Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier: 20Ep+M/2orvNl3ryxGPN9vfcjnSxkR1/mGjXBmKz0/Y=
Subject key identifier: D9:CF:DF:77:74:46:24:CE:7E:AB:FA:AA:59:93:B6:BA:79:41:60:E5
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 019A5150A0743D01FAEA3C9C79B98780F769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number: 1718
Signing time: Wed 05 Nov 2025 00:00:29 +0000
Manifest this update: Wed 05 Nov 2025 00:00:29 +0000
Manifest next update: Thu 06 Nov 2025 00:00:29 +0000
Files and hashes: 1: NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa (hash: TKAQNNpSaY4TAI1TdJLCf/Ljbi9ccCQ85au2gXamNHA=)
2: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: UZrXd/Y1LdZZQvePvBoI06JfowTWCh270gKx+sbCP8o=)
3: a-LdFc8kFHmTn2Z0Vu6JHLUtEY4.roa (hash: zTR8ty0nmJzU13XE2BvXWY2tGZYklQKm1YYaB327LpQ=)
4: el7j1J3bDKT27ieG83FPrQYbZJc.roa (hash: T0KRecSjSVtSKj2we6RG/6efDR4xy2f/rpalGX+ig90=)
5: od_NfkWMgnzZGkwU7wJ-RgWOeM4.roa (hash: OZscsQ8cir5jkIZyLY0FUkHozKmgjWJmCvTcbzJzQOg=)
6: tinXUk407KICO2MXsH1p4TReydw.roa (hash: linbqgFB5KTsziPayiqOokYdnyWHwGO4kAHLVkJgE3k=)
7: wxZtKKgCuX_XkT9wjC8PBIL2aLI.roa (hash: tIV+HptpEfjZ8DjgmHhOJU8c4e/cERhkwqc7ixWl0UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:a0:74:3d:01:fa:ea:3c:9c:79:b9:87:80:f7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Nov 5 00:00:29 2025 GMT
Not After : Nov 6 00:00:29 2025 GMT
Subject: CN=d9cfdf77744624ce7eabfaaa5993b6ba794160e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:51:75:38:c2:10:c5:36:3e:ce:c9:71:a9:
18:e8:1b:bf:fe:85:22:83:cb:0a:98:f4:aa:b2:29:
e0:06:0d:9a:fb:06:a5:f6:c7:58:06:7b:e3:73:c4:
78:3a:bd:cd:75:85:2f:d0:ad:b5:61:75:7c:ed:8c:
a4:6c:1a:96:0d:ae:35:f8:4d:fa:cb:46:93:ba:be:
a0:ed:2b:22:3b:15:aa:fd:f7:39:46:56:87:29:64:
8e:e7:a4:8a:3e:d6:f3:2d:1a:03:24:76:b7:94:15:
1e:59:3f:d3:3e:47:62:25:a3:25:d6:e7:d6:53:7f:
bd:38:dc:34:e7:c9:5a:e9:c4:c9:7e:f4:8e:87:e3:
59:26:bb:09:21:b7:7f:89:3e:51:78:f9:a3:42:c8:
c2:25:3e:e4:40:49:56:df:71:8a:71:05:fe:b6:5e:
82:4b:37:78:2a:db:8a:3d:cb:b9:aa:06:2f:e8:4d:
9b:93:d7:b6:04:04:4e:a8:00:e0:58:c0:36:ee:9c:
82:48:82:5c:af:a2:2b:c8:a5:a8:40:e3:77:82:51:
0e:e5:f2:e8:dd:87:1a:5a:51:df:1b:0b:b9:99:f6:
b6:5e:70:5a:7d:8d:3b:52:7e:de:18:55:f1:bb:ea:
d0:4a:50:95:99:c8:4e:2f:77:b2:50:26:30:07:b4:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:DF:77:74:46:24:CE:7E:AB:FA:AA:59:93:B6:BA:79:41:60:E5
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:98:b5:ba:30:6c:cf:6d:11:f9:fc:93:a3:db:d2:77:f8:
86:c1:41:62:40:35:20:bf:96:0a:dd:3f:1f:d0:35:72:1e:e3:
6b:50:50:16:d9:cf:13:65:4e:b0:97:6a:55:4b:0f:15:63:bb:
e8:85:c4:e8:b5:d3:2d:81:5c:8f:58:cd:a2:34:ca:39:73:fb:
29:a8:a6:51:79:a4:ec:90:16:eb:6a:ad:da:5a:f6:f6:b1:70:
30:7c:19:8b:44:c7:f6:c6:c5:d8:90:98:4c:20:a3:c0:9e:c0:
d1:bc:00:a0:ff:36:86:65:f7:7d:6a:d9:64:3a:62:1f:62:ab:
6a:bb:43:04:9f:46:21:a7:3b:31:84:2e:a4:af:79:a0:ab:c0:
de:2d:7c:09:6c:80:93:4a:7e:00:ed:9a:27:70:ed:2d:e6:c1:
dc:b3:10:5e:06:f0:b6:e2:ed:11:25:45:cd:d0:d2:b3:48:47:
4f:59:11:50:1f:91:98:42:99:9e:6a:67:26:cf:bc:27:d3:e3:
d1:b9:0a:46:fb:d3:6e:08:40:b7:f1:a1:73:cd:46:28:ea:3b:
c8:ac:9a:e3:44:3f:9b:47:c6:3d:73:89:cb:a5:7f:f6:9d:07:
3e:53:82:7c:5a:33:34:1e:92:fe:28:ee:4d:fa:39:b7:81:d2:
63:7f:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:10 2025 by rpki-client