Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: DW5MI4zHW2RPZfuyIUFcvsKMkikub4EgRptGF5sz1M4=
Subject key identifier: 25:E5:0C:ED:4B:5C:F0:DD:62:46:0E:42:74:E7:30:0E:94:EF:A3:03
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 019A50072F1D59224EC6CC1A9C63D44F23DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 07E5
Signing time: Tue 04 Nov 2025 18:00:39 +0000
Manifest this update: Tue 04 Nov 2025 18:00:39 +0000
Manifest next update: Wed 05 Nov 2025 18:00:39 +0000
Files and hashes: 1: 7NPjy0_LNEtrF1BCG60HRzqdKlw.roa (hash: QFPKpHBMjVle5FlNRbqdK60lHpC8YmYJkA7cV7MHx8U=)
2: MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa (hash: JedpLzW0zBpuOTjRbrIzIVmoqdb1dCTDslO3G1N2Fuc=)
3: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: MooXytjbfnYj1gHe1bCcloXvT4WnTQMTP2IP2iGNfck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:2f:1d:59:22:4e:c6:cc:1a:9c:63:d4:4f:23:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Nov 4 18:00:39 2025 GMT
Not After : Nov 5 18:00:39 2025 GMT
Subject: CN=25e50ced4b5cf0dd62460e4274e7300e94efa303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:8b:83:42:c3:89:b4:c7:73:1a:d4:e0:3c:
ba:f7:7d:4a:8f:20:01:79:f9:e9:75:ad:76:32:7a:
97:5c:64:65:90:32:a1:ec:29:e7:34:f3:ac:94:83:
56:fc:fe:ec:4a:7e:4e:56:b3:48:fd:44:da:e1:de:
a0:ba:fe:49:da:e2:02:db:5e:7c:6d:37:15:72:dd:
42:ba:15:66:29:4f:5d:75:f3:ba:8a:e0:45:f5:a6:
8d:b9:70:7d:aa:72:cb:e3:65:a6:5a:6c:fe:2f:28:
79:48:f2:8b:89:80:39:de:dc:5f:ea:9a:ba:de:09:
19:6d:a4:1a:b7:85:73:d9:e2:fe:17:6b:7c:f0:23:
d8:10:2e:2b:a8:5c:e5:11:af:5f:1c:f3:02:c5:92:
fd:29:f3:f7:55:42:04:3a:24:90:57:dd:65:53:16:
64:d1:fd:a8:38:ff:48:f6:ed:66:dc:1c:93:e5:9c:
91:8c:f7:34:de:d2:87:3d:e2:65:6f:ea:8f:aa:96:
08:7e:4d:45:8a:aa:bd:16:53:51:2d:43:81:6b:55:
c8:4a:18:14:a1:e2:56:4e:38:83:31:b8:26:4a:7e:
e5:31:d9:5f:7d:ee:ee:85:a4:ac:7e:62:f6:a2:56:
5c:0d:d6:2a:db:2a:ad:58:a2:07:9a:31:c2:f5:0b:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E5:0C:ED:4B:5C:F0:DD:62:46:0E:42:74:E7:30:0E:94:EF:A3:03
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:aa:53:0e:3d:49:1d:61:0a:f3:6c:cd:33:60:d3:a8:d4:e3:
db:c7:3b:02:40:10:4f:7e:cb:df:6d:ae:83:48:f0:0d:dc:17:
45:60:f9:f8:b6:fa:17:02:07:f1:f7:9b:d2:3d:76:15:4b:af:
56:f8:ad:86:e2:95:d4:01:d5:fd:df:85:fe:50:d8:41:6c:a6:
15:b6:01:6a:3e:89:cc:0b:02:92:2c:8a:8a:d9:48:ff:84:f1:
f8:83:02:b6:e1:26:9b:e8:89:3a:6f:25:a0:c4:28:ed:dd:52:
97:e6:36:90:d2:78:e9:57:ae:50:39:24:bd:5a:ae:6a:84:6f:
ab:e5:82:76:5f:1e:6f:b1:59:3a:de:15:02:67:30:3e:3f:d1:
46:69:6a:4f:e1:3a:e6:b1:d3:09:2d:17:89:cc:db:d3:de:91:
2a:4f:ea:b5:f6:e4:b7:29:5a:21:38:b9:01:e2:22:ce:cc:29:
99:e0:78:4e:88:7f:9f:fd:af:63:84:ff:11:8f:1b:91:55:5a:
2f:c0:b8:01:07:a9:32:ff:c9:96:8c:26:d2:42:aa:81:9f:a8:
db:14:34:8b:80:f0:f3:87:2e:96:17:e7:12:bc:8e:e8:3b:d5:
0c:eb:e6:1e:7e:23:7b:93:d8:dc:7c:b0:d3:18:32:3a:0a:a2:
5f:d3:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:35 2025 by rpki-client