Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
File: YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json)
Hash identifier: qjNnlGaUeoSEMnpMaxxeVNniSgD7fLPLSw+TjZu9A5Y=
Subject key identifier: B6:86:36:A4:04:43:5D:85:40:42:CD:02:C4:A5:81:D8:65:BA:0C:53
Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
Certificate issuer: /CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Certificate serial: 019A4D3CFE0BAB1CFF8DEAB608586C37F397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
Manifest number: 0E95
Signing time: Tue 04 Nov 2025 05:00:33 +0000
Manifest this update: Tue 04 Nov 2025 05:00:33 +0000
Manifest next update: Wed 05 Nov 2025 05:00:33 +0000
Files and hashes: 1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: jr4YAyJ5tjAeHb0Ksbx975b/b+VSUjys07trCYfj0L8=)
2: dC8gOmayB-chyoQvohvN-0T41MI.roa (hash: CEU2++abo0F1b85LSOtJ8mERuDAvIcX+n86rAzfnRdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:fe:0b:ab:1c:ff:8d:ea:b6:08:58:6c:37:f3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Validity
Not Before: Nov 4 05:00:33 2025 GMT
Not After : Nov 5 05:00:33 2025 GMT
Subject: CN=b68636a404435d854042cd02c4a581d865ba0c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:75:84:9c:32:06:f0:6f:1d:24:6e:55:e8:13:
5a:e1:0d:10:a8:1f:bf:07:43:f7:6e:99:22:ed:77:
96:b0:ea:41:2c:43:68:f8:66:79:de:85:49:a3:fa:
5f:ff:28:3f:b4:67:bd:a0:ee:60:2c:14:c6:f3:b3:
20:a4:aa:5c:6b:44:67:5b:1f:df:6e:d7:30:55:ff:
d0:a0:bd:ff:7c:3f:1b:7c:4e:f3:88:63:53:ce:b2:
9e:bc:5e:55:aa:2b:ed:83:7e:55:08:f1:d3:2f:72:
15:7d:d3:d4:50:19:c6:b6:0c:83:dd:61:71:1d:cf:
c5:c7:92:10:09:c7:45:36:cf:34:f9:79:aa:b0:fb:
d3:0d:94:64:e6:16:b3:95:2c:b9:6b:13:ce:43:0f:
a4:19:6e:27:a7:2a:40:99:ad:b5:ea:db:4b:97:a7:
68:3d:56:cd:44:be:3a:0f:dc:03:d2:5e:8e:6e:27:
24:a8:15:b7:19:0b:65:67:b1:89:22:e9:34:ce:73:
f3:21:7c:75:92:b4:cf:bd:4e:16:c7:bb:94:a5:c3:
7f:6e:63:78:bb:8f:82:6d:66:63:71:15:32:4c:f0:
b8:d1:e3:be:92:0e:56:27:81:9a:f5:10:fa:04:57:
1a:94:02:58:97:e7:4b:99:f8:42:de:79:a8:66:1b:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:86:36:A4:04:43:5D:85:40:42:CD:02:C4:A5:81:D8:65:BA:0C:53
X509v3 Authority Key Identifier:
keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f4:b8:7f:e7:63:93:02:27:2a:df:2b:fd:d3:0f:fb:43:38:
54:70:82:f3:1d:a9:b9:7b:bd:22:27:a1:5f:a3:a6:6d:76:43:
3e:33:5c:fd:0e:8e:d2:84:d2:e8:8f:e2:3e:fa:e0:66:68:a9:
ec:a2:d9:ce:15:9f:76:0d:af:9d:b4:40:7a:4f:87:dd:7c:37:
2b:4f:b4:56:39:2a:03:5e:aa:63:b3:5d:6d:fe:2d:c8:98:3b:
b9:44:7e:e9:2f:f8:c9:18:2e:fd:74:3a:0a:dc:60:e4:1d:c0:
59:41:05:70:94:7b:c8:55:7a:9c:cf:97:97:0d:be:62:b0:c5:
5c:8d:e8:39:a1:45:0c:98:42:0a:0d:56:0c:ed:15:84:04:96:
9f:46:b5:2b:f8:50:e2:00:52:01:f8:8c:24:1d:2e:b0:ef:2f:
f8:b6:0f:92:03:ec:77:ec:25:be:32:15:f0:f4:7c:91:14:69:
ce:53:2a:fa:11:f7:76:1b:03:d5:ab:3d:5e:f0:57:af:45:59:
3a:34:62:11:46:59:e1:31:21:9d:72:eb:bb:10:82:94:3c:af:
e5:7e:79:ec:1c:48:ff:b5:08:fa:12:a6:66:23:6d:b4:db:c8:
04:8b:2c:ad:a5:f3:d1:ad:4d:27:1d:63:a7:77:1e:60:51:c5:
50:99:49:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:28 2025 by rpki-client