Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: rprjqzsG/TASwInFKq16YE+zr0aZQ3vEmxJz117GZa8=
Subject key identifier: D5:65:B3:7D:1B:94:3A:C4:03:D2:B6:4D:10:89:D0:6C:B6:8E:6E:84
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019A239C45ACE26E7A1F245722BD560F817D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 064A
Signing time: Mon 27 Oct 2025 03:00:35 +0000
Manifest this update: Mon 27 Oct 2025 03:00:35 +0000
Manifest next update: Tue 28 Oct 2025 03:00:35 +0000
Files and hashes: 1: BWZ8TffzeheUILd5O5vwxA8ANgs.roa (hash: 9mVvCij2ArMXMv49a46m8ltBnU+gbtg05+eZlvNEdYk=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: N/YKD/tg8t5YOoAZoQdh7cxFgL/HLxwWzqIIH3T5QZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:45:ac:e2:6e:7a:1f:24:57:22:bd:56:0f:81:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Oct 27 03:00:35 2025 GMT
Not After : Oct 28 03:00:35 2025 GMT
Subject: CN=d565b37d1b943ac403d2b64d1089d06cb68e6e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:17:d2:0e:33:2f:af:5d:91:13:6b:84:b4:
19:3a:5b:12:ce:29:df:12:09:23:79:3c:6e:e7:9b:
e2:33:3b:c6:3a:64:fe:a5:b9:c4:8d:1d:08:0e:a1:
3e:01:e3:b1:3b:72:27:ac:74:e7:9a:1d:65:24:87:
74:63:b9:fd:6f:5d:fd:eb:17:c3:46:f0:34:47:0a:
4b:b2:22:6f:09:72:15:16:0a:36:7f:80:c2:bc:9a:
db:bb:39:bd:4a:bc:af:bd:85:d6:84:d4:00:ea:bb:
2d:18:d7:4e:35:9b:cc:b5:3f:d2:a9:73:eb:bb:11:
12:a6:3e:2f:5f:81:6a:be:94:1c:20:14:a2:d8:c6:
99:9d:bf:d5:6e:24:93:57:d3:2e:ad:d3:64:58:3c:
21:99:3e:a3:1b:b5:7b:cc:39:45:89:4c:e8:83:36:
06:de:ba:1e:b3:0c:90:1a:a6:26:55:f5:ab:35:eb:
e9:ff:cf:d5:bb:7d:97:a4:b5:26:e5:5b:36:18:72:
8d:3c:7a:a8:ac:7d:11:40:8a:71:28:ca:28:a9:de:
b6:11:44:99:bb:0e:18:13:02:4d:98:90:70:21:18:
61:ed:75:1f:00:26:73:2b:7c:e1:f4:24:3b:61:8e:
fb:61:64:97:c0:05:4e:3a:8e:20:18:a3:bb:a2:c4:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:B3:7D:1B:94:3A:C4:03:D2:B6:4D:10:89:D0:6C:B6:8E:6E:84
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:89:07:53:14:77:f8:93:cd:df:a5:50:04:d9:f5:9d:fa:4f:
9c:63:88:14:3a:37:34:ae:08:cd:63:64:15:12:e8:f4:c1:19:
9f:cb:96:d7:e5:57:23:c0:c6:29:8d:1d:57:76:6d:2f:d4:cf:
d3:c7:4f:59:b2:a3:69:ce:dd:20:7f:5d:3f:e1:5b:25:f3:2d:
55:c7:5a:f0:9d:f8:22:de:64:31:5d:5c:45:6b:3f:d2:41:e1:
ec:70:d4:6c:ba:40:df:28:8a:d4:7a:82:10:5b:90:93:42:ef:
6c:d0:6c:97:03:cc:f2:21:ea:ab:74:8d:e2:ef:ff:0e:9d:d7:
a3:56:5e:1a:4d:3c:09:46:e2:b3:08:33:e1:8e:92:fe:23:2a:
d7:95:4e:41:e7:86:cd:c6:b6:75:8c:91:be:0a:2f:c9:a3:49:
a9:fc:67:47:0c:43:85:3a:45:47:2c:3f:78:7b:2d:d7:4b:d6:
3c:5f:f3:c8:e0:b8:48:08:9a:62:d3:2b:f2:c0:43:d8:b9:8b:
17:16:37:ba:3c:8a:fa:d2:6f:fc:6c:5f:41:da:29:0f:cc:05:
d5:9f:1c:75:41:d6:17:42:6b:e3:25:13:f9:1c:e7:db:56:0c:
00:78:b0:bd:60:16:49:20:d7:6b:0b:84:10:03:2e:fa:16:fc:
f8:73:5c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:00:59 2025 by rpki-client