Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: 6n0OKkG/74LBwHbXfy+R2c8dEjf5q6i+VYwctjPPkus=
Subject key identifier: 27:AD:D2:E7:F9:5D:4A:F8:54:57:B3:88:83:60:D1:C6:F9:47:BC:83
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 019A4B187BA57B1B0B85360CD8D8FB52491E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 15A6
Signing time: Mon 03 Nov 2025 19:01:26 +0000
Manifest this update: Mon 03 Nov 2025 19:01:26 +0000
Manifest next update: Tue 04 Nov 2025 19:01:26 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: bX97B6igS9WTPWdbaKHtu9ISEqtB3B46N8K2ZfjRwaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:18:7b:a5:7b:1b:0b:85:36:0c:d8:d8:fb:52:49:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Nov 3 19:01:26 2025 GMT
Not After : Nov 4 19:01:26 2025 GMT
Subject: CN=27add2e7f95d4af85457b3888360d1c6f947bc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:f3:86:57:33:c7:f6:d9:e2:c4:8e:a4:f7:
ae:1c:55:90:ea:f6:75:cf:50:5a:75:f9:aa:4c:75:
27:2d:17:03:48:d1:b9:f8:a2:6f:ce:f3:e6:7e:89:
43:67:a0:04:6c:3b:94:91:04:69:7e:b9:b5:37:1a:
cb:01:e9:5f:f8:ae:3b:16:be:83:a0:7c:89:c7:29:
2e:23:fe:ec:96:15:0c:42:95:a0:e2:12:58:40:86:
05:b0:8f:1f:d8:9f:16:b2:4d:5d:0f:ca:f7:58:24:
5e:bb:f0:f7:df:fd:22:26:d3:58:55:a2:6a:64:39:
1d:f7:68:6f:38:4e:4a:a8:cf:2a:06:87:b9:ac:94:
74:52:b6:ae:08:e2:25:73:02:65:b3:33:70:90:0f:
73:99:d8:93:fd:4f:2f:50:78:ca:38:f6:1b:a0:0d:
d0:c7:e4:41:48:ab:76:30:a9:7b:6d:48:1d:3a:68:
bf:69:ee:5f:c7:5f:71:2f:06:6f:1d:28:fa:e7:a4:
88:e3:c4:79:43:4e:29:3d:1c:5b:47:e7:46:e2:86:
d5:e1:ec:19:2b:86:e1:26:76:bc:65:70:eb:be:16:
66:00:a5:c4:0e:1d:77:7d:29:93:ce:7f:97:c3:96:
9b:37:a7:39:30:0d:04:5d:03:9b:d6:0b:92:8b:2a:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AD:D2:E7:F9:5D:4A:F8:54:57:B3:88:83:60:D1:C6:F9:47:BC:83
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9e:87:e2:cd:46:9f:6d:f5:f4:2d:4d:ca:f5:de:b5:e9:ae:
c8:00:2c:0e:80:c0:ab:c3:65:a9:68:d7:9e:a5:4a:7f:88:95:
fc:aa:0a:06:7c:a9:4c:a9:2c:ea:7b:b9:99:29:0a:f6:09:37:
59:7f:5f:00:3d:7b:2d:5f:84:a6:9c:f5:7f:cd:3f:12:4b:1e:
d4:90:ef:cf:66:d4:46:dd:be:70:17:41:fc:88:ab:0c:79:aa:
67:50:92:90:ac:74:bc:0d:d5:98:45:20:21:f1:a4:cf:c9:51:
b1:aa:7d:df:f0:74:88:9d:95:55:7f:10:a3:45:8b:e6:09:b3:
f6:4c:e2:f7:8c:d1:65:70:96:6d:33:e8:42:7e:49:4a:46:e2:
be:41:6b:e2:e6:7d:2b:5d:f0:78:b2:74:eb:a5:2e:02:82:5c:
0f:65:a7:73:27:51:a9:2e:d9:dd:0f:51:51:8e:9a:b1:3f:ab:
44:0e:1e:bf:fb:db:b4:c4:3b:26:a2:8c:eb:e2:28:cb:79:69:
18:64:7c:27:fd:32:aa:57:7b:59:5f:f6:09:f6:1e:17:4e:0e:
32:57:56:5f:f6:94:41:4e:0c:1f:57:86:d8:ed:de:af:ec:f0:
b8:78:f1:9f:87:45:08:39:d8:2b:2a:c1:d9:6b:2c:f9:09:a4:
d4:be:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:58 2025 by rpki-client