Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier: GOxE2upfzDoQ5jU1frAcdOF3vWyMaMxSuzPrkw6f1vI=
Subject key identifier: 08:CC:19:99:74:D4:3F:81:E2:EA:B6:6D:08:06:45:11:D9:B1:92:24
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 019A4B1918F48DD0831EACDE3B83BF5850D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number: 1074
Signing time: Mon 03 Nov 2025 19:02:07 +0000
Manifest this update: Mon 03 Nov 2025 19:02:07 +0000
Manifest next update: Tue 04 Nov 2025 19:02:07 +0000
Files and hashes: 1: 1bT_z3QhDrRtR0bAMfMHm2giTF4.roa (hash: UdAyHLTajp0O5fgzTOphNRIpwXVUSlhxrrLMkoKDUAw=)
2: C1FyQJSK2-uv7URyciZXxMvVb6c.roa (hash: CAmInxyQhyb9MZHRVwkcOEX1WeCGUI9sXRoPqIH4UiI=)
3: IELJH6M7c-qGa_xF_N_rVAXGjYc.roa (hash: QPFfU1BkEUCanKp/XJb5ENTQ74R8UjYATL4PwXWDHyg=)
4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: MpiJyzSRLYhLB7hMA1YiTmsNu0AR6VAo6cD/QAYvVsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 19:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:19:18:f4:8d:d0:83:1e:ac:de:3b:83:bf:58:50:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Nov 3 19:02:07 2025 GMT
Not After : Nov 4 19:02:07 2025 GMT
Subject: CN=08cc199974d43f81e2eab66d08064511d9b19224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:4d:76:64:d7:79:30:be:00:bb:0a:9c:7d:
9f:f9:ca:28:dd:28:9b:5d:d2:6e:2a:28:28:05:a5:
70:32:96:07:71:f2:3a:fa:db:39:6f:65:aa:23:df:
03:03:ad:77:06:97:d3:b5:21:d9:67:eb:43:1f:80:
51:5f:82:dd:b7:b5:5d:ba:54:0a:cd:85:66:07:78:
ec:b8:c2:c2:1a:5e:5b:ae:1d:21:d4:7a:61:87:c5:
15:86:85:63:6c:91:87:cd:99:dd:67:5a:90:33:5b:
b3:a5:66:e5:63:e7:89:a6:8d:c2:d0:d6:5d:1c:97:
73:c2:32:a8:d5:17:6b:1e:74:89:c5:28:a8:4b:1a:
c6:cb:8e:e7:b2:5d:12:6e:f1:3b:94:7f:e0:59:2f:
eb:7c:14:fc:6c:b8:a1:3a:04:2f:4d:c8:f1:6d:c3:
bd:1e:8d:c0:ac:35:81:3b:79:d0:7f:5a:61:20:a3:
45:a8:9f:49:0c:c9:dd:25:0c:81:15:10:cb:97:5b:
58:21:48:1f:60:3b:7a:77:26:c2:02:13:b9:a9:c4:
c2:51:88:e6:76:9e:53:ff:b3:16:12:f7:93:1d:e2:
66:42:be:75:67:23:3e:24:46:2e:10:25:2a:87:ca:
a5:82:7f:42:ca:b0:3e:a5:03:08:8d:22:2f:54:e7:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CC:19:99:74:D4:3F:81:E2:EA:B6:6D:08:06:45:11:D9:B1:92:24
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:46:e4:76:09:8c:c1:d6:f9:b9:39:93:9b:da:22:d1:02:a8:
e7:c4:92:dc:69:92:1c:19:74:8b:d8:b6:24:52:f7:9e:a0:e8:
c6:80:d5:70:d3:f0:4f:d3:e4:09:4a:74:91:64:7f:08:0a:7f:
b3:5e:e9:10:c1:5e:6e:b5:5c:45:ae:35:9a:11:b0:97:55:ad:
9a:51:ff:99:70:6d:87:0b:dc:09:c4:52:aa:33:e4:92:ca:cc:
13:78:5c:e0:01:46:77:b0:f9:0e:bc:1b:da:51:98:18:fd:e3:
d3:b9:0f:78:f0:01:8f:30:44:2b:2e:51:7e:8a:2a:80:a5:a3:
eb:23:4c:ea:fd:c3:bb:22:c5:70:9c:b9:02:bf:a8:de:9c:cc:
d5:88:22:7f:28:8c:2d:3f:e0:4d:cf:79:9c:df:f2:0f:6c:e9:
9e:fd:e7:c6:9b:d3:48:44:3e:ec:e4:c6:db:5f:90:14:cf:89:
4f:68:ee:ff:a3:c4:11:26:a7:6d:46:07:4f:5f:39:1b:49:53:
c8:57:56:19:49:9c:34:c1:c1:1e:58:c3:ad:8e:02:1e:09:29:
11:3d:a8:fb:41:67:37:2a:fd:0a:89:b8:80:2e:c3:ad:39:e5:
88:4c:be:df:4c:51:38:b5:27:79:13:e1:6f:5b:30:5a:74:4e:
3d:ed:2b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:03:51 2025 by rpki-client