Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: dh2+zQClsaKJbdvg+uFXrWq8ZUCMY+7+Ko7/4SHfQiw=
Subject key identifier: 6C:61:CF:A0:60:54:49:EB:A7:05:83:DB:89:34:50:06:8D:DA:AC:1C
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 019A53AD2D48EB58E73C1A4E774236F57117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 0BE2
Signing time: Wed 05 Nov 2025 11:00:49 +0000
Manifest this update: Wed 05 Nov 2025 11:00:49 +0000
Manifest next update: Thu 06 Nov 2025 11:00:49 +0000
Files and hashes: 1: 67MB3uIiPBNhFM08ZckoWW6iFi8.roa (hash: JV/MdthgHrxhWbvFQASmk0ngMZHEyExozVaoGSmnqvc=)
2: 9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa (hash: HpbK15QHkCq2yrHDhDOHMvxiVYVvHPgmBjt3qtyByjQ=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: VYiIB0s4FfTHp9Fk2n7d1uKKWFr9OugVBrOco/hX/KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:2d:48:eb:58:e7:3c:1a:4e:77:42:36:f5:71:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Nov 5 11:00:49 2025 GMT
Not After : Nov 6 11:00:49 2025 GMT
Subject: CN=6c61cfa0605449eba70583db893450068ddaac1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bd:b7:7c:6d:45:44:8a:31:29:5e:41:02:0a:
c6:42:d5:0b:86:1a:54:cc:d4:5c:11:a1:81:d2:5a:
ae:9e:b3:e0:b4:2f:70:19:c1:4b:0d:d9:63:4d:37:
eb:a5:f6:26:e7:5f:c4:d7:15:ed:0b:3f:29:c2:fa:
5b:cf:2f:f1:af:17:25:9d:00:11:57:4a:42:91:4a:
d7:47:83:31:16:7c:9f:3c:d7:15:82:22:9c:83:39:
09:73:48:37:d0:bc:15:8b:8f:c6:13:94:3e:66:57:
9c:8b:4c:5c:88:90:87:fb:d6:79:52:63:65:be:8b:
bc:13:cd:81:b4:91:51:1d:e8:c5:cf:9c:40:dc:c5:
f3:06:d8:01:46:38:b8:12:e9:a8:d5:c7:8e:ba:dc:
e4:bc:0b:67:60:d0:9c:3c:c6:10:ac:79:64:1d:53:
b7:c2:43:fc:d6:d3:2a:59:ad:6e:99:c0:9d:fd:73:
d6:13:3c:94:c6:be:9b:af:6c:12:07:74:40:fa:41:
3d:dd:0f:30:e5:f9:c0:b3:2d:8e:31:ea:ad:d0:b2:
ec:a5:a8:70:1a:d0:5c:49:1d:c3:b1:ba:3a:3f:87:
be:40:14:06:f2:30:52:4a:8a:24:8b:ba:4b:a5:c5:
04:49:d7:90:64:af:76:cf:b2:7b:70:f8:ae:2d:ee:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:61:CF:A0:60:54:49:EB:A7:05:83:DB:89:34:50:06:8D:DA:AC:1C
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dc:f2:f1:dc:dd:14:46:7f:20:06:a6:3e:9b:03:19:16:e9:
11:2d:d6:51:56:af:50:f5:88:fe:ac:6f:b6:a5:dd:54:a5:a4:
c3:c5:d2:65:99:23:7c:2f:c0:ca:da:a9:36:73:c8:8d:a1:ff:
1a:46:08:c9:39:1d:91:e7:dd:e3:eb:69:04:cb:c1:f9:85:97:
c4:3c:89:f1:f7:55:79:85:44:dc:46:1f:f3:45:45:42:e6:32:
0d:e6:1d:c7:16:05:1a:9f:bf:50:9b:98:0d:c6:27:f4:ca:19:
94:09:8b:99:c7:91:89:0b:3a:44:aa:47:6c:4a:3d:f4:8e:d3:
16:68:f0:d9:48:60:c3:7f:ec:9e:09:12:f5:75:9e:fa:11:50:
0a:cb:8c:c1:f5:b1:53:be:ca:0a:2e:9e:1b:78:ee:59:e9:dc:
11:1d:3b:a4:b5:34:bf:2b:6e:38:13:73:77:37:22:93:f8:47:
21:51:83:87:a9:c6:a4:17:6c:59:fe:e1:45:4a:c9:3b:6b:8f:
ce:9a:73:61:71:14:37:5b:70:c3:da:6f:9c:e5:3d:d2:8d:04:
1a:88:01:c1:cd:5e:4b:a5:67:12:0a:00:2b:db:54:d0:18:1a:
69:f9:32:47:05:df:60:3d:a4:36:06:1a:d4:b9:59:ec:c4:f3:
e0:35:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:13 2025 by rpki-client