Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
File: YFvAEwOQWABiCsJsFGixQfgHRRQ.mft (raw, json)
Hash identifier: y8vIgz/UiectpQXujOWbeh+Drco+M4eJtptJhbUwe/4=
Subject key identifier: 90:66:1A:7F:D4:94:4B:52:CD:99:84:AE:12:DF:B7:45:FE:77:43:54
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 019A4DAAC7330BFC30409E26BD00EAD14EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
Manifest number: 0DE2
Signing time: Tue 04 Nov 2025 07:00:28 +0000
Manifest this update: Tue 04 Nov 2025 07:00:28 +0000
Manifest next update: Wed 05 Nov 2025 07:00:28 +0000
Files and hashes: 1: 9c99e7OOCoSsqv05bamuZvrBRAg.roa (hash: gcQqAYS/2mIfyTda9lezITlbdeVA2P8mDvlHBkdo3p0=)
2: YFvAEwOQWABiCsJsFGixQfgHRRQ.crl (hash: 4aFZJ2po/JRonJN+SV71fSOc/Fa+FwIETpbII2jy0/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c7:33:0b:fc:30:40:9e:26:bd:00:ea:d1:4e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Nov 4 07:00:28 2025 GMT
Not After : Nov 5 07:00:28 2025 GMT
Subject: CN=90661a7fd4944b52cd9984ae12dfb745fe774354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:35:be:29:d5:da:0a:dc:7a:8d:f3:5e:48:
29:5a:1a:2e:87:46:1e:7a:41:a4:28:c0:82:59:e5:
07:08:49:2a:f7:fe:0b:0b:bb:1d:72:a0:83:49:a9:
59:30:44:89:b1:4a:e6:43:12:5c:55:12:ee:db:bd:
42:5b:ec:f3:1b:4a:8d:9b:4a:84:1b:b9:6b:b3:e3:
bb:65:c3:d6:26:00:4c:ed:f1:ef:e7:97:a3:78:a7:
72:2e:a9:fd:64:da:eb:a0:1b:15:d8:c3:9e:af:f2:
7a:8e:ad:b5:70:c5:29:4d:55:7e:d7:a5:c5:d4:8b:
9d:44:79:44:29:8b:81:b6:d6:92:24:37:cf:06:24:
96:2a:0d:8b:04:ab:2b:5e:b0:4c:4b:e8:d1:86:5b:
c5:c3:66:97:12:43:ab:0c:3b:dc:f3:e1:f1:68:82:
4c:ef:6c:49:e3:36:47:5d:13:05:e8:8b:52:91:9f:
41:e6:f3:a9:7c:46:ca:cb:a9:38:5b:29:f8:a9:1b:
f6:a5:0f:96:eb:92:b0:70:3e:91:29:d9:ea:d8:55:
87:e1:6b:e8:e1:b8:89:07:c3:de:22:c3:b1:56:ce:
4b:04:b7:b3:bd:24:7e:83:e7:a7:48:dc:14:ad:71:
7e:52:32:5b:a0:94:1a:4f:2c:c8:8e:97:49:3d:38:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:66:1A:7F:D4:94:4B:52:CD:99:84:AE:12:DF:B7:45:FE:77:43:54
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e6:00:a7:d2:82:85:4b:a8:e8:1b:d3:f9:2a:6b:3d:4f:aa:
99:c1:48:a5:15:de:3b:a2:ea:91:1e:c4:0a:b7:0b:bd:9f:92:
58:6d:5a:5c:fa:f6:41:bc:5a:23:b0:70:1f:75:de:79:ad:63:
b9:d8:77:f0:ae:ed:04:d9:c5:7a:b2:f1:ac:73:99:ab:59:97:
f5:e8:95:b5:fa:dd:1d:91:51:7b:5b:70:56:14:9b:cc:9d:1a:
4f:30:30:9d:e2:1d:1f:a0:76:ec:cd:94:b8:15:fd:e8:53:0c:
76:e1:26:66:9e:c4:c3:49:34:0f:af:cc:e3:b7:db:cb:61:ee:
f9:cf:90:a1:f1:25:9c:25:1a:3c:05:12:92:85:9d:65:c7:19:
eb:42:af:79:05:4c:8e:de:2b:fb:54:46:1c:31:22:30:59:73:
1d:3c:ac:74:65:5c:e6:97:da:72:fd:a4:4f:16:f1:c9:81:86:
8d:09:ab:0b:a3:e6:90:87:61:56:3c:ff:8f:ae:0b:60:6e:3c:
fb:9c:5b:df:f8:87:b1:66:d8:ee:04:87:98:5a:5f:61:61:89:
54:ec:05:ba:a7:77:a9:5b:3c:19:b0:5d:16:53:f7:26:5e:97:
90:5a:90:69:75:03:7a:80:9c:3c:23:64:c7:c9:76:e1:08:a1:
a1:25:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:18 2025 by rpki-client