Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json)
Hash identifier: ObHcriq2trBB39bcc6Sj1lFHQru/dBKkKqQUBL63hFs=
Subject key identifier: B5:FE:25:C6:24:A6:D8:4B:85:5D:D1:DE:53:F1:DA:89:1E:E8:CE:AA
Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Certificate serial: 019A4EF5D2B4777AAE1BB88CFC1BFDE17287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
Manifest number: 03F5
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=)
2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: M/+1BWHVm0cg5Dg6GU73OXpoNNKjdZ4ie54PCw8X+uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d2:b4:77:7a:ae:1b:b8:8c:fc:1b:fd:e1:72:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=b5fe25c624a6d84b855dd1de53f1da891ee8ceaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:fd:f1:2e:55:4c:b7:13:67:a4:36:17:ee:
3f:99:ec:4f:e0:4e:52:b9:18:95:46:7c:00:b0:45:
fa:ba:4e:aa:39:87:9e:ab:a5:47:94:d7:73:52:b5:
c9:43:18:be:88:82:7e:2b:f9:3c:d2:df:9e:e4:19:
ea:49:44:03:5e:89:9e:11:ac:1a:fb:8d:60:65:ee:
77:6b:0f:05:c8:5f:23:b2:d6:2c:00:3e:ff:a2:0f:
8d:a7:44:af:d5:4f:12:31:21:04:d9:0b:8c:37:c0:
86:0e:b5:18:cd:0b:21:50:9d:23:fc:ad:e9:44:ca:
c8:54:62:a8:ef:e2:9b:c0:db:f7:d2:9f:12:ce:f1:
d6:b3:28:3c:f6:f0:f5:41:c9:35:f5:b0:8c:c3:9e:
e0:ef:ec:2c:39:68:13:16:dd:08:b2:d7:c1:a0:9c:
8f:ba:19:c4:a2:02:65:10:79:3f:e3:f7:cd:a4:2a:
78:1d:d9:2b:7c:56:70:59:73:c7:26:7d:b8:a7:2b:
99:03:aa:c1:93:9b:96:a8:8e:cc:d7:ab:e2:8c:82:
80:a0:a4:8f:e4:f6:c8:10:da:07:c5:ad:a6:1c:c6:
cb:2c:e5:98:5a:68:18:49:b1:92:bb:95:b6:b6:ed:
86:6e:15:b5:55:91:40:bc:87:14:66:82:76:2e:7e:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FE:25:C6:24:A6:D8:4B:85:5D:D1:DE:53:F1:DA:89:1E:E8:CE:AA
X509v3 Authority Key Identifier:
keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:06:19:33:14:de:bb:a9:7a:e4:01:6d:a3:d4:3f:19:85:28:
0c:b9:29:1a:55:36:ce:bc:2d:5b:31:d7:fd:30:20:60:8b:da:
b7:33:4a:53:8b:ac:d4:2d:c8:f5:c0:dc:a9:4f:4c:51:28:51:
80:96:54:55:2a:b3:8e:e1:d3:41:8c:ed:5b:92:11:13:ee:9c:
5f:9e:7f:27:24:f6:3f:ab:c6:21:c7:de:36:a2:30:30:89:0a:
ee:da:bb:d7:b4:9a:ed:dc:9b:60:01:b1:55:c3:17:17:cf:c1:
15:fb:ce:ec:21:82:23:c1:21:6a:a1:bb:ba:a1:4f:13:96:57:
1e:e4:fb:3e:a3:47:13:bb:3f:5b:fb:28:8a:40:d4:7f:e8:47:
c4:b1:08:89:16:61:fe:cb:ad:ef:ec:33:ce:6d:b0:16:3d:32:
6d:f8:f0:1a:bc:3c:dc:34:d7:b6:e2:2a:73:69:86:cf:bc:b6:
3e:51:16:3a:66:3d:94:14:57:df:98:d8:3e:5f:19:82:d4:a5:
a1:ce:16:fd:35:e3:97:f0:64:a1:82:d3:8a:0b:fe:9e:cb:0d:
c8:8b:74:c4:9b:2f:1e:df:cf:fb:ac:41:79:5d:df:32:a4:a4:
4a:ef:a0:48:ea:54:0f:6f:13:0f:83:a1:7b:f9:9a:f1:8b:9a:
2a:a7:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:19 2025 by rpki-client