Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json)
Hash identifier: QLt4rEJdPcCeSr6EvpFn4cJtA1z0JIdDkklUzc6GMbc=
Subject key identifier: CC:C7:13:35:32:99:56:C6:31:9B:50:8D:14:86:90:45:BF:54:0D:B9
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 019A4F622678CD060AFFD9FC7089FCCA0534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
Manifest number: 0B1D
Signing time: Tue 04 Nov 2025 15:00:23 +0000
Manifest this update: Tue 04 Nov 2025 15:00:23 +0000
Manifest next update: Wed 05 Nov 2025 15:00:23 +0000
Files and hashes: 1: X6ZYSC-zk_X-vkVmhmsDz5ImQYg.roa (hash: ejdwRSw1lilKiCxqAuj8PMfvm39/1GCNMitYFT+EINw=)
2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: ZVFwqts7DtG1RTEjIRRsldL6UwdcGLAS+/MN+JfS9dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:26:78:cd:06:0a:ff:d9:fc:70:89:fc:ca:05:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Nov 4 15:00:23 2025 GMT
Not After : Nov 5 15:00:23 2025 GMT
Subject: CN=ccc71335329956c6319b508d14869045bf540db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:e0:f1:48:61:05:e3:4f:59:77:37:0d:1d:
db:bc:b9:f0:ea:fb:dd:71:81:3b:b5:c5:5c:e4:ac:
14:1f:8d:97:a6:77:f6:a7:e6:eb:ad:bc:47:97:17:
ab:18:5d:57:f0:9a:3c:b9:5e:ba:57:9c:d1:c0:5b:
6b:4a:48:6e:12:f3:4f:cb:6f:4b:f4:03:e1:3f:e6:
ea:9f:2d:49:ee:26:3c:60:6e:95:30:ef:3d:14:80:
96:c4:c4:c4:3e:72:71:8c:ed:97:b4:de:88:3f:ae:
5d:c7:ac:80:59:63:b8:e2:9d:32:ad:94:56:0f:b5:
ae:78:f6:8b:66:d6:7c:2c:0c:35:9a:ac:22:ea:7e:
95:7f:e1:87:c5:cc:f0:fd:66:81:ac:08:2b:42:5a:
a5:cd:cd:c9:75:60:69:0a:7b:94:29:2f:30:a6:6e:
8a:e4:48:b2:18:e5:06:d1:9d:f7:c8:7e:56:16:34:
4a:62:d0:aa:37:71:bd:0a:de:00:2e:75:83:50:2b:
07:26:89:19:f7:9e:2d:50:f3:47:1e:bb:d8:c2:9c:
86:be:a7:78:dc:b3:95:c5:94:d7:bf:71:8d:e1:57:
e1:23:40:e5:c6:db:57:69:db:d5:5d:64:5f:1d:97:
b0:3e:20:c8:fb:84:d7:e8:0d:18:ef:fa:85:8b:eb:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C7:13:35:32:99:56:C6:31:9B:50:8D:14:86:90:45:BF:54:0D:B9
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7d:23:f9:2e:a9:e2:bc:33:75:33:90:02:b1:19:62:eb:3e:
c4:6f:04:dc:6b:1c:e4:2f:6e:3c:d4:1b:b0:f6:a8:94:09:f1:
81:91:b4:a5:36:91:3e:cc:76:66:21:f7:61:38:8f:3f:65:96:
f8:be:63:0f:90:9b:5b:ea:5e:f0:5c:ef:a8:e6:11:37:aa:9a:
0b:d7:73:ac:67:9d:de:ec:fd:93:14:71:fb:57:97:a4:29:01:
6b:a9:8f:0d:66:7f:59:d1:01:53:17:15:81:eb:b0:73:f6:37:
36:ba:50:fc:c7:60:4d:e5:35:6e:1a:59:16:d3:5d:3d:45:79:
2b:d8:64:4c:4d:c6:12:dc:df:00:f6:23:89:6b:35:c2:aa:a6:
00:7e:e4:04:2f:2f:30:de:6e:0a:49:37:ba:74:de:ba:d2:d7:
40:81:3b:73:3f:9b:1a:e7:93:3c:f5:be:9b:bd:b7:31:72:5c:
01:39:f8:c6:a4:8e:ac:52:62:54:ed:1a:b9:28:7a:b6:cf:2a:
da:75:6b:c2:99:85:fe:5f:10:d8:a2:4a:d5:5b:f8:47:48:64:
8d:88:40:ba:ad:fe:20:3a:0e:d6:31:00:5b:9a:3a:ef:dd:cc:
04:02:c4:e5:47:30:12:52:0c:4a:1c:55:d1:b0:91:70:98:55:
01:59:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:33 2025 by rpki-client