Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: CNbNIIQbHOtPhbDhCv1QOPgT3tJypaHhpSN+8Ecbra8=
Subject key identifier: B7:12:D9:57:2F:C0:5D:98:36:0B:DD:90:71:28:C8:B8:FF:35:A0:22
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019A4F2B9CFA001D18D1FFD3CABC16728F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 0FF3
Signing time: Tue 04 Nov 2025 14:00:49 +0000
Manifest this update: Tue 04 Nov 2025 14:00:49 +0000
Manifest next update: Wed 05 Nov 2025 14:00:49 +0000
Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=)
2: OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa (hash: Nbt+Vb6iqoAZa8JSy2lqdMELR5I1GGwPOjEC79BMqrA=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: YrQy5lJMxa4Qmud3vOATs/AXlD7BbMkZNnDXvKThXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:9c:fa:00:1d:18:d1:ff:d3:ca:bc:16:72:8f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Nov 4 14:00:49 2025 GMT
Not After : Nov 5 14:00:49 2025 GMT
Subject: CN=b712d9572fc05d98360bdd907128c8b8ff35a022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:08:97:a2:64:45:ea:c0:97:c4:94:6a:3c:
d4:75:50:4c:42:92:47:1c:25:e9:f0:e4:db:ac:b3:
f6:0e:3e:0e:54:27:2c:35:a5:14:32:51:ab:e3:e9:
30:4a:5f:f9:fc:a7:4a:ad:c5:67:e0:85:d0:ea:26:
2f:48:dc:b4:d7:8d:9f:d7:49:03:bc:89:75:42:05:
54:96:59:34:25:6a:3b:9c:f6:81:59:b7:34:f6:c3:
e0:27:d1:a6:00:37:5c:d7:d5:09:55:89:b2:28:99:
f3:a8:b9:48:60:66:56:37:a1:13:f5:e2:4d:a1:6a:
19:53:4f:32:70:c6:b3:bd:8e:ae:59:f0:63:c3:d9:
d4:ee:87:b4:e6:1d:69:77:78:9a:d9:2e:05:92:15:
dc:a6:69:49:7f:fd:cd:25:23:f6:16:d2:d6:b6:57:
09:02:3c:b8:cf:4e:a8:29:c5:d8:57:e7:aa:a9:f0:
4c:39:bf:e5:5c:65:14:02:bf:18:fc:cc:93:c9:9c:
95:04:53:ef:6f:4c:b9:b6:c4:c9:bc:d7:e9:ae:3e:
c4:0a:e3:ad:48:6c:d9:0f:98:8d:1e:d3:97:7e:6a:
9c:54:52:dc:3b:98:ed:06:ea:69:d8:01:81:07:1d:
b5:ad:b3:63:fa:51:2e:2c:7c:7f:15:5b:4e:42:11:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:12:D9:57:2F:C0:5D:98:36:0B:DD:90:71:28:C8:B8:FF:35:A0:22
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:86:6c:00:8c:40:ee:68:b6:ba:b0:20:33:bc:7b:37:f8:39:
8f:12:c8:93:d1:32:1c:f7:ed:83:fd:8b:bd:70:f0:f1:5d:fb:
8e:f8:7b:b7:a0:b1:c2:33:e0:7f:d3:4b:e1:82:36:69:a8:2c:
24:cb:55:b3:02:69:60:b2:ee:4e:3c:fa:e5:21:8d:2c:3f:e0:
95:af:b2:3f:94:21:63:9d:e6:e7:36:f3:b6:8b:5b:8b:2a:49:
9c:d1:ba:cd:1b:b7:1b:1f:b2:b6:a6:de:6b:d6:fa:ec:09:38:
3d:7d:cb:1b:06:35:93:8d:d3:6a:6f:4b:6d:85:a3:cc:f1:0b:
c1:db:8d:fa:2e:97:75:b7:ee:47:6f:48:ac:0c:50:02:20:78:
53:86:5a:30:40:da:2d:13:0d:37:c6:b4:5d:86:a7:03:a6:c1:
af:86:36:31:40:31:ae:ef:5b:82:85:d9:3a:65:f8:26:3d:a0:
97:a7:3d:61:34:98:c4:a2:11:49:b2:9d:7b:65:62:81:da:d9:
1a:55:f1:8f:5f:7b:7b:02:b8:13:6e:e9:50:57:58:10:37:15:
f6:3c:82:a8:0a:e7:69:64:75:3a:f0:bc:15:86:33:e9:0a:8c:
63:1c:d9:be:f5:a6:ed:29:0f:a4:53:50:75:21:b6:e8:17:b9:
5e:2d:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:20:56 2025 by rpki-client