Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: C6hf5jJQZQug3ymR1aSQBc9WgY7FdAbFsQ4mnUppuMk=
Subject key identifier: 1A:11:CD:EC:32:A8:FC:1F:73:3E:53:50:F1:F8:78:D7:3A:74:E9:9C
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 019A34C68D2731D50EB5348BA20AC99DC2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 0527
Signing time: Thu 30 Oct 2025 11:00:18 +0000
Manifest this update: Thu 30 Oct 2025 11:00:18 +0000
Manifest next update: Fri 31 Oct 2025 11:00:18 +0000
Files and hashes: 1: 8tq6vUxikXVafkdQNOumeQjFfpc.roa (hash: UpmsMokgr2OHdk8MVVsUZdaiVZYh5g21JKYfdCc4ZA8=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: x5teYr+FU52h0rJFnNrzKzB27Zw3OXtWKC4Ao7mwBMU=)
3: j89ASOslTb0sA8qPaNCnvdarbHI.roa (hash: pTH6+0WVaBMdNBqgh83yrPXmlHTEaPDbAotvSzt0CT4=)
4: vSrVfCiFhwuThaFge_HlQGTrHjk.roa (hash: Bc63krCzWLaf7LOD/k916HgQOiH2H7M6asbeefYBGos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:c6:8d:27:31:d5:0e:b5:34:8b:a2:0a:c9:9d:c2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Oct 30 11:00:18 2025 GMT
Not After : Oct 31 11:00:18 2025 GMT
Subject: CN=1a11cdec32a8fc1f733e5350f1f878d73a74e99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:b6:4d:8c:52:91:14:4b:95:ac:40:20:b7:
80:84:5c:c4:c4:44:92:fa:e0:02:1c:f6:bc:2b:f9:
1d:da:26:fe:53:ed:65:9e:aa:4d:70:24:17:83:6a:
86:48:27:89:57:f7:b5:8e:03:25:b9:76:a6:78:54:
62:d9:80:3b:5e:83:11:23:2e:56:b6:11:77:01:3a:
22:0c:a7:ec:ce:bb:44:50:29:33:9f:c2:d1:a6:a5:
f5:59:4d:0f:da:1b:86:ab:4e:3b:c5:5e:09:91:f3:
16:e3:48:09:62:fc:ac:8b:ba:e7:d8:41:7e:d7:e4:
19:fa:1e:88:72:44:07:eb:ce:42:9c:aa:20:aa:20:
f5:95:03:45:20:48:3d:96:10:99:36:d9:62:37:66:
b0:c7:05:2f:5c:5c:a3:78:59:aa:17:3a:1b:2c:6a:
32:14:ed:1f:2c:85:6f:55:19:6f:c6:5d:cd:a1:2f:
58:f8:36:a8:02:93:d9:13:43:5f:10:e6:f2:d7:c3:
5c:53:f1:b1:00:62:88:53:24:4b:46:d5:43:31:a6:
0a:1b:e2:1d:4e:1b:78:aa:52:7f:fc:e0:eb:a7:58:
1e:ec:3f:ab:ee:06:76:d2:cf:8c:e1:45:34:15:85:
73:c7:22:12:df:1c:7e:f2:88:3b:41:7f:58:74:cb:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:11:CD:EC:32:A8:FC:1F:73:3E:53:50:F1:F8:78:D7:3A:74:E9:9C
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fb:82:5d:44:14:a5:6d:8c:c3:a3:5b:c8:26:bf:ed:33:5d:
1f:a9:23:ba:15:26:b5:0c:94:dc:62:5b:a2:95:5f:a7:a9:8b:
29:e3:83:62:e4:08:98:f0:7e:bc:3b:ea:d5:36:a6:82:1c:ca:
ea:82:20:6a:cb:3c:30:55:16:8b:00:fd:b0:e8:3c:ce:1a:ad:
ac:1d:f3:a0:02:e5:61:68:ea:ff:10:47:68:6c:c5:8b:1c:42:
c7:f1:e1:c0:71:b3:42:fe:fd:b0:a6:2e:f3:4d:80:79:08:84:
ab:71:82:ca:98:6d:a4:97:36:0d:33:d6:aa:98:bf:df:b7:f1:
a9:31:29:e2:5e:88:10:f0:65:dc:7b:00:db:65:dd:69:32:51:
3c:7d:f9:f0:16:31:ba:60:95:7c:9a:93:5c:91:10:e5:53:5c:
e0:c5:e0:ce:cd:ee:b5:f2:b7:8b:2f:30:6f:e5:55:c5:ec:bf:
51:c6:7f:79:38:14:3a:bc:a9:21:7c:5f:20:86:92:17:95:0f:
5b:39:9b:d9:40:8f:5b:ed:3e:2a:0d:36:66:d3:b3:cf:62:5b:
a0:79:48:7d:d9:0b:47:a1:25:3c:41:7f:73:f5:85:d1:d4:d8:
ca:5b:b1:f6:03:18:c3:bd:89:7c:02:f4:a9:b8:8b:e7:66:e4:
b2:ca:b1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 16:54:11 2025 by rpki-client