Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: g4OE4MGb27q4MI0EGxUH034mWXaT23C0f/TDZaSyjrY=
Subject key identifier: B5:56:C5:3F:84:15:59:19:42:AC:97:3F:A4:C6:06:AC:88:83:79:CE
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 019A258A9835C5FBC843CDFBD2CB51FC0FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 13AE
Signing time: Mon 27 Oct 2025 12:00:31 +0000
Manifest this update: Mon 27 Oct 2025 12:00:31 +0000
Manifest next update: Tue 28 Oct 2025 12:00:31 +0000
Files and hashes: 1: XuX7uT8cb5cVhdOXna_jZRuc6JE.roa (hash: 6nSukjm2iQoWm9SssGRSJpva0KahTxgtp11M/o63UVs=)
2: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: QJeYApHNcobVrjNPAzoBvSLEQ4L6Tevw2TwNoHm8s8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:98:35:c5:fb:c8:43:cd:fb:d2:cb:51:fc:0f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Oct 27 12:00:31 2025 GMT
Not After : Oct 28 12:00:31 2025 GMT
Subject: CN=b556c53f8415591942ac973fa4c606ac888379ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:f8:3b:2d:1d:85:10:29:7f:af:bb:2c:ae:
5d:21:97:31:43:b0:32:ab:6a:7a:f9:73:ad:dc:5e:
81:37:12:4b:cc:85:1c:b5:23:36:64:73:70:9d:e7:
da:e7:48:33:db:e8:91:2a:4a:5c:1b:fc:15:ac:f8:
d3:ef:38:cb:18:ee:3a:87:2b:20:dc:38:d1:0f:4e:
cc:2b:bc:55:fe:1b:f3:28:65:47:66:13:b6:f2:b4:
ea:53:d7:cf:fc:fe:02:32:6e:07:db:1a:9b:07:93:
bf:d6:4c:9c:fd:a5:52:e0:d8:07:e1:db:5d:e8:44:
2d:8b:4f:04:40:0f:09:6f:af:42:a1:52:72:42:09:
ef:b3:94:92:95:c2:cb:e1:de:1f:65:8a:e4:e4:9f:
77:0e:8f:65:5a:d3:6d:b1:59:ff:5f:fa:a2:04:c2:
06:46:be:2a:32:dc:49:90:06:fd:69:a8:f5:1b:7a:
34:8c:4a:af:c8:ca:11:38:26:50:91:2a:46:45:f3:
27:b3:a6:2c:68:7f:06:b1:cb:d4:c5:52:f2:7c:b2:
cb:9c:0f:3b:09:a0:c6:df:3a:f5:46:a2:5d:7c:df:
57:7d:59:17:f6:bf:22:41:cd:fe:85:36:84:14:fe:
d9:f0:19:ce:f7:63:47:b6:ac:bd:56:3b:87:ab:c1:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:56:C5:3F:84:15:59:19:42:AC:97:3F:A4:C6:06:AC:88:83:79:CE
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d7:2b:74:67:93:dc:aa:f3:5a:e5:b3:c6:e2:d3:98:6b:2d:
da:ca:63:08:fd:ed:b7:71:b0:e7:6b:e6:9f:0c:e1:e6:1a:77:
a9:76:ff:6f:ea:bd:71:20:74:c9:52:95:3d:20:60:a7:c0:da:
ad:0f:bc:9a:c4:da:72:5a:e7:d6:f2:c7:29:f5:4a:66:cb:01:
3c:37:fe:1f:a1:02:7e:2a:d0:70:a9:5b:4b:33:43:93:98:b5:
ac:28:7e:12:fe:c9:f2:af:37:82:69:bb:ba:ab:c7:c4:0c:7a:
39:fd:67:16:4c:6b:d8:ad:99:11:04:12:48:31:4b:06:ae:aa:
74:79:84:f4:5f:ba:1e:65:ce:f5:dc:61:b4:70:bb:3d:a2:ba:
90:6d:59:68:76:e3:b8:d9:23:c9:29:9c:f6:48:6d:c1:67:45:
12:7b:2b:e2:21:b0:5d:d0:9e:a3:12:3a:1f:1d:af:de:ef:26:
77:6d:c9:45:d0:62:a3:ca:4b:29:93:10:ab:5d:26:65:64:05:
8c:3a:f5:58:d3:d8:b7:6e:a1:7f:02:e8:9f:c6:d7:bf:56:a5:
3c:3e:9b:cd:44:6f:74:10:d5:32:7e:04:45:21:92:8f:64:d5:
cc:a1:af:6e:0c:ad:db:4f:3d:06:73:67:82:b0:d7:6a:7d:f3:
9d:a8:5b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:19:30 2025 by rpki-client