Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: yvIYq2Rnaz74m0fedfPxAAj68wPcm9OTt2e4u6+lBEI=
Subject key identifier: EA:5D:83:6A:C3:7B:1B:CF:9D:A1:E1:A6:A6:13:6C:D4:F4:DE:48:30
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 019A51F595E8BCCD1796510B3AB3A8ED078C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 0CDA
Signing time: Wed 05 Nov 2025 03:00:40 +0000
Manifest this update: Wed 05 Nov 2025 03:00:40 +0000
Manifest next update: Thu 06 Nov 2025 03:00:40 +0000
Files and hashes: 1: O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa (hash: 73YKFKe5WyNrwSKLy76+GejDIV4ldqnve1bMw3FlzZM=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: q4bOgMk5n+gsAUmhQT8bJ0p4HvAiTZgNlxtL9YNz++w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:95:e8:bc:cd:17:96:51:0b:3a:b3:a8:ed:07:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Nov 5 03:00:40 2025 GMT
Not After : Nov 6 03:00:40 2025 GMT
Subject: CN=ea5d836ac37b1bcf9da1e1a6a6136cd4f4de4830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:c8:ce:7a:11:18:8b:40:68:1b:a8:37:46:
55:c5:e7:1a:00:85:16:9e:b3:66:1e:81:2a:9a:0f:
e8:d8:f3:8a:9a:da:cb:33:41:2a:db:7f:f2:47:33:
b4:d3:4a:93:35:a6:a6:b1:b3:21:98:17:7b:63:46:
36:f0:df:aa:6b:c7:de:8c:a1:a7:13:74:55:2a:01:
2e:92:8c:d9:f8:bc:41:34:6b:07:a7:d3:41:7c:ae:
b9:87:02:e9:50:07:ea:09:59:17:df:81:15:47:63:
8f:4d:d3:8c:30:b8:b8:a0:cf:35:9f:4e:5b:82:13:
09:c2:f4:ae:66:e4:5d:b3:1d:43:5c:91:c9:8e:2a:
90:77:36:ec:47:2b:96:e5:c3:5b:c2:4e:08:83:18:
7c:a1:0d:40:38:43:09:22:3d:47:6b:f6:d9:0d:2b:
ab:bd:48:17:50:64:06:8b:37:e4:58:83:b8:08:03:
23:0b:f5:d1:41:5e:66:c4:14:31:00:19:0f:1f:1e:
f7:73:18:bf:eb:64:61:93:70:5b:fc:62:97:f3:06:
59:28:f8:16:15:52:1d:14:c5:0a:95:48:19:26:45:
35:59:7c:4e:c3:3f:0f:ba:b5:bd:1c:2c:78:43:72:
38:15:9b:81:b5:7c:03:09:0c:f7:88:f9:14:62:d9:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5D:83:6A:C3:7B:1B:CF:9D:A1:E1:A6:A6:13:6C:D4:F4:DE:48:30
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:54:47:c0:cc:d3:66:85:e9:1e:90:9a:5c:6d:48:83:a5:c2:
45:03:99:c9:eb:0e:f5:9a:e0:2b:e0:5d:c9:af:f3:9a:28:73:
7d:16:a8:b1:1b:2b:b2:20:f4:02:12:97:c8:d0:7d:2b:41:da:
a8:2f:d6:2b:2a:bf:01:65:b2:b0:36:ca:fb:92:bd:29:92:01:
ad:d1:44:cb:b5:2a:4d:be:00:6e:c8:87:01:84:5a:92:38:a1:
9f:91:21:a7:20:6f:e0:77:17:f3:9b:93:08:2d:4b:58:3b:92:
8d:0a:0e:cc:49:bf:90:96:a9:8c:78:2f:32:fc:43:79:8b:11:
39:c9:49:e4:6a:88:0a:06:87:8f:a5:e2:10:d9:b2:d8:15:05:
a5:ae:3c:53:8b:7c:4c:5b:e9:1f:d1:0c:2c:8f:e7:0d:55:c0:
eb:47:4a:e1:35:97:12:35:f2:83:a8:1f:0f:ab:fa:ec:9f:cf:
c7:9e:0d:84:ad:03:b0:91:fc:f7:28:35:66:b1:2e:e9:9b:2a:
86:29:7d:ec:e2:71:0f:2c:f9:91:87:30:fa:23:1e:ed:a9:88:
28:69:17:8b:12:28:73:ad:30:9b:6c:c0:2f:39:94:ff:33:b5:
10:10:a1:9f:90:87:a0:b0:e9:7c:95:fe:3e:2b:91:09:97:99:
4f:6b:bb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:12 2025 by rpki-client