Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
File: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft (raw, json)
Hash identifier: qiqKvFGAOHhKUS7E2KERNAeWoSNmipCyN/ZRuBY6Bh0=
Subject key identifier: 8E:3C:95:08:00:27:53:C7:F5:52:C8:FD:BE:47:39:CC:0D:AB:60:E2
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 019A4E4F584D9F6ED8D87AACD3C34BFB1E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
Manifest number: 091B
Signing time: Tue 04 Nov 2025 10:00:13 +0000
Manifest this update: Tue 04 Nov 2025 10:00:13 +0000
Manifest next update: Wed 05 Nov 2025 10:00:13 +0000
Files and hashes: 1: R4scpsswEHtZHUE-nwU3HaURKXg.roa (hash: og9/o35XSt8h5Pisf2/20OBVwfKzhDJ2QToFc39vgzg=)
2: YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl (hash: 3xJDnDOFDbyDCuR+1kKyyRAZPxt8hanUKY/60hUq3UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:58:4d:9f:6e:d8:d8:7a:ac:d3:c3:4b:fb:1e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Nov 4 10:00:13 2025 GMT
Not After : Nov 5 10:00:13 2025 GMT
Subject: CN=8e3c9508002753c7f552c8fdbe4739cc0dab60e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:b4:c1:af:76:38:79:86:d0:df:e2:c0:67:
64:37:6c:d7:17:5a:9e:6f:76:40:07:32:d6:c9:ff:
32:41:ee:4c:54:14:7e:ea:b2:c5:21:30:b4:c4:52:
a5:1a:b8:8f:b9:e1:c2:d1:d3:f3:8b:09:16:85:d1:
0e:c1:90:dd:74:3b:aa:74:83:e6:94:19:eb:7c:2d:
e8:b0:16:6e:9c:09:59:90:4e:85:f9:83:77:ff:c0:
ba:25:20:0a:09:63:4e:8c:e0:5d:cb:17:f5:33:87:
3d:f7:88:07:63:11:71:72:21:fa:9e:bc:aa:6c:f6:
11:3a:5d:23:3e:eb:c9:6c:4d:a5:25:f2:23:47:9e:
f3:20:98:27:60:be:d6:d3:20:52:27:e2:2a:94:33:
ad:9e:7a:d5:28:ab:ce:ea:a9:17:3f:2b:3e:98:92:
43:2e:fc:88:ca:e0:25:e5:04:67:1a:d7:14:02:fa:
e0:ac:b0:d9:11:f3:02:12:ae:f7:ba:b7:f8:09:da:
20:5e:c2:23:07:2f:72:75:17:64:e0:da:e2:26:a9:
94:de:71:6f:40:31:22:c6:a4:7a:26:17:a5:63:05:
d5:2d:7f:59:f0:06:a8:e9:7b:4a:cf:b7:68:ef:aa:
b0:d2:78:37:1b:6c:5c:97:e3:d9:fe:7b:8d:b0:83:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3C:95:08:00:27:53:C7:F5:52:C8:FD:BE:47:39:CC:0D:AB:60:E2
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9d:a0:72:98:a0:90:2c:18:df:02:c8:9b:53:f6:f6:80:8b:
3a:f8:32:ee:21:45:17:4e:7a:d2:81:08:ac:e5:a6:19:8a:7a:
e5:85:cc:a7:29:69:56:78:74:4d:7b:9c:4d:3f:b3:13:ce:ed:
91:76:ca:77:b7:09:ee:ec:86:d4:25:57:db:2d:62:ab:11:cd:
1c:e7:d5:59:4c:81:45:9f:1a:44:b1:50:7d:a6:52:50:71:67:
35:b7:bb:fa:42:c1:0d:d3:c3:ae:b0:d8:db:54:a9:de:41:1f:
1e:8b:1f:87:9d:0d:8a:8e:85:c7:77:fc:ea:f0:c4:b6:31:ac:
af:87:f4:ff:8a:55:99:88:cb:d9:39:db:c3:c7:2a:49:2d:98:
6e:c8:55:6b:a7:b9:7b:65:93:ad:38:11:0d:86:07:75:da:f6:
cb:55:b6:f6:5b:dc:dc:69:61:00:78:0a:63:e8:6d:dc:6a:a5:
21:85:fb:33:af:ad:bf:4c:f8:b0:b9:f1:e2:9d:6b:a4:da:74:
56:c1:79:af:e3:b8:ae:07:1f:39:1d:26:4a:55:68:06:e8:d5:
0b:19:3b:cc:81:1b:1d:07:5b:d5:f4:8f:f1:60:0a:3c:28:5c:
54:7f:b6:cf:66:72:53:b1:db:55:c9:47:3e:e7:42:a1:72:9b:
d7:ce:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:10 2025 by rpki-client