Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier: Lgn6B8bfiOlTeGYdsj118mK8UX4Yx+PAvqFQP0pRfXo=
Subject key identifier: A3:D1:37:E6:28:40:FA:08:9D:85:9E:5F:38:12:36:4F:2C:EF:35:86
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial: 019A2B55E13E4FEB455F3E128EBB69BBA060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number: 0125
Signing time: Tue 28 Oct 2025 15:00:39 +0000
Manifest this update: Tue 28 Oct 2025 15:00:39 +0000
Manifest next update: Wed 29 Oct 2025 15:00:39 +0000
Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: vfxcFeS0CcDv6dXjtMhMa5KUgSz2KyrKfZOQ279eJHg=)
2: yJ1HWDzaQf8_v_QIkEVeJhHUsNs.roa (hash: uRF7ZuSGISVIOWjvLjFgvjfyhiciNwgKOFC9/lRcs/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:55:e1:3e:4f:eb:45:5f:3e:12:8e:bb:69:bb:a0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Validity
Not Before: Oct 28 15:00:39 2025 GMT
Not After : Oct 29 15:00:39 2025 GMT
Subject: CN=a3d137e62840fa089d859e5f3812364f2cef3586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:bf:fa:b6:dd:57:c7:d3:60:5d:27:99:f8:
01:be:a5:9e:8b:47:f6:f2:83:48:79:0a:db:e6:4a:
a8:77:5e:e9:45:b5:70:67:92:c3:9c:a6:22:02:2f:
da:9d:55:56:76:92:fd:1f:d8:ca:11:05:ca:ac:f6:
4b:86:64:a8:9c:24:2b:70:5b:d1:90:f9:fd:6e:92:
e0:ab:ca:38:ee:24:0d:49:e2:82:4b:9c:c7:03:93:
3d:d4:97:ed:60:79:09:93:b1:42:59:3f:4e:2f:51:
dc:8c:d8:3a:80:44:20:2f:fb:43:6b:9d:1e:60:e2:
fc:75:cc:68:34:ed:22:e0:e0:df:52:47:07:ca:de:
ff:ee:8f:7a:b5:1c:7d:aa:5e:da:89:86:b7:57:c7:
32:e9:7a:76:d3:42:e4:53:e4:d8:91:da:c9:f7:b7:
3b:c9:58:dc:a6:aa:ae:d4:17:29:f2:23:92:98:4c:
a0:9c:e3:6d:03:43:35:2e:e2:b7:09:4e:48:74:f7:
c3:1b:b6:c9:25:32:8b:59:e8:9f:48:db:bb:43:25:
f2:77:68:f9:10:89:4b:4f:b1:0e:d0:3e:b0:c4:2a:
34:c5:34:c4:9c:a3:cc:7b:0a:37:4b:52:b2:9d:17:
e0:6e:d9:4e:a4:54:8a:5f:43:48:0e:f8:98:0c:50:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D1:37:E6:28:40:FA:08:9D:85:9E:5F:38:12:36:4F:2C:EF:35:86
X509v3 Authority Key Identifier:
keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d6:2f:e6:52:75:65:34:5b:b3:eb:c0:e8:8e:98:b9:bf:68:
7b:ff:c3:cb:34:d2:a2:45:5a:e8:31:a0:6e:85:b9:fd:b8:b4:
41:61:5b:2f:79:e1:64:7c:2e:16:e4:e8:7b:ce:80:ba:90:67:
88:15:5e:89:0a:03:f0:26:29:1b:65:61:ec:be:ca:6b:2c:ad:
0e:58:b6:73:f9:83:d9:9c:4d:66:df:d2:b8:28:65:8d:4d:74:
02:6d:0c:ac:99:a9:2b:cc:9b:f0:4c:4f:ba:29:78:c9:bd:35:
e7:03:1a:be:3d:ca:22:e8:28:4b:f1:69:03:44:d5:98:46:98:
92:51:8a:8c:d0:87:91:e6:26:06:d3:31:6a:ea:3d:bc:92:95:
bc:63:9a:7c:45:1d:6c:2e:23:08:a1:4e:d0:c2:84:b7:5e:ff:
74:54:02:b0:9c:55:83:30:e2:52:d4:db:24:00:d0:92:da:08:
8c:8c:34:21:fd:64:92:79:b4:42:d8:be:fd:78:83:3e:92:84:
3c:94:f6:81:3f:e8:8e:6a:c9:5c:5f:b0:46:be:3e:eb:12:a2:
b0:96:32:43:d9:ab:63:dd:cf:61:7a:cf:31:19:8e:cf:a9:9e:
2b:d5:60:a8:fa:81:a6:c1:5c:86:21:67:fe:47:66:d7:c1:6d:
f0:db:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:09:52 2025 by rpki-client