Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: N6JxVQlJ9Emg2RUQ7t402II03LEjUDoaeMH4lCsCogw=
Subject key identifier: 71:40:AB:25:FA:3C:07:17:84:DE:0F:17:06:6E:AA:A5:B1:0A:D2:40
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019A07B756846A95A3F60839E6D8DC99897E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0D6C
Signing time: Tue 21 Oct 2025 17:00:46 +0000
Manifest this update: Tue 21 Oct 2025 17:00:46 +0000
Manifest next update: Wed 22 Oct 2025 17:00:46 +0000
Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: f9hwpcv6ZRspzBOGEwpWkZzxA6CK8vIyiU4Dn+2Zc74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:b7:56:84:6a:95:a3:f6:08:39:e6:d8:dc:99:89:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Oct 21 17:00:46 2025 GMT
Not After : Oct 22 17:00:46 2025 GMT
Subject: CN=7140ab25fa3c071784de0f17066eaaa5b10ad240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:16:71:f2:82:3e:64:44:08:29:00:19:52:
71:09:21:48:6d:72:82:26:c8:0c:66:f5:56:9a:49:
c6:1f:c1:37:21:66:2b:dc:ed:39:3f:12:4b:c1:3f:
20:b9:99:de:a3:aa:dc:f1:bc:9c:33:64:13:2d:69:
29:a6:88:ee:68:d2:ba:c6:da:98:41:dd:d8:52:12:
04:1a:a4:72:d0:db:ca:14:73:c6:11:fb:5f:e5:c0:
c0:16:6c:4d:5f:38:1e:26:fc:38:da:25:9a:7c:ef:
8b:97:27:d4:ef:e5:45:d1:7c:6d:86:ab:ac:54:c8:
dc:4e:51:f6:4f:0f:76:7d:fe:3b:ed:7e:5f:ba:10:
7e:50:70:73:e4:91:47:71:b4:ff:2a:21:af:fe:ca:
88:a2:aa:7f:bc:57:0a:b1:06:b4:ab:81:b6:59:71:
96:ba:ed:d4:90:1a:ef:71:e6:03:ea:1b:1e:b2:4c:
9a:c4:2e:05:57:d7:22:ce:fb:75:72:f2:17:73:d9:
4e:f7:14:6a:c7:60:cc:49:a5:6d:97:95:82:ad:ea:
ad:eb:64:12:e3:13:e2:a5:c7:e0:fd:86:5b:3d:b6:
88:fe:c9:56:20:f8:81:f2:a4:5f:b5:5d:0f:cd:3f:
0b:8e:df:4d:9c:b2:4f:63:d9:fb:7b:4c:b9:f7:a4:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:40:AB:25:FA:3C:07:17:84:DE:0F:17:06:6E:AA:A5:B1:0A:D2:40
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:55:21:ec:60:ae:8d:5c:00:83:53:fb:07:a0:eb:bb:ff:80:
c6:54:10:02:1c:ef:83:62:d2:10:49:b7:8a:eb:cc:a9:c4:22:
01:34:ca:0c:48:ce:09:09:67:e9:c6:a5:b1:f5:84:15:06:48:
9b:ba:ce:04:8c:54:b0:81:23:82:1f:70:64:2a:75:6d:be:69:
a7:78:18:0e:e7:79:89:1a:9d:05:af:e0:14:65:80:45:8c:e6:
76:9f:2b:9b:86:c6:a1:74:0c:50:38:2f:c5:50:13:3d:b6:50:
d7:52:56:71:5f:66:c0:39:49:c6:83:56:c4:d6:b4:6f:08:ab:
78:d8:0d:b9:b9:f4:4b:0b:5c:25:ba:55:a0:d1:f7:b1:18:1d:
1b:ee:6c:35:9a:0a:53:b4:21:b7:26:36:89:0f:06:d7:aa:fb:
7f:58:e3:64:0d:cc:e4:34:ef:2f:0e:36:92:ea:e5:f9:48:8f:
b2:f9:d0:56:1a:6b:39:2c:3e:45:60:a3:3f:b6:b3:c7:01:98:
b1:f5:8f:82:ea:dd:52:b0:63:19:ea:ed:4b:01:86:c9:5b:f0:
b3:59:01:96:70:e5:e3:ed:25:36:1b:7d:39:90:ab:a0:21:87:
81:b8:1d:fa:92:ff:a9:8e:5f:a0:41:f9:64:7f:66:eb:d9:42:
31:da:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:27:49 2025 by rpki-client