Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier: NC82I3K/hV0SI4IRZ0whx+cdQz/G9FcciT2+snr7Eqs=
Subject key identifier: E4:F9:41:92:49:2E:2F:48:AE:6D:68:1B:78:F5:10:CA:1D:A4:F5:38
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial: 019A5075095A4F38F63ECD509CA0F86E1F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number: 15BF
Signing time: Tue 04 Nov 2025 20:00:38 +0000
Manifest this update: Tue 04 Nov 2025 20:00:38 +0000
Manifest next update: Wed 05 Nov 2025 20:00:38 +0000
Files and hashes: 1: 47Lsjeq5DX4wkpatXUE_-iIQY9Q.roa (hash: 4K/nWKrcsaLST8bPt6ayJw8vMIxal4U4+r8J15AVgP8=)
2: IM8VWz4L8uTjG3ZXrmr-hQCDEpU.roa (hash: mPn7wlOGgWBcgNZKFj/CLgGSvVpk3XUPtLV9M7i6VUo=)
3: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: iMKHhBzyiM0W0DYMKrUVGB/H5DUzh/gyenU00F7UuqU=)
4: dbiwvrIUEB3DJnzikNFfso5iId8.roa (hash: iE+EP1DWoHf3NMKkX22W/jzavybl3y9slyLbgbFYb6M=)
5: sP5nildmZqp3srG2whATaK4yFJ0.roa (hash: 8RcLa/XNj+cj8Nd5KnP9mKP7qKdpC46YG8NrNsESEAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:09:5a:4f:38:f6:3e:cd:50:9c:a0:f8:6e:1f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
Validity
Not Before: Nov 4 20:00:38 2025 GMT
Not After : Nov 5 20:00:38 2025 GMT
Subject: CN=e4f94192492e2f48ae6d681b78f510ca1da4f538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:24:48:7d:79:26:fe:9e:22:26:d0:d7:52:
10:6e:43:50:57:58:b0:30:92:e4:46:a0:2c:f1:bf:
8a:04:ff:56:bf:6b:be:c9:fa:b8:1e:73:8a:f3:75:
cc:61:84:05:e7:e4:2a:ba:17:ec:f6:4b:4a:cb:2d:
39:f6:76:95:b0:3c:75:29:42:63:85:b4:26:eb:d7:
be:ff:67:14:f8:52:3b:b8:2d:7b:5e:20:59:24:14:
69:70:c0:22:a1:0d:30:9e:47:8a:42:e9:49:21:eb:
19:9f:52:c1:dc:67:61:5d:2e:32:d5:d6:bc:84:25:
9f:49:1a:8e:ef:ca:ac:b8:3f:69:b9:ee:5b:56:45:
ee:59:d6:73:53:e3:9d:79:77:7c:c9:11:e5:e5:bd:
bd:66:69:bc:43:29:6f:41:8c:d6:2a:af:d4:45:1d:
00:fc:5d:48:c6:53:52:0c:d0:af:18:4c:b5:e8:05:
e4:a9:11:45:b7:83:ab:83:e0:e3:62:b9:a0:56:57:
c8:f6:2d:e9:b3:87:a3:ee:db:1f:83:44:b5:d9:9d:
72:3d:db:d9:ef:1d:5e:c2:1e:be:7a:c9:1b:73:84:
88:a8:78:81:1d:d8:c5:67:53:9a:c5:f0:c7:53:39:
ec:e2:f8:db:09:39:82:ab:b0:6c:bf:2b:21:2b:57:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F9:41:92:49:2E:2F:48:AE:6D:68:1B:78:F5:10:CA:1D:A4:F5:38
X509v3 Authority Key Identifier:
keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:68:18:38:17:e5:83:25:1d:b2:24:46:fe:b5:1c:ec:4b:fa:
19:92:88:92:55:ea:83:12:82:89:5a:8d:a2:bc:3e:99:ed:e4:
03:18:71:de:18:2a:3a:e6:2d:82:13:be:5d:6e:16:89:39:b8:
e0:8a:f4:96:55:cf:2a:62:c9:6c:f9:4a:12:62:1d:67:b6:a3:
e6:bc:bb:65:14:5d:f0:8f:72:ab:cd:1f:03:e1:62:8a:5c:52:
9e:63:56:78:f0:cb:48:e4:5e:de:10:1e:62:36:7e:96:22:b6:
40:dc:0d:7f:1d:60:54:05:97:5c:60:9e:85:21:58:ee:d2:bb:
ba:21:63:f1:1a:94:40:55:3c:e1:d7:06:f2:10:af:24:49:40:
80:ba:70:e3:2d:1f:25:44:9e:7a:83:cf:19:cc:13:2e:ca:08:
78:c2:89:67:2d:6c:9a:d5:d6:b5:c6:15:62:7c:be:8c:5b:cc:
1c:fc:90:9a:10:63:9f:9d:91:3a:16:4c:74:a8:85:07:3e:f4:
8a:cc:f8:d8:a8:a0:d3:88:cd:b3:3e:fe:01:7f:09:7f:2a:97:
1f:a1:09:d7:fe:1b:5b:f1:a8:1c:1e:78:af:12:d9:94:c0:a1:
54:a1:d0:b6:e0:87:c7:0a:b0:e1:fc:94:83:59:94:cc:02:4f:
bf:93:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:04:47 2025 by rpki-client