Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: TZ6JmpgUsW34y8oRLvmX0H2Z5yHCNpuU3Z48FRjt7yU=
Subject key identifier: 1F:28:A7:15:33:77:20:6D:B8:C6:66:6B:1B:84:8B:FB:CD:86:36:13
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 019A7180818B2A03B9F1E105855326E7A6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 0682
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: VAzYkQRTgwiJaHwxuivv8ZFztSM.roa (hash: JX1t8tGMn8nyq5oj+S/xubK6nVg6WbHVtaOCdwSyvtE=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: AKQkOCMEoo56ytAWuAP5nJX7yNU23DTOF0SFBEPgru8=)
3: mduHn1Ba-swk6VOib9ml9GoEMsc.roa (hash: 3VvwRqUaU666bsiQcBrlluuEPtapExzv8dYQUHsb8Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:81:8b:2a:03:b9:f1:e1:05:85:53:26:e7:a6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=1f28a7153377206db8c6666b1b848bfbcd863613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:1e:b3:d1:74:98:e2:99:f1:6f:55:cc:c9:
ca:0f:3f:4d:6e:f0:dd:84:d1:18:9f:4e:b6:16:82:
20:b2:11:5e:11:d5:36:24:ed:e4:47:97:5e:28:94:
95:25:b6:9a:84:3c:3a:70:83:1c:27:05:82:6c:d0:
8b:e2:62:f0:58:fc:1e:7a:d9:eb:97:da:c8:f6:db:
77:f3:9d:03:dd:2c:4a:7a:0e:3b:cc:3c:d4:03:44:
20:69:a1:4f:ad:31:f7:b8:36:f9:a7:00:86:55:a6:
a9:3a:79:95:f3:22:22:78:71:22:93:81:36:57:a9:
3a:dc:d8:53:39:4e:b1:2d:a7:ec:b5:1c:3c:d7:d3:
4c:20:5f:d3:e0:70:1d:c0:f2:78:30:9a:d0:db:46:
87:59:c4:9b:59:dc:0d:12:2c:b4:da:c0:da:35:95:
2a:39:d1:58:20:48:5c:e0:19:45:be:d8:0b:62:5c:
1c:a8:35:bc:74:1d:68:b0:4f:75:d4:b3:86:f4:5f:
bd:a5:0e:ad:7a:eb:17:10:ed:db:f3:ac:fd:d0:0c:
ea:b6:05:5e:d7:a2:bf:cc:ac:38:e9:9b:cc:12:a4:
34:4b:81:be:1e:ce:29:3c:fe:e8:19:91:67:0b:a7:
48:8c:b0:37:d9:5f:9b:5c:ba:f0:8b:0b:4a:7f:4c:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:28:A7:15:33:77:20:6D:B8:C6:66:6B:1B:84:8B:FB:CD:86:36:13
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:52:56:61:18:f6:1d:74:b5:df:12:5d:0e:a9:6f:4e:4a:da:
57:7f:98:a8:c6:f2:13:f6:75:de:09:8d:42:cc:59:14:ca:61:
bf:5d:67:d6:ce:5c:b2:98:51:fe:3b:e0:35:b3:46:88:4a:ac:
89:4a:aa:4d:39:f4:66:10:45:64:b0:ee:cc:13:ad:a1:67:d0:
18:62:57:be:28:5a:84:43:bc:c5:b2:19:28:e9:28:59:a7:da:
0d:f7:ce:cf:9b:c4:02:9b:df:a8:e1:f7:a7:44:34:e3:8d:d1:
34:b2:42:ca:d1:64:b9:d6:e5:18:4a:0d:7c:f2:94:e5:5c:91:
4e:7e:83:e6:a8:0d:c7:9d:9f:b5:2e:44:cf:3d:a6:4d:cb:bb:
c5:7b:99:b4:20:1d:52:f3:d3:71:53:2f:e6:9a:e8:31:23:d8:
6b:11:14:00:9b:00:3e:35:76:64:68:84:e5:ee:b3:6f:2e:28:
ae:b6:31:91:9f:d9:00:6b:8c:e9:2d:7c:1f:aa:f4:01:aa:34:
c8:77:92:91:eb:95:dc:6e:36:6e:d0:ed:db:72:ad:4c:f5:0e:
60:27:f2:2b:b9:6d:aa:e8:a1:40:89:26:30:f6:bf:f8:67:5e:
b4:89:b6:c1:ad:ab:3e:e2:e7:bb:b1:a0:ac:52:0f:4a:d7:d5:
78:05:74:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:47 2025 by rpki-client