Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier: b3y5opidtxjFCseqeIRJKxvC6n+HfUieKWsagl4W0mw=
Subject key identifier: 8C:6E:4A:78:3E:C1:AA:5C:D1:5A:3A:8C:E8:F6:DB:FC:91:38:96:CC
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 019A4D73ECF8680E7259BC7A19BCEF3E7622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number: 0AD2
Signing time: Tue 04 Nov 2025 06:00:34 +0000
Manifest this update: Tue 04 Nov 2025 06:00:34 +0000
Manifest next update: Wed 05 Nov 2025 06:00:34 +0000
Files and hashes: 1: GvnG-mS30kZsC0VMkjG-9H9bKNc.roa (hash: fCMqeP5mwLekpgJxD7sr/iDT7Y2EP3bkaxbq5G7CFnk=)
2: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (hash: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=)
3: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: REQBgn7LmkDxRRnsrcOuDNTzwsWs/jxgKj4ClV4B7VI=)
4: rDRUKkzZmI7yjCKpqiCtK-fUy7Q.roa (hash: uAeF6E4mouy6Lmf4flTkP1sxauS/RBJXZig4r2f6XkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ec:f8:68:0e:72:59:bc:7a:19:bc:ef:3e:76:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Nov 4 06:00:34 2025 GMT
Not After : Nov 5 06:00:34 2025 GMT
Subject: CN=8c6e4a783ec1aa5cd15a3a8ce8f6dbfc913896cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7b:67:f8:af:d2:7e:3f:2e:14:74:52:71:06:
70:0e:07:13:66:35:f2:2d:88:0b:25:25:86:5d:3f:
67:f0:cd:f2:47:ca:3c:70:00:9b:3a:d6:25:b5:82:
38:e1:1d:c4:e5:38:d3:1b:4d:c6:8a:b7:4e:aa:d6:
a1:ab:14:47:d3:5e:ba:f1:48:4a:f8:1c:f8:05:86:
f8:09:a7:99:10:7e:ec:a7:e6:a4:57:5f:1d:c5:6d:
62:e7:49:c8:14:00:52:22:99:f9:65:c2:94:49:f9:
51:8b:27:32:3c:8e:5d:9d:6b:87:bb:c0:fa:b2:0b:
d1:1b:a4:72:58:34:00:13:d9:d3:30:76:27:02:e9:
1d:ac:f0:3f:79:33:c2:0a:13:ee:00:b0:5a:03:65:
bb:74:c0:ba:03:62:01:49:52:5f:d2:c6:e7:00:e0:
cf:25:1a:b3:2c:cd:13:6d:af:46:26:c0:e2:e1:f2:
2d:8b:d0:8d:06:ef:e8:76:e1:75:81:40:2d:0d:20:
7d:45:84:a6:83:68:cb:6f:e8:07:45:2a:23:fb:a7:
35:5e:06:55:1d:e1:53:8a:60:b9:8b:bb:e7:e4:fe:
c5:9f:98:cf:4d:04:34:6b:e9:6a:3e:43:5d:9e:ca:
06:ee:9d:15:26:c0:e3:77:b2:ba:e8:ea:ef:7f:fe:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:4A:78:3E:C1:AA:5C:D1:5A:3A:8C:E8:F6:DB:FC:91:38:96:CC
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:5d:76:d9:4f:d8:ae:fc:2f:36:8f:35:65:55:dd:a9:53:cb:
6f:ba:b2:3a:a5:c3:c0:30:2c:da:ed:36:8e:17:2f:4a:6e:ba:
5b:d5:a0:d0:08:fa:88:77:a3:07:71:55:a6:09:1e:b4:cc:44:
49:2c:bb:10:ad:ab:29:57:fa:8c:56:70:c5:d8:5c:c0:1d:c8:
9d:5a:d9:26:57:3e:7c:26:9d:79:96:19:b7:04:f4:62:6b:fc:
13:57:6d:3c:3b:38:f7:70:f1:7c:6c:be:2a:f1:be:89:9a:d0:
05:3c:4c:2d:10:00:e9:79:16:78:3b:6e:c4:fa:e6:92:55:85:
2e:74:f0:68:74:30:03:b0:f9:41:4d:60:f2:88:c0:2d:46:1b:
0a:96:63:aa:29:4c:06:f9:34:4e:34:e6:52:a0:35:11:e1:33:
c2:db:aa:7b:0e:cb:45:14:de:12:2d:e4:3f:5e:58:da:5a:8c:
14:61:8f:f9:41:21:92:2e:b5:25:e8:a3:5b:95:bc:d5:91:53:
c5:d8:88:e8:42:db:1a:42:ff:84:3f:3f:0d:3a:a5:a2:06:67:
b5:f5:21:5c:ab:02:6a:b4:53:db:e9:7f:1f:e7:17:c0:32:d2:
d9:f1:07:d2:7d:e7:de:b5:26:81:5b:06:8b:de:7e:d6:c4:b6:
6e:48:47:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:40 2025 by rpki-client