Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: 0EZ2MxZxQ+n0/l9o6n6yo90x20T0vDbmmwSlvFOOyhk=
Subject key identifier: D4:1B:A9:06:2D:E6:80:BB:E8:93:F2:85:2B:90:CA:02:FA:E8:58:C3
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 019A2553F09707D089CF11A87AE2AA630A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 0378
Signing time: Mon 27 Oct 2025 11:00:49 +0000
Manifest this update: Mon 27 Oct 2025 11:00:49 +0000
Manifest next update: Tue 28 Oct 2025 11:00:49 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: oUVfGCn+MPJ9S1Bhx9AZmp3mtWelvcx4vWzkZoAAtJw=)
2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:f0:97:07:d0:89:cf:11:a8:7a:e2:aa:63:0a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Oct 27 11:00:49 2025 GMT
Not After : Oct 28 11:00:49 2025 GMT
Subject: CN=d41ba9062de680bbe893f2852b90ca02fae858c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:43:f4:f2:4f:ee:21:3c:26:77:b4:84:78:60:
4e:89:4e:4d:4c:c7:02:e6:7f:e2:b6:3b:04:2c:6c:
f8:6c:e2:3b:58:80:1d:87:54:57:44:c7:63:06:f4:
45:9a:82:ef:2c:a5:70:06:77:5a:a7:b0:18:85:89:
b9:dd:cf:6c:f4:a5:79:b4:ad:f7:0a:4b:35:45:fa:
d5:f0:e1:2b:92:f7:f3:96:a3:76:e4:37:a6:71:0d:
24:fe:c0:83:c0:28:3d:9a:78:df:a4:0e:f3:cc:a1:
38:62:9f:a5:89:e9:9d:fe:47:9b:61:35:cd:a7:26:
f3:01:5f:a2:56:c0:c7:b8:d4:a0:c5:fb:ea:8e:c0:
20:8b:9b:b7:ce:4e:42:8a:45:57:b0:b9:cf:b4:20:
ca:36:a1:fa:af:40:ed:60:23:86:fb:e7:c3:45:c3:
ba:c0:1e:44:9f:08:a5:6b:92:d7:89:32:e8:69:b3:
51:dd:8d:af:7a:b5:b3:aa:97:90:7a:26:fe:51:d0:
cf:47:de:8e:49:f4:d8:a8:ca:3c:e7:0f:ed:a6:9b:
57:39:a3:9e:18:70:5f:9d:da:c6:1a:1d:d7:c5:32:
8b:26:e3:c5:4b:67:77:1d:a9:96:c8:5f:7a:f2:12:
f6:6c:00:88:98:d6:e4:c0:98:6e:ce:33:48:af:85:
b1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1B:A9:06:2D:E6:80:BB:E8:93:F2:85:2B:90:CA:02:FA:E8:58:C3
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:20:43:98:30:21:47:36:81:a2:e9:1d:59:a8:2d:c3:82:7d:
16:8f:eb:a5:8b:1b:4a:c4:8d:c5:0f:fd:9c:42:b9:2b:86:12:
88:14:f4:8d:e4:3b:3e:c1:49:cc:56:bf:a5:35:a8:9b:64:64:
93:92:43:79:7e:65:20:f9:d7:d9:c6:39:35:54:3f:bf:c3:03:
1d:e5:be:c5:55:ea:cf:99:92:47:d5:40:c7:43:62:82:31:8b:
b3:8c:8b:ee:55:08:24:34:86:70:fb:2a:07:9d:d1:4c:ea:a9:
a3:58:a5:99:2b:19:7f:df:2c:50:20:5f:6f:e3:3b:06:f7:be:
e7:bd:9a:ee:c7:c1:e2:26:bc:95:e5:b1:0d:8b:70:ad:2c:7f:
5d:01:ce:f3:b6:63:c8:b6:82:48:d6:07:4b:3c:14:c3:c3:44:
20:64:c0:d7:d5:5b:79:b8:cd:df:a9:4a:43:6f:e5:40:38:79:
74:cd:23:5b:ee:6e:02:c6:06:29:fa:cf:a8:8a:d3:cf:c1:ab:
cd:64:14:12:9b:55:53:90:4d:f4:7c:d5:2b:d1:b9:c3:56:f0:
10:88:8f:1e:e3:86:00:02:06:4f:20:c2:bf:30:66:77:03:17:
1b:32:d0:b6:67:07:64:62:04:08:57:e2:c6:84:d6:15:42:46:
88:6c:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:06:06 2025 by rpki-client