Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
File: YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json)
Hash identifier: R2H1hFmFaY3NHjC2UIZ3LjSUyZv0V/WkuFj8Acc9Hhg=
Subject key identifier: 15:75:28:5D:DB:04:78:8D:CA:B5:50:3E:5B:9C:33:49:E6:AF:B1:2F
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial: 019A2477C6B137531B38E6E86237B09C11C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
Manifest number: 0FD2
Signing time: Mon 27 Oct 2025 07:00:20 +0000
Manifest this update: Mon 27 Oct 2025 07:00:20 +0000
Manifest next update: Tue 28 Oct 2025 07:00:20 +0000
Files and hashes: 1: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: ZkV5XJKwp5KLo1r6FiVI193H7IQIkoq+i98yHsoLfw8=)
2: qx-NGj8MV_Cd9zpPet-1VEa08Ro.roa (hash: cxZbSa6oQLmYFFxeIAfjlhTWw1+qGjLvscb3SdGJg1o=)
3: r2K_C06ic0Dj0a3NFZhhI6ooNvs.roa (hash: bne8Sm5wB0CMu858I+GoE6ZpkxWpdhA80NITFW1Cun8=)
4: yeRaarOsqQL6T8MId8Dw-zjDpyI.roa (hash: PcKi02vr0pDiDVlpa/LbtFTT0UyPuUQNtlWvZyQzOuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:c6:b1:37:53:1b:38:e6:e8:62:37:b0:9c:11:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Validity
Not Before: Oct 27 07:00:20 2025 GMT
Not After : Oct 28 07:00:20 2025 GMT
Subject: CN=1575285ddb04788dcab5503e5b9c3349e6afb12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:3a:6a:ed:00:94:9d:4c:58:85:b0:67:68:
b1:e2:60:7f:0c:4e:42:9e:b2:33:fd:ff:1c:55:4a:
d0:65:31:b5:84:2c:99:31:0d:48:e6:a9:70:ec:5e:
d3:22:1b:ee:53:14:84:c2:05:39:dd:1f:43:4d:4d:
26:8f:fd:4f:be:4a:50:ac:7e:36:c0:4e:58:e4:22:
27:ca:7d:9a:35:41:d5:9f:c0:71:f1:86:2c:3b:61:
92:6d:35:d0:e6:71:b9:9b:29:65:54:57:ab:8b:f4:
2e:c0:d0:7c:74:d5:6f:89:0c:a3:1a:78:3b:3d:f3:
00:74:f5:52:62:04:7e:cd:bb:a1:28:fc:f9:ff:be:
e7:41:40:96:92:f2:ae:0a:b5:0b:0e:7f:c9:94:c8:
4f:58:75:53:69:97:58:85:26:f4:9a:8b:a0:9d:7b:
a4:4b:dc:2b:2f:c6:d4:75:6c:8a:fa:66:52:1d:9f:
a7:0f:0b:bd:21:2a:82:a7:40:56:56:48:a1:b0:76:
93:d2:13:20:54:51:66:36:4e:09:6e:db:13:30:31:
e9:19:49:eb:46:35:8e:73:a1:f5:db:a5:33:f3:55:
d6:4f:fd:f0:bd:ec:41:a6:a6:d9:a5:37:93:87:ac:
25:7f:94:74:21:27:51:e3:fe:4e:9e:45:14:cb:ac:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:75:28:5D:DB:04:78:8D:CA:B5:50:3E:5B:9C:33:49:E6:AF:B1:2F
X509v3 Authority Key Identifier:
keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:3b:a9:4e:33:df:ab:eb:47:12:35:75:c7:ab:e6:a4:26:
c2:4d:bd:66:6d:61:20:0b:23:47:20:95:c6:1c:5d:70:7f:fa:
54:34:dd:d0:e4:07:9e:1c:ac:0e:ed:52:63:b6:f9:7c:0d:d1:
88:95:51:50:25:6c:df:c5:02:09:ff:5c:d6:a1:cf:6d:73:da:
c4:98:a0:fa:28:ac:93:82:a2:34:7b:40:9a:93:cc:bd:36:b4:
97:1c:7e:33:b7:fa:0d:1b:24:e8:f9:5f:ff:03:03:c5:b2:c7:
1f:77:5e:1a:62:44:6b:29:a8:76:db:a0:39:3d:5d:f2:a8:75:
dc:c8:3b:66:f6:f5:cc:7e:ce:70:b0:d0:6c:27:57:10:41:9e:
89:9f:82:78:42:de:46:e8:34:f9:6c:2c:f8:33:7a:e8:96:d5:
d6:91:14:18:19:da:c3:03:02:6d:b6:95:aa:08:a5:84:fa:80:
20:51:b8:bd:c5:3a:05:5f:db:9a:36:2f:f5:69:4b:05:76:69:
a2:36:78:5f:ac:b4:6d:9a:2c:52:19:70:1d:72:87:af:90:54:
ae:3e:e7:19:22:24:6b:c6:db:9d:16:55:b0:dd:e5:c1:2e:4e:
1f:21:6f:80:a3:1e:31:8f:a8:eb:28:cf:b9:a5:6f:ce:b6:04:
2d:6b:32:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:02:38 2025 by rpki-client