Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File: YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier: XSrLWW45l0Yck8X1u0CsE1p+7zRpJC77xMwGdS+J528=
Subject key identifier: 3A:1D:19:18:CF:63:93:A7:48:AE:5C:2C:A7:FB:6E:02:21:4E:14:96
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer: /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial: 019A4EF3FDFDB6FE4738E7F7992633FC0658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number: 0448
Signing time: Tue 04 Nov 2025 13:00:04 +0000
Manifest this update: Tue 04 Nov 2025 13:00:04 +0000
Manifest next update: Wed 05 Nov 2025 13:00:04 +0000
Files and hashes: 1: Q0gUuxATATDf6JEQ9fzt1u3IZsc.roa (hash: 3y/S39XmNPx0DoVA3l0EHWQrU4S+Z88s+G6ph2XRAwc=)
2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: b5XVp+8zED04dv30TIgU7LgmVI79Ie+0bTSe0/jfWTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f3:fd:fd:b6:fe:47:38:e7:f7:99:26:33:fc:06:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Validity
Not Before: Nov 4 13:00:04 2025 GMT
Not After : Nov 5 13:00:04 2025 GMT
Subject: CN=3a1d1918cf6393a748ae5c2ca7fb6e02214e1496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:d4:19:1c:59:e3:2a:49:0f:2d:3b:a2:e9:
cc:ad:60:4b:d5:06:33:98:c5:2e:ff:d8:11:d9:27:
fb:04:7e:d3:25:3a:67:1d:6d:05:59:c6:2b:76:ef:
fa:3e:83:7f:9e:21:90:bb:3f:df:8d:37:97:8c:81:
06:59:4c:86:1d:ce:03:53:1f:e5:66:68:f0:21:18:
da:35:d3:e2:51:e9:1a:71:ad:a2:fc:16:7c:80:17:
55:4b:de:ed:f4:af:8c:5e:fc:34:ef:04:19:32:16:
ea:c7:c0:95:bc:f7:82:27:ad:e9:0f:a2:89:9c:cc:
bc:62:f1:1a:62:c0:9b:cf:02:7b:b6:69:9c:7c:ee:
b6:5b:3c:a9:f3:27:83:e4:e0:50:d3:c9:9b:12:12:
c8:32:3d:24:cd:d7:62:9d:89:28:f3:f0:0f:52:6c:
0e:e4:9f:36:d2:30:59:16:7a:6c:14:b7:d7:6c:25:
95:ab:cc:7a:c9:6a:cc:3c:d6:2f:13:24:4b:28:c5:
b7:04:4f:1e:23:02:7d:22:17:68:75:27:96:00:7d:
ad:70:41:67:14:c8:bb:89:96:d9:ce:50:8c:48:ef:
8e:2c:95:c6:d0:df:57:0a:79:d4:32:b2:e6:ca:1f:
02:3e:08:91:81:0f:e6:1a:d9:c2:d8:11:d8:49:24:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1D:19:18:CF:63:93:A7:48:AE:5C:2C:A7:FB:6E:02:21:4E:14:96
X509v3 Authority Key Identifier:
keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e7:ae:04:fb:9a:01:29:ab:3f:2d:da:d3:b8:54:3e:aa:ce:
5e:19:18:d8:4d:ba:d1:cd:f1:76:6b:ab:20:c2:32:12:c5:7e:
75:e3:2f:9a:0e:57:1d:18:9d:b3:49:73:74:71:19:b4:0c:74:
ff:a7:2b:30:82:70:29:97:9d:5d:e7:a2:44:d8:89:13:62:d6:
02:e2:cf:71:4b:3d:7f:3b:96:a2:e1:5a:b7:85:a4:ca:aa:0e:
12:bc:2f:b0:d6:79:03:d8:95:65:ce:ba:22:d8:da:70:03:92:
f2:c1:e4:0b:67:53:7e:32:5e:a7:ce:8d:40:cd:ec:c5:bf:5f:
e6:ba:94:6d:79:eb:71:5d:fd:7a:13:ab:76:64:99:53:ed:df:
69:80:00:29:28:f9:d6:9e:c5:4a:b7:7b:95:59:d9:35:fd:69:
12:25:f4:5a:df:10:67:1d:6b:97:be:63:ac:32:f8:94:0b:11:
0d:08:c3:0c:55:2e:5f:89:8f:a5:28:85:2c:aa:23:e8:b1:71:
53:05:2e:58:1e:44:9c:f2:93:e2:18:4c:b7:ba:a6:2c:3a:08:
a7:c8:ed:df:5a:a8:81:80:6a:40:3e:ee:4b:e3:90:48:02:a8:
17:72:9d:4f:53:fd:ab:9d:c1:d7:30:59:55:0c:72:f4:f2:38:
83:21:e9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:53 2025 by rpki-client