:55:49:fa:01:a7:37:
b1:b7:3a:c0:a9:71:d7:86:4f:14:ed:ba:1b:0a:d7:
fd:4e:f7:1a:ca:9d:31:1d:7e:dc:1b:4a:b7:d9:28:
be:6a:02:3a:9d:2f:e7:5f:af:38:25:5c:8a:55:0d:
50:cb:55:af:62:a6:5e:fe:1d:7b:90:cf:0d:55:74:
98:78:1f:ef:7c:28:8a:92:c7:e3:b7:b0:8f:b9:c6:
60:18:f4:65:b7:1b:f2:bf:37:02:c1:e4:9c:e9:d2:
be:27:56:b3:13:fd:c3:d1:c7:30:7f:84:b4:3d:ea:
3f:8c:2c:36:22:17:51:2d:49:4a:28:77:62:e0:90:
bb:f5:be:a1:2e:08:96:da:c3:f2:31:72:cf:83:26:
d3:fb:75:fb:cb:a4:2f:5a:f3:17:72:9e:30:fb:e4:
34:ff:79:90:ab:10:78:77:f6:ae:b9:0c:9b:f1:de:
67:5a:07:d9:0e:5a:e9:bd:01:ce:85:e0:c9:37:c8:
44:c9:a8:5a:d2:a4:f2:1b:fe:cb:6d:73:9a:8b:ef:
c6:45:ad:7c:ce:b5:07:5d:77:f6:90:1d:a4:30:b2:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:17:A6:26:D5:4C:AE:5E:AE:BF:C5:07:AF:05:19:D5:00:A5:3A:1D
X509v3 Authority Key Identifier:
keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1f:a3:2b:05:4f:cd:ed:6e:59:53:e7:f8:09:50:84:6c:bb:
03:ca:67:5f:7e:3c:54:14:ef:10:0e:07:3e:88:7f:3d:4a:55:
8e:49:82:ce:8f:a3:e3:74:58:b8:9c:80:ce:85:00:d2:26:ef:
45:c0:c8:2b:66:b4:b0:a9:50:a1:77:c1:f0:02:a0:22:34:20:
10:fc:d1:98:23:2d:5b:c3:0b:aa:62:c0:20:57:d8:3d:7f:a9:
f2:22:af:ad:07:06:79:19:1d:82:2a:fa:ab:cc:f4:35:94:df:
ac:b0:0f:c2:2d:b1:9e:1b:1d:45:67:31:dd:95:5c:ae:33:17:
65:f7:c3:43:39:a3:ad:87:9b:ee:d2:6a:99:98:b5:37:04:01:
d0:73:b0:43:32:22:90:4b:35:c8:18:c1:b0:60:06:75:ba:16:
11:dd:46:e9:95:85:9e:a1:48:4a:d5:ee:64:5c:61:12:77:24:
ae:f8:52:a7:37:9a:2d:d8:77:c3:36:94:40:96:a7:bd:2b:67:
83:87:87:bc:01:bd:57:da:4e:f0:46:ae:6c:01:0b:82:4b:3b:
57:d6:eb:d7:c4:bb:a0:7c:c7:a8:9d:e7:e4:a8:33:30:49:4c:
bf:ff:e2:c0:6b:77:91:5b:1a:cb:a0:fe:7a:60:5f:bc:bb:d5:
3b:3b:ff:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:17 2025 by rpki-client