Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json)
Hash identifier: tXZtmjbyJEHlI7NDvrASaEEvuF+cCY5L2FQPnC/S9PI=
Subject key identifier: 13:5A:23:8F:9F:DF:54:0A:18:EA:97:30:3D:9C:22:A3:14:44:BB:20
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 019A500760D1D08A71B9BF4933DAE7B548CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
Manifest number: 144B
Signing time: Tue 04 Nov 2025 18:00:51 +0000
Manifest this update: Tue 04 Nov 2025 18:00:51 +0000
Manifest next update: Wed 05 Nov 2025 18:00:51 +0000
Files and hashes: 1: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (hash: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=)
2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: ADwGJji65u4z8P8CD4hqJdu4KRkUiCLHwo4fm5wMt5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:60:d1:d0:8a:71:b9:bf:49:33:da:e7:b5:48:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: Nov 4 18:00:51 2025 GMT
Not After : Nov 5 18:00:51 2025 GMT
Subject: CN=135a238f9fdf540a18ea97303d9c22a31444bb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:bc:19:aa:d0:55:68:7b:15:27:9d:5e:4c:
26:29:85:a5:83:67:0d:b0:65:52:32:7d:17:14:9b:
69:37:3b:e7:71:35:03:86:46:ee:8b:4e:6e:42:14:
1b:4a:76:0f:17:6e:f0:92:e5:70:c0:9a:39:40:1a:
1a:59:4b:0f:d3:8d:72:24:f9:e0:5c:ba:bd:0f:e0:
c4:30:ef:4e:f5:07:9e:16:08:5a:02:c9:4a:6a:4b:
14:a3:92:0e:6d:c8:f4:da:d4:0f:84:6f:c9:fe:a2:
31:67:e2:d7:59:d7:8d:5e:21:94:ab:d3:49:c0:70:
ee:94:95:b0:c8:59:06:fb:e0:bb:3e:a9:69:0c:a2:
6e:7a:d0:5b:60:3c:d9:52:1e:92:d1:60:e1:47:83:
e2:f7:83:4f:c7:85:45:6a:a5:b8:9e:d0:1f:0c:73:
49:6e:9e:f7:e4:1c:dc:f6:2e:56:ce:11:42:94:1d:
21:cf:16:6c:3a:28:e1:36:d8:e3:6f:cc:bb:70:9b:
d0:a2:1b:54:37:3a:5b:e5:3f:0f:22:a3:ba:0f:d3:
b9:b4:00:c3:c8:4d:c9:fd:ad:88:2d:8c:76:54:cd:
2b:c0:5a:ac:60:22:eb:2c:f7:cf:8b:2c:f1:ab:11:
13:ee:c1:87:35:5f:34:ca:a6:a9:a5:3d:db:eb:fd:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5A:23:8F:9F:DF:54:0A:18:EA:97:30:3D:9C:22:A3:14:44:BB:20
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:30:83:6c:82:d0:c7:cf:a6:0d:5b:b1:b7:30:6c:78:26:dc:
fa:7d:ef:ed:66:6c:0b:0f:55:0a:3a:4c:bc:55:2d:0a:d9:48:
a8:47:0f:fc:6f:c1:83:3f:89:24:a7:67:76:ea:c3:31:43:c5:
bb:30:09:0f:06:bf:38:bd:20:24:9e:d4:ac:8d:ce:ef:ce:68:
ad:62:ec:77:9b:33:e9:ba:19:3c:4a:0f:b3:3c:97:1a:e7:a1:
95:3f:c6:cb:7a:41:9c:2f:ca:43:b2:3a:9d:b8:72:67:52:20:
67:5e:90:2f:fa:bb:bc:2f:65:0a:b0:8c:6d:c2:a7:46:8c:3a:
d8:c1:28:63:76:ab:4e:84:a4:bf:90:34:1d:05:6a:b4:d4:3b:
c1:f8:cf:e3:93:c2:33:2a:fd:b7:ce:8e:a1:87:eb:cf:4c:2b:
b5:83:50:59:44:7f:d7:eb:e2:b5:3c:68:2b:12:ae:2c:a8:4a:
41:58:b4:bb:77:d6:1d:49:67:8a:51:e1:b7:3f:8d:b1:00:e9:
42:4f:ee:74:d5:16:cb:c7:2a:d3:f1:ac:4b:d1:8c:ea:6f:5d:
44:55:5e:64:fe:b6:44:7c:d0:60:66:dc:24:9e:91:51:11:35:
67:5e:7c:43:65:99:ff:5c:2a:b1:68:0e:fd:63:cc:71:22:1e:
f1:5a:9e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:45 2025 by rpki-client