Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: bSQPIZllS/bXKKpcUh34qsYVt1aRAPtmdf/x7JPaWzw=
Subject key identifier: C2:69:90:05:83:53:A2:C7:7A:D2:82:25:5B:83:89:BC:73:92:C1:D7
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019A0DB97E4D3802A2B3FC22A195452292A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 1415
Signing time: Wed 22 Oct 2025 21:00:51 +0000
Manifest this update: Wed 22 Oct 2025 21:00:51 +0000
Manifest next update: Thu 23 Oct 2025 21:00:51 +0000
Files and hashes: 1: PPDcjsjoszwTm8EI4XbGMJZozgI.roa (hash: 7Lx0Qx1q5+o5Xi1eI3iJhMLtFTgxseeHLhiTQPfBYeo=)
2: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: +Y4nTeAwbISfnUVdeaVuU7blhv6iyznIDplLOZ1Z31I=)
3: tedYlf87S78MkPQe8A70plM_Ngw.roa (hash: R2UtbWccTfdmsOnpPUNeRj+D5AnPyUqgeXRoHV5PeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:b9:7e:4d:38:02:a2:b3:fc:22:a1:95:45:22:92:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Oct 22 21:00:51 2025 GMT
Not After : Oct 23 21:00:51 2025 GMT
Subject: CN=c26990058353a2c77ad282255b8389bc7392c1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:d0:20:9f:80:64:8f:18:cf:d3:32:b3:d9:
2c:2e:5b:0c:f7:52:ac:64:70:6f:eb:35:3d:7e:b1:
b3:e8:d0:70:63:4c:44:91:6d:c3:98:e2:ac:c7:a7:
e7:38:d5:99:df:a5:c6:53:2d:e6:0b:c7:97:a7:f9:
c8:01:fa:a7:38:f4:43:ed:49:7f:cc:87:39:c3:f5:
89:ea:df:ae:b7:5d:f3:20:6b:3e:6f:41:e5:04:5c:
f0:b2:38:ca:ef:53:e7:c3:68:08:e8:dd:17:e8:a0:
b2:09:cf:d1:85:3e:a7:60:a3:ff:5a:ca:a3:ac:51:
e6:e0:5f:5d:9f:9d:63:e1:cb:be:e9:0b:9c:6f:08:
7b:cd:b9:01:6c:31:03:f9:b1:a6:b7:91:00:09:13:
b1:c6:6e:95:56:58:dd:1f:e9:ed:93:0c:b1:7d:e4:
26:fc:76:7b:15:09:37:c6:f9:df:44:54:eb:54:dc:
11:3d:2a:38:b0:3f:37:36:03:8d:97:3f:5c:de:ec:
7b:d5:da:70:a6:09:db:ae:75:e1:ec:1c:2b:95:8f:
ac:b0:9c:3d:08:8a:dd:2a:a6:0e:61:73:f9:da:01:
1d:d6:d1:37:4a:3c:df:a8:72:0f:92:ce:95:fa:3e:
63:b9:20:32:52:21:e3:c0:00:93:74:e8:91:db:24:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:90:05:83:53:A2:C7:7A:D2:82:25:5B:83:89:BC:73:92:C1:D7
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b1:2e:aa:5d:b2:f6:95:7e:f2:f5:ce:ee:d7:0f:84:7d:a6:
6e:19:59:55:17:01:54:3b:5d:ef:e4:27:73:ac:c0:0f:64:21:
48:c3:81:36:68:30:a4:23:52:9b:0a:3b:57:d7:24:f7:52:49:
38:12:86:24:74:70:cb:ce:52:80:76:67:06:b3:90:cc:40:87:
57:86:22:f4:a2:fd:44:75:52:56:a1:4d:7d:c6:f0:9a:2f:09:
c9:c6:19:23:cc:67:ed:a3:7b:85:97:5c:b6:c2:7c:c1:ae:9c:
af:6c:0d:07:a6:4c:36:17:35:4c:f8:09:67:cd:9f:05:e2:2c:
60:98:e8:16:d9:6b:bb:ad:bd:bc:2a:44:6c:05:65:b1:00:e6:
95:88:d7:82:2f:6d:ab:a4:24:3f:c2:01:40:dc:6e:5f:71:bf:
49:ed:18:c6:1c:0c:97:41:e9:b1:b1:4d:4e:2c:ef:d2:02:30:
6d:b8:e0:08:bf:0b:33:7f:a1:a2:e3:47:b3:ab:bf:c7:98:ea:
2a:40:1c:97:64:a2:a5:91:ea:5a:a3:d0:55:76:fb:50:ab:cb:
bc:44:dd:a4:ea:aa:14:a5:33:f6:10:73:76:a3:14:c7:63:f7:
12:b7:c3:24:0c:ce:9c:9a:60:b7:37:df:ed:b4:bd:80:16:79:
41:22:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:01:34 2025 by rpki-client