Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: 8f1HhmTJ/1DxC+4bxFuR4QU9cEx5NQOr094AlWjnXOc=
Subject key identifier: 09:89:05:40:28:38:95:31:AB:77:FE:9C:26:BF:BE:AC:71:92:F3:00
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 019A4FD047BF779D73BC1E9EFEFA8DC131BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 17:00:41 +0000
Manifest this update: Tue 04 Nov 2025 17:00:41 +0000
Manifest next update: Wed 05 Nov 2025 17:00:41 +0000
Files and hashes: 1: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (hash: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=)
2: X_5mJIe23lTGFoHxQS-RDQrkxZY.roa (hash: RzER0AmjnLXODOGy8fUMFdlmPYkcB4bwanmhBdhdXVQ=)
3: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: teIp2+1Bh4f/vYgDuPmBFheof2KdrQBTVwUtUViUQrs=)
4: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (hash: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:47:bf:77:9d:73:bc:1e:9e:fe:fa:8d:c1:31:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Nov 4 17:00:41 2025 GMT
Not After : Nov 5 17:00:41 2025 GMT
Subject: CN=0989054028389531ab77fe9c26bfbeac7192f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:e1:b2:e6:3c:2e:74:3b:f9:77:b8:f9:99:
22:9e:6f:cd:8f:ee:6e:8a:0b:54:af:d3:62:8a:c8:
27:30:48:7f:9a:cb:4f:0c:d7:1f:21:d8:ee:75:0c:
c6:7a:48:69:ff:a2:fc:18:3a:ce:76:af:cb:11:bf:
79:c8:25:a1:7a:49:2d:a1:96:20:36:de:29:08:21:
af:b1:a3:f6:a3:aa:ad:a2:f8:c9:7e:a3:19:72:af:
0c:0d:da:48:9e:aa:20:7d:28:d6:06:e5:8a:df:98:
68:2b:9c:67:28:1a:5c:1e:82:e5:b4:3f:39:b9:e0:
b5:69:f9:a8:d2:c1:58:b8:d9:8b:62:45:20:b1:e5:
86:3f:e0:c0:4c:2a:86:cd:d3:44:ac:b0:8f:3a:ad:
63:60:8f:29:49:60:9b:22:4f:f4:cf:9b:3a:e6:df:
25:39:3a:57:94:bb:d6:0b:b6:c8:b3:bf:4a:4d:35:
13:74:56:93:46:5e:45:23:0f:f0:c6:0e:bd:70:5a:
08:49:c7:81:62:c0:94:36:fb:6b:48:77:fd:68:ad:
43:17:e8:eb:d5:89:8b:f7:6f:d1:e6:89:9d:60:8e:
14:7f:17:1f:08:a7:86:57:92:25:81:cf:93:ab:53:
3d:25:c2:9d:6e:a3:a2:88:a7:51:72:17:2f:bb:be:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:89:05:40:28:38:95:31:AB:77:FE:9C:26:BF:BE:AC:71:92:F3:00
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:60:4e:a2:62:64:46:ed:17:0e:38:da:94:aa:41:dc:d0:5c:
47:21:cf:78:79:bf:b4:03:45:f8:7c:ee:ec:96:7d:fc:76:81:
8e:94:a5:7d:47:cd:41:3f:ea:c6:80:4e:da:ee:97:e3:f7:49:
c8:7e:97:3d:da:33:7d:11:95:3d:2d:c6:e4:ef:49:00:83:a8:
6b:2c:fc:39:52:c6:e1:a6:3f:f1:f5:94:16:55:00:12:10:1d:
2c:ae:c2:c2:20:dc:61:8d:aa:52:7d:c7:d9:3a:ee:ed:84:6a:
b2:72:6b:d9:b2:58:93:b0:66:d2:5e:0e:aa:0b:92:5c:99:bb:
81:d3:ff:05:e7:bf:e1:0b:a5:ed:39:bd:a8:83:ed:7a:47:39:
57:3d:b1:18:31:ed:75:50:2d:f1:66:1f:7e:f7:10:be:78:0c:
17:d3:07:9e:04:89:e8:1f:e5:03:e1:1d:74:ea:2f:03:11:9e:
90:8b:7b:72:4b:55:22:e3:5a:85:73:bc:1c:fe:f8:97:89:eb:
8c:d2:cb:ec:6d:d2:9f:9b:38:2f:b7:c9:e2:5e:23:6a:f4:dd:
92:21:36:70:4b:91:9b:f7:0a:98:56:07:9a:2e:ad:be:7f:1a:
af:35:ca:8b:70:a4:62:5f:c3:ce:14:df:a8:8d:c7:1e:05:1f:
26:0e:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:28 2025 by rpki-client