Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: 0VW1rFP2fd2Vm4MdfCFhFqZ0jbFTodX3ZUK33uTEors=
Subject key identifier: 15:57:73:FE:2F:B9:D9:95:D1:87:58:BC:2C:07:9F:8B:0F:BF:DA:A9
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 019A5119E79622A31883CEB7B6DCE263C84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: 03CC
Signing time: Tue 04 Nov 2025 23:00:43 +0000
Manifest this update: Tue 04 Nov 2025 23:00:43 +0000
Manifest next update: Wed 05 Nov 2025 23:00:43 +0000
Files and hashes: 1: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: qBxTryP4cVrhPpTghlEpf2sPSXjC56jXGyTjwyq9QOg=)
2: kGTMJp8YWdhCRnyfOKgxhKChBJQ.roa (hash: ZVU5RQX8MRgj32JsdxWQo2xXu6d3VcvuzIOlJ8aVzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:e7:96:22:a3:18:83:ce:b7:b6:dc:e2:63:c8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Nov 4 23:00:43 2025 GMT
Not After : Nov 5 23:00:43 2025 GMT
Subject: CN=155773fe2fb9d995d18758bc2c079f8b0fbfdaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:53:66:ec:89:d7:68:89:19:20:06:71:76:94:
08:e0:f6:e5:66:90:48:1d:66:63:6b:81:c1:3d:78:
65:a8:f7:fd:a0:47:4f:0f:b6:4b:c0:d0:d7:b0:dc:
d8:76:00:9c:4b:6e:57:cf:f7:94:74:94:d2:d1:0b:
cc:2a:62:60:26:56:6f:d6:cb:ff:86:42:54:00:1f:
ed:86:1a:ab:ad:01:ec:88:0d:ab:ef:ca:66:b7:22:
f4:8e:0a:fa:39:0a:06:1f:2f:d6:d4:94:ec:cd:b0:
97:2d:e7:07:3a:44:b0:79:68:54:3c:86:b3:f0:02:
71:fc:a8:58:11:50:92:25:f0:82:57:6a:9f:30:ce:
14:12:44:a5:cb:9f:5f:49:e7:08:e5:d7:93:e4:f4:
c6:56:6a:7b:d8:df:1b:fe:03:36:1a:ac:10:32:6e:
e6:c8:aa:0e:61:12:82:06:e2:01:17:36:34:e0:70:
00:49:ce:47:e6:12:db:22:75:54:17:eb:0d:57:05:
dc:35:03:d3:a2:b1:89:5b:a5:7d:0f:8f:1d:28:2a:
3c:f4:c7:ad:ec:f6:b3:11:83:a6:1b:d3:09:6c:5a:
64:19:3c:9e:60:a5:12:d6:f6:e6:5b:c6:e7:b4:e5:
82:7f:d0:46:2b:c1:5a:09:b2:c3:75:7e:cc:2c:60:
7d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:57:73:FE:2F:B9:D9:95:D1:87:58:BC:2C:07:9F:8B:0F:BF:DA:A9
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f7:fa:fb:c0:a7:f7:ee:3a:19:62:51:ed:fd:91:d7:07:0f:
e7:2a:65:77:b7:b1:35:8c:36:e4:d7:35:9c:27:b9:f6:9f:fb:
34:0f:65:8a:b9:b4:46:9f:1c:58:fa:b5:25:3d:c0:9b:28:93:
8f:20:c2:6d:56:e2:49:54:15:a5:1e:2e:c0:14:92:7d:07:3c:
5e:f4:cc:f5:68:7b:90:eb:ee:53:84:d4:8f:23:57:b1:b7:6e:
3d:48:75:21:61:c2:9a:ca:51:dd:88:96:21:10:f3:03:35:07:
2c:56:4c:d0:44:d9:42:39:50:e0:3f:97:b0:36:96:fb:33:61:
42:b8:75:b7:0a:3c:d0:0f:ba:7f:66:f6:c4:32:a2:78:de:17:
c3:17:b5:23:09:17:98:08:1d:f8:5c:42:88:43:7f:9a:42:28:
54:4c:cd:c0:1a:b7:59:58:1c:61:10:bd:81:09:a0:f0:92:9a:
68:a6:b7:87:8b:55:c5:80:f1:18:26:84:50:eb:88:ee:ca:b9:
6b:e3:8e:24:79:56:b6:af:9c:d4:c4:38:8f:b4:22:4d:96:b1:
b7:38:08:63:39:82:69:18:ed:dc:19:c4:dd:7b:ad:78:9e:d6:
70:8a:9e:aa:77:54:c1:11:bb:dc:24:4b:c0:90:b6:6b:a8:a7:
e2:ba:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:12 2025 by rpki-client