Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: BJyqatxBH5jWCLJttVuPwizEVOKNR7zo9+n6nVBI4RQ=
Subject key identifier: 06:45:AB:88:D0:1F:36:7C:93:3C:C7:2E:05:1E:9D:63:84:A9:8B:3D
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 019A4E18A36D4E0AEB8D199944C235A8A9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0D0D
Signing time: Tue 04 Nov 2025 09:00:28 +0000
Manifest this update: Tue 04 Nov 2025 09:00:28 +0000
Manifest next update: Wed 05 Nov 2025 09:00:28 +0000
Files and hashes: 1: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: +nzChENcAYXNRwgUInktBITu/9RF84OI7VKpzWwJUQM=)
2: _B7qhSnCxfn7CerNmWLFyrIUzIo.roa (hash: SylKEkKlUGkISQweMYeNKNB3Kfx1l1zxuoZbI4A8/rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a3:6d:4e:0a:eb:8d:19:99:44:c2:35:a8:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Nov 4 09:00:28 2025 GMT
Not After : Nov 5 09:00:28 2025 GMT
Subject: CN=0645ab88d01f367c933cc72e051e9d6384a98b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:cc:86:fc:74:03:aa:ce:40:07:5a:06:09:
39:59:6f:b4:23:d8:e0:46:a6:75:ad:92:df:19:b2:
08:4e:c0:db:a0:d7:da:dc:4f:38:a6:a4:42:14:29:
ac:43:85:ae:08:30:d1:71:49:a9:18:ac:3a:5a:48:
f4:0a:78:81:03:2b:00:7b:f1:0c:0b:bb:3b:e3:9d:
65:8a:54:02:c3:b4:59:33:16:d0:3b:b0:f1:16:4e:
fa:a7:cd:b6:c2:87:33:36:84:18:3b:84:9f:6e:9c:
58:03:35:2c:af:57:5e:8f:bb:c1:94:0c:ef:1d:97:
9d:f9:aa:ce:82:cf:91:26:e1:eb:b0:66:75:41:fe:
68:1d:35:67:f4:66:ae:22:78:26:f7:21:bb:f5:56:
d4:92:95:f4:f3:18:28:ac:51:21:90:f9:c5:2a:dd:
f6:ad:74:44:49:0f:48:83:e9:52:24:58:d0:97:d3:
de:48:c5:ab:b9:5e:fe:1a:03:5b:18:3d:a9:a0:b9:
8a:ae:a9:94:e2:a5:fe:87:c1:6a:aa:a9:fb:b3:dd:
d4:4c:cd:2a:e4:80:97:b9:a5:e2:67:ad:c8:19:2d:
e3:d6:10:fd:2c:0a:2c:58:23:26:20:14:a9:14:fa:
44:65:cf:ec:05:42:b4:98:61:bd:9b:d3:36:33:85:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:45:AB:88:D0:1F:36:7C:93:3C:C7:2E:05:1E:9D:63:84:A9:8B:3D
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ba:b8:d0:c1:5c:27:38:48:63:36:7f:c4:a3:27:fd:f6:2e:
f7:0e:29:f9:af:28:2d:24:6f:59:73:02:1e:ba:6f:2e:28:bb:
7a:b2:30:b5:a4:a2:31:ed:8a:45:97:ec:dd:b8:60:b1:1f:ca:
31:4b:d7:57:d0:b0:f3:3f:ec:5e:fa:95:ea:f9:15:f2:1c:60:
a3:a9:71:6a:de:bd:5d:13:e2:af:34:f5:cf:04:d8:76:97:16:
0c:8d:7c:6f:4b:da:00:06:4e:69:92:a2:ae:65:0b:f7:98:2c:
fc:b6:9a:4b:d1:b7:2f:ac:35:ea:77:f7:14:a1:52:00:39:bb:
81:4c:8c:9f:56:b6:8a:c6:48:46:52:48:7a:a5:47:7f:0e:1f:
c2:cb:80:6d:26:7b:3b:cc:bd:00:b9:7d:4f:b4:0f:8e:31:4d:
86:d5:6e:c0:e8:1c:63:ad:79:c6:ea:f5:3e:00:75:50:33:7b:
08:10:fe:5e:f4:29:53:50:37:69:21:c6:a6:32:88:ca:af:5c:
c0:1e:b8:44:a5:de:e8:e3:a3:7f:0d:cb:fb:d8:33:1f:95:88:
2d:e4:b7:89:f1:d3:dd:70:92:de:52:55:60:87:f7:65:88:9b:
5d:38:56:bb:ca:5a:ee:08:48:bb:8a:94:b2:b0:1f:7f:e0:7b:
80:66:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:52 2025 by rpki-client