Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: 0XcSOJ1Q8vu9homzDYdjHGPMd7VPrg7Ydo3AU82f2Ys=
Subject key identifier: D2:B4:68:B4:2A:84:50:51:86:6F:FC:71:E8:DB:D2:04:03:32:F5:4A
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019A4FD054E8F1B9FF6A8EA06E95FC8527A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 0F09
Signing time: Tue 04 Nov 2025 17:00:44 +0000
Manifest this update: Tue 04 Nov 2025 17:00:44 +0000
Manifest next update: Wed 05 Nov 2025 17:00:44 +0000
Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=)
2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: XILMCKjMHMRQ2zMGLQngAbGTIWC6hbyeyD+pzDWnlzU=)
3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:54:e8:f1:b9:ff:6a:8e:a0:6e:95:fc:85:27:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Nov 4 17:00:44 2025 GMT
Not After : Nov 5 17:00:44 2025 GMT
Subject: CN=d2b468b42a845051866ffc71e8dbd2040332f54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:b2:4e:46:d3:9c:d1:e0:de:a3:88:9e:2c:
b7:b6:c7:de:12:40:58:d8:73:5b:23:c7:f1:77:fc:
28:87:e5:b2:41:bf:0d:c0:76:83:b5:03:07:45:68:
7a:8b:9b:d3:93:87:22:41:c5:8a:c8:fe:1e:54:01:
af:17:7f:21:4c:e4:aa:0c:51:64:2b:c2:7b:44:5a:
75:93:2b:70:a5:40:0e:86:bd:e8:59:77:f2:82:ef:
e2:ba:5b:99:e5:cc:b3:89:87:86:4d:9e:09:66:02:
09:33:d2:bf:bd:83:30:28:c3:46:a9:60:7d:56:0d:
31:45:f1:41:49:4f:22:b7:45:92:63:bc:6b:35:99:
35:fe:2e:05:16:ce:2f:60:b3:e5:42:5c:91:05:e3:
b3:e6:2a:68:8f:85:9b:94:e6:e4:08:64:0e:00:38:
a1:25:fc:53:e6:08:7e:ad:75:75:29:b0:82:55:ed:
92:15:84:c2:b8:0c:ef:42:52:fa:40:dc:a1:e2:e1:
86:79:3d:ac:dc:13:ee:b1:b9:64:96:6d:ab:7f:79:
d0:8b:c8:bc:ac:41:70:cb:4b:8f:76:2f:31:f1:1e:
2d:99:3b:f2:10:69:56:a9:2d:54:80:45:f8:8e:6b:
c0:7d:d6:1c:9f:1b:43:16:23:43:6b:94:1c:28:b9:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B4:68:B4:2A:84:50:51:86:6F:FC:71:E8:DB:D2:04:03:32:F5:4A
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:aa:cf:b0:e7:ad:3f:a4:ee:1a:ab:48:83:67:dd:47:5f:d0:
aa:43:9b:8d:01:b2:65:d3:7c:02:cc:c1:c4:b6:ed:21:02:1c:
f4:02:ea:97:b6:99:70:a9:d1:14:74:5f:c7:34:50:f7:57:c4:
f9:58:2f:ac:f5:eb:bf:52:dd:33:ac:a3:d1:ce:6b:67:b0:d2:
54:05:b6:0f:33:fa:f4:01:82:07:30:03:82:ce:8f:82:cf:9b:
f4:36:5c:8a:92:17:82:b1:5a:df:a3:3e:2a:06:1f:f7:b0:99:
93:7a:54:8a:52:9d:48:fe:65:60:3a:36:10:df:95:50:94:a9:
a4:83:8b:15:58:69:42:9d:dc:a8:c0:aa:06:6f:ac:5a:8d:86:
db:87:59:b2:ce:4a:22:fc:b9:09:19:48:0c:1e:5d:24:55:cb:
e6:18:aa:d6:b6:4b:9c:c4:94:84:c9:17:76:4c:b1:4b:98:03:
02:b0:c5:3a:c0:e4:dd:7e:b6:23:61:5d:0e:02:8b:10:5f:86:
1c:ee:f3:98:98:cb:37:1f:31:c4:3e:cf:a6:06:ed:04:5b:a4:
19:0a:8d:94:76:4c:fa:e9:de:f1:10:08:22:b4:8d:82:20:a7:
7d:f8:38:41:7d:f1:6f:40:6d:c5:9d:88:11:b3:e7:c9:06:00:
42:91:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:29 2025 by rpki-client