Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: Enss6tqUy1WErBX0o36usuu9yXiSKGxdBrnC7Cuty48=
Subject key identifier: BA:F7:9B:FA:15:CD:BF:78:AA:4D:D6:7F:37:6A:1C:C2:34:52:41:40
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 019A4EF4415DA9550E37453EB2AB00C1363E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 0F2E
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: 1ZXZrb7_KMMAffteaFQez59OJV0.roa (hash: qoGAFlDhNoBjbRdWcrJQCoTnOEYR10v5Gl4Yr+NRQu4=)
2: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: k0PBiwZjrBNtYibSLkIN2cB+WTRQVDe+Dez9xXrtGSQ=)
3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=)
4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:41:5d:a9:55:0e:37:45:3e:b2:ab:00:c1:36:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=baf79bfa15cdbf78aa4dd67f376a1cc234524140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:c3:a1:f5:1d:ab:a5:51:7e:c7:b7:98:6c:
02:eb:89:39:c1:63:e8:af:46:2f:31:f5:f3:0a:74:
c1:b8:c2:65:5d:92:e3:f5:9f:9c:19:b1:f7:cd:42:
91:7e:94:d1:5c:ff:f7:bd:8b:d8:a5:4f:33:7b:6b:
5f:f2:6f:dd:99:d8:37:5e:d5:b4:46:d9:1a:21:b2:
74:d2:32:cc:bb:b7:eb:6a:ef:ca:4a:04:0a:0c:d6:
50:8e:f9:47:02:3e:9c:e8:f7:c2:71:14:43:e8:2d:
a5:a2:41:27:68:fb:48:04:26:15:1e:b5:9d:7e:70:
dd:49:6b:56:d2:72:d2:03:8d:5a:47:3b:b1:f9:ae:
2f:89:66:20:de:f6:b7:16:ea:2e:91:c2:03:44:ff:
f2:f1:bd:ad:aa:4b:95:a2:d9:32:4b:ab:3e:3b:61:
60:f1:c7:8b:07:25:18:77:5e:49:1a:1d:5e:9b:8f:
2d:ef:3a:ba:63:0d:87:c0:34:85:cc:7c:19:8e:9b:
a3:26:f3:98:ee:f7:68:72:27:7b:1f:a6:81:44:0a:
86:6c:02:f6:cd:57:19:45:ee:42:44:12:97:a6:f6:
ff:1e:0b:f3:a0:56:75:5e:90:33:5d:aa:53:2c:83:
70:9d:96:95:b5:f3:07:a4:db:c2:08:ba:ce:37:08:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F7:9B:FA:15:CD:BF:78:AA:4D:D6:7F:37:6A:1C:C2:34:52:41:40
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2a:c4:48:40:4e:bd:a9:40:8c:b9:94:16:c0:cf:b0:66:58:
9e:42:de:95:c9:42:31:b4:c9:08:ab:e9:16:d7:1d:b5:85:41:
e6:89:91:41:71:fb:6a:ca:b7:7c:8a:c0:ff:02:3f:fa:80:ed:
01:f4:b5:4e:db:74:bf:ad:2d:6d:21:32:aa:24:27:83:06:dd:
38:7f:7c:8a:0c:c1:d8:5c:07:fe:ef:79:2d:51:f0:e3:60:48:
ee:4f:fa:b8:6d:bf:45:c6:88:92:17:29:70:a1:30:3e:2c:4b:
6d:eb:bb:0f:12:11:40:cb:6d:75:18:ab:31:7a:9d:5a:90:56:
f0:b8:47:81:96:7d:6b:36:4e:15:90:3a:16:0e:89:b0:d6:ca:
f2:0a:f0:ce:9b:f8:a0:80:dd:75:a0:d5:c4:c6:66:93:21:c0:
db:d6:00:31:75:9f:40:b1:db:ce:f0:99:da:34:0e:aa:f5:df:
85:e9:f2:d1:aa:e6:cd:05:68:b2:ce:d9:85:7c:bf:2a:11:8f:
23:32:b7:87:29:06:db:80:45:a5:6f:19:9e:db:67:fb:a0:de:
0e:7f:f5:64:a9:c5:ea:79:69:0a:cd:46:ef:fa:a4:2b:9d:cc:
06:f1:e4:9e:64:0c:88:fa:8f:0e:a4:ae:bb:e7:5c:49:54:f0:
35:ed:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:01 2025 by rpki-client