Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier: hXtFhn/7tPwGQF5MghAXMbIaJS754UzTSij2E0UeD6s=
Subject key identifier: DA:3B:69:31:7C:EA:76:F5:7D:1C:75:E8:7F:5F:31:EF:52:85:13:18
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 019A71B7F6ACFF410EFE640628CBE87225B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number: 15FE
Signing time: Tue 11 Nov 2025 07:01:12 +0000
Manifest this update: Tue 11 Nov 2025 07:01:12 +0000
Manifest next update: Wed 12 Nov 2025 07:01:12 +0000
Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: uAILVRw1Nzu11ssil/xgC/SUUcXSOS3nC8fdwHdSbkI=)
2: aC1zrHe-B2VbFWXSrCj-et8l1wo.roa (hash: dYtxir4EItimXJqX5OgUJO3jRJ2NZN3GpkUGUsB/28Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f6:ac:ff:41:0e:fe:64:06:28:cb:e8:72:25:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Nov 11 07:01:12 2025 GMT
Not After : Nov 12 07:01:12 2025 GMT
Subject: CN=da3b69317cea76f57d1c75e87f5f31ef52851318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a9:c7:19:8e:8b:17:a7:78:dd:7e:90:de:c4:
45:e2:96:62:3d:ed:93:94:8a:68:3a:94:ab:07:ce:
cb:2f:63:2b:a8:0a:ea:46:ce:b8:f4:4e:20:22:eb:
90:e7:3b:93:13:7b:b5:2b:32:13:02:66:73:25:4b:
c2:33:4a:cd:28:11:d2:c5:91:6e:c3:91:49:f1:60:
f1:ec:17:77:41:53:ba:9e:c0:59:3a:22:62:3e:46:
60:26:d5:8c:48:c0:9a:cb:4b:d7:5d:cd:98:93:a1:
c4:50:22:60:f2:7f:f3:26:37:0c:21:52:63:ec:01:
a1:ac:c0:9f:ec:c1:5f:85:32:d8:67:19:33:63:0b:
85:14:d4:01:18:1d:53:fb:65:c1:e5:15:1a:0e:9c:
91:de:1b:96:32:f8:73:b0:0a:7c:0c:e7:70:29:c7:
f0:c1:16:11:1f:64:f3:c4:fc:d4:bf:53:0e:01:e0:
a7:ad:82:47:cb:fa:15:e5:6a:30:cb:db:fd:5a:c9:
17:80:00:be:68:cd:2c:bb:45:77:bc:0d:9b:d0:dd:
1f:32:df:6c:a0:67:22:ff:ac:34:e5:92:4e:28:11:
e0:27:2b:86:58:be:2e:5a:9c:d7:ac:0d:5b:ba:6c:
39:a6:dc:44:76:2a:c6:48:a2:55:96:78:ad:fe:e1:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3B:69:31:7C:EA:76:F5:7D:1C:75:E8:7F:5F:31:EF:52:85:13:18
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a9:1d:d8:58:b0:7d:ea:49:41:02:8d:7c:c2:93:a8:ef:86:
03:72:56:a1:d6:e0:a0:46:10:91:f6:53:b6:98:46:96:fa:d8:
4f:d2:c8:f9:db:16:c7:e4:e6:af:19:fa:86:03:dc:c2:7b:4b:
5b:00:57:ce:f6:75:c2:66:11:c1:0f:fd:43:eb:73:f5:d7:a4:
05:7e:c2:80:2b:e3:5c:69:91:22:c9:e8:d3:69:76:1d:11:5c:
13:4e:3a:b2:73:eb:23:32:84:a8:af:78:cd:3c:4e:37:13:47:
12:23:86:28:7c:8c:2e:60:ae:50:a9:42:2d:ee:a3:b7:25:96:
33:7e:e4:2e:45:bc:fe:cb:fc:1e:cb:8a:2e:a0:43:47:89:57:
31:02:79:89:9f:42:20:a1:bd:2e:eb:53:15:27:82:ee:33:94:
74:dd:86:39:2b:9d:b4:21:7b:87:3d:9f:d3:e2:56:d4:57:af:
39:f2:59:6d:91:e1:67:04:21:62:36:cb:51:91:6c:dd:b6:be:
88:d1:02:26:f6:cd:cb:86:61:4c:99:e8:12:68:05:a7:be:f7:
94:6b:ae:98:2a:65:ea:84:06:b2:25:82:9e:59:26:59:81:5c:
93:ab:e0:d2:0c:57:6c:11:e5:78:52:db:22:96:a2:98:b4:50:
98:95:d2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:54 2025 by rpki-client