Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: 6Vnw1tvfpbGhasF9XV6Azx+mZEMZpx4BEI4EqZCtAgc=
Subject key identifier: 4A:98:F9:FD:F3:6E:0B:82:2D:24:84:27:BD:DA:EA:39:D9:83:FF:1D
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 019A202D5F94925E83067F88E73FCC9344C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 0642
Signing time: Sun 26 Oct 2025 11:00:35 +0000
Manifest this update: Sun 26 Oct 2025 11:00:35 +0000
Manifest next update: Mon 27 Oct 2025 11:00:35 +0000
Files and hashes: 1: S0bRpdJWK72QH0WUGiObKU-szZo.roa (hash: nahgUHhIrdKyE1HO3U29HHKRqVvxXNA6pcRe9FHTMjw=)
2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: 0WSH85i+5Hij9dp1plelh1f6Et1b1r1oRpqlokwPFwU=)
3: j7_hDGdLtkL478z9D-_ULzuPNQ0.roa (hash: cHtMiS6d0uLx+z24O2WShjptyU5EzGP59Cio4Yaow/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:5f:94:92:5e:83:06:7f:88:e7:3f:cc:93:44:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Oct 26 11:00:35 2025 GMT
Not After : Oct 27 11:00:35 2025 GMT
Subject: CN=4a98f9fdf36e0b822d248427bddaea39d983ff1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:75:7a:6a:fc:26:d8:89:8f:15:88:2e:bc:
05:6e:b7:98:33:07:c2:54:1d:0f:16:31:22:f0:28:
fe:5b:81:c7:49:c2:ca:6c:5b:ca:2e:14:db:ef:ec:
b8:06:db:5c:bc:fc:48:13:87:37:1e:b7:05:59:46:
58:4f:af:42:d3:d9:e5:e7:a8:65:1e:12:fb:16:b1:
70:ec:01:f7:6f:fa:03:ff:83:56:26:cc:ea:62:c9:
e0:1f:4d:b8:81:f6:d5:6a:01:8f:5d:d9:cf:d8:c0:
e1:05:ce:c1:eb:60:85:9d:ee:52:f4:59:aa:fa:0f:
6c:f7:04:2d:c9:61:97:a1:50:23:27:13:54:c6:38:
1f:bc:34:23:a4:29:f5:74:d9:7f:7b:27:0e:51:74:
5e:4b:39:42:76:7a:ac:18:cd:2a:f0:41:0c:a8:4e:
da:84:fb:ae:e5:45:75:c7:da:78:3a:ad:0c:4c:0d:
1f:42:34:b7:a6:52:0f:be:1b:17:e5:fb:23:70:26:
06:03:bf:ad:6e:3c:e0:ae:d9:16:7b:fa:a2:fb:52:
b7:f2:b5:92:0f:46:ee:45:99:83:6a:38:24:30:a0:
76:d1:5e:2e:db:8c:84:de:d0:4d:09:b3:10:4b:bc:
d4:38:3e:64:42:63:28:0f:3a:fa:e2:50:6f:96:e8:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:98:F9:FD:F3:6E:0B:82:2D:24:84:27:BD:DA:EA:39:D9:83:FF:1D
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0e:a7:48:77:33:87:c7:58:67:85:93:c2:2b:bc:73:f6:f5:
6e:62:10:12:61:a2:5b:4f:bd:4a:13:33:57:c6:06:ee:f2:92:
3e:a8:74:43:2a:29:41:78:b7:d0:14:c5:98:87:d2:c1:c3:4c:
72:8a:4e:18:71:db:c9:84:5d:c8:70:7b:ac:53:b6:73:01:5a:
aa:77:11:f3:62:01:fb:09:58:4d:d4:11:6a:1f:ad:e2:62:2b:
d6:20:b6:46:39:9d:26:44:f0:8b:1c:86:1a:37:a6:b1:af:b3:
39:b3:22:52:67:06:5b:10:08:16:49:40:75:56:2f:d6:36:b5:
57:36:1a:24:19:d0:e7:a0:84:de:70:d1:20:f9:b8:63:34:23:
50:25:57:3f:9a:7b:9c:eb:5b:2e:6b:f2:a8:bb:55:b6:73:72:
1c:8e:e0:74:1a:6f:4c:0a:50:49:59:c3:d8:6a:dc:f9:36:18:
a6:d0:d6:c4:be:63:ec:ee:b7:c7:cf:80:91:bc:7a:8b:13:4f:
69:e7:5c:fd:7f:55:84:32:6c:ca:25:cf:19:b5:46:66:2e:be:
3f:78:e4:5b:30:77:37:db:5c:82:82:6c:03:b3:00:e3:b6:63:
92:9b:de:e7:a0:b6:fb:4f:6a:ad:27:f1:62:91:64:a6:a9:4b:
df:bd:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:02:31 2025 by rpki-client