Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: N6VpvVtEyt2Ijr+KMLfcmglpmSkGYY3KXMhTrsQ9Btk=
Subject key identifier: 31:AE:50:65:9E:72:F6:6E:16:7A:B4:29:4A:8C:46:32:80:1C:E2:74
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 019A19F488974F658AF4AB0F64FF8AB144E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0BD9
Signing time: Sat 25 Oct 2025 06:00:47 +0000
Manifest this update: Sat 25 Oct 2025 06:00:47 +0000
Manifest next update: Sun 26 Oct 2025 06:00:47 +0000
Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=)
2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: 7npkRuMST/paPNarGNRTyxVmAVVPEDTC6uh3mbE2xRo=)
3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:f4:88:97:4f:65:8a:f4:ab:0f:64:ff:8a:b1:44:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Oct 25 06:00:47 2025 GMT
Not After : Oct 26 06:00:47 2025 GMT
Subject: CN=31ae50659e72f66e167ab4294a8c4632801ce274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:a4:b1:0a:f3:74:85:5a:ed:7c:c3:5c:80:
d4:89:b6:fa:3b:a2:a2:9d:7e:39:26:e1:0e:74:80:
98:f2:b6:b3:7e:1b:f9:ae:a2:39:d8:82:da:a3:cc:
06:e5:59:42:1d:c1:0a:f2:4f:21:82:58:4a:7d:cc:
c7:cc:33:ce:a2:c2:59:28:e4:97:c8:15:b0:03:f3:
fb:22:76:fc:bd:22:d7:f3:ba:fe:69:c8:57:19:42:
5a:37:9f:20:71:03:a1:0b:c0:b6:16:4e:8d:9d:b4:
1f:72:78:ec:43:da:0e:80:bd:e1:0e:58:64:82:ff:
51:31:43:15:04:4e:ce:e8:7b:e8:90:7d:f5:c0:47:
d7:bd:7f:a8:45:8a:67:d0:33:13:b3:79:1a:90:ef:
21:3c:1b:42:b1:39:ae:20:e6:58:d3:85:d9:11:ba:
6b:2e:d8:e4:4a:c3:81:eb:1a:40:fa:0d:7c:c7:66:
26:ef:9c:8b:7f:9a:fd:8e:60:c9:a7:03:d4:2d:12:
4e:9e:84:ac:01:46:dc:29:a3:9f:44:35:53:98:9f:
0d:84:7c:f7:3a:1d:e3:85:21:f7:19:27:9f:c4:b8:
4a:b0:6a:70:ee:e0:22:c4:ca:da:38:5d:6a:c8:cb:
b0:8d:44:a2:39:ce:f2:8b:cd:a1:16:84:b2:25:dd:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AE:50:65:9E:72:F6:6E:16:7A:B4:29:4A:8C:46:32:80:1C:E2:74
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5c:3c:a8:f2:7f:47:45:31:fd:5b:ed:51:61:10:20:91:2b:
68:59:bc:89:54:b6:8c:d6:38:80:27:6f:45:6f:64:4e:c1:6e:
e8:a0:9e:ed:cc:44:e8:8d:4c:17:7e:5d:8d:ba:24:e6:5e:85:
a7:76:d5:92:0f:fc:97:5f:49:9e:8d:2d:8b:21:b4:e9:ea:e2:
c2:5a:12:a9:e5:98:a3:68:08:84:49:41:61:eb:d2:80:6d:1e:
54:69:e1:72:d2:83:b1:04:c1:eb:44:70:70:e4:55:fa:7f:5a:
db:14:33:84:95:c2:1a:ee:fd:a0:ef:f4:2d:45:17:b1:e2:c5:
b5:27:95:12:3b:50:3b:9c:37:96:22:ac:bf:6e:90:1d:90:a1:
1c:4f:a2:8f:9f:21:6f:c2:1a:db:95:c3:c6:80:92:3c:7c:dc:
9b:ed:b8:95:24:b2:77:ee:49:ee:9b:90:1d:88:22:3c:1a:2e:
46:2c:a9:c1:b3:3d:5f:26:24:69:e0:c1:8a:f1:09:02:e2:b6:
54:9b:9f:36:3c:a4:5c:1d:62:d5:aa:6a:dc:24:04:ca:56:2d:
53:23:e4:11:8c:6a:56:bb:99:25:7f:b5:de:dc:39:3d:36:5b:
d3:38:67:d0:5a:6e:8d:33:75:d8:b4:28:52:f1:de:8f:df:c8:
01:55:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 14:48:45 2025 by rpki-client