Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: m+eOPbzNJavJIFrGxQ7pWPP1pZ2zYd9nibxePFHi1O4=
Subject key identifier: 44:CE:75:88:CA:15:C4:C3:54:89:4F:8B:39:A7:64:70:B0:02:81:3C
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 019A503E05B597AE3BBB33F7E930B860EB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 105F
Signing time: Tue 04 Nov 2025 19:00:33 +0000
Manifest this update: Tue 04 Nov 2025 19:00:33 +0000
Manifest next update: Wed 05 Nov 2025 19:00:33 +0000
Files and hashes: 1: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: XluIa5dH6WTlIVCxIqOBUFNMS8P/yIM5eO84VpWGpVs=)
2: iUluP9dzGEFPZV1QT7qhxKlYtLc.roa (hash: dqFbgrXc+CPp5bc1uUsZ9NzSqOeylcrCuwJIJApbIDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:05:b5:97:ae:3b:bb:33:f7:e9:30:b8:60:eb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Nov 4 19:00:33 2025 GMT
Not After : Nov 5 19:00:33 2025 GMT
Subject: CN=44ce7588ca15c4c354894f8b39a76470b002813c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:3b:89:f3:4a:a2:59:65:c3:cc:a3:d4:fd:
cf:52:85:76:fa:42:13:dc:bf:ec:5a:88:c2:88:11:
56:f3:99:a0:69:db:d8:6b:9f:5b:f0:e4:e6:46:05:
ab:52:c8:88:ba:19:01:55:77:98:42:4d:81:64:eb:
17:7e:fd:00:3e:b2:f4:cf:0a:3f:f0:fe:02:dd:8a:
f7:74:83:47:33:15:a0:55:44:5b:7f:78:b1:5b:31:
c3:b4:e3:12:77:92:ed:c7:6d:94:5a:16:25:af:d3:
a8:cc:d7:c1:5c:88:32:61:d3:26:80:cf:a9:ed:f5:
8a:c9:0e:21:44:be:96:bc:c4:9e:60:32:5f:86:52:
7b:d5:e3:6b:92:1c:4a:0c:f7:e3:95:4c:57:43:5a:
be:fd:b3:5e:3c:cc:a2:1f:9d:30:75:b6:a1:ed:9d:
60:99:7d:58:5c:cc:ca:51:31:dc:c6:d2:21:db:41:
82:fb:e1:78:2b:e7:fd:72:2b:c0:f4:b6:42:f0:3b:
d1:9d:9a:0f:60:ce:ee:42:ff:43:9a:ec:6a:34:04:
87:71:fe:e6:93:a8:55:f9:84:46:35:3e:d6:b8:c5:
a8:81:93:11:2d:d3:0f:fe:3b:ea:c2:3a:d0:50:0b:
49:a7:4c:97:33:71:bf:9a:a1:c3:42:96:d5:9b:cb:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CE:75:88:CA:15:C4:C3:54:89:4F:8B:39:A7:64:70:B0:02:81:3C
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4d:b0:f4:71:ca:55:93:46:ae:c5:e9:02:16:a4:c1:67:67:
42:08:0f:3d:08:e9:4c:4c:e4:93:a0:6e:f8:23:41:db:0c:3e:
f1:e4:22:10:28:4f:5a:a2:52:bf:a3:13:a3:c6:4d:cb:96:e2:
b7:c6:e4:1c:82:5f:f5:45:30:75:9a:01:68:d9:fc:9c:4b:6d:
0f:50:e9:fe:64:5c:74:09:07:01:b5:9d:68:f0:4c:a6:8b:c4:
78:d6:44:ca:e9:f3:03:12:a5:0a:56:2b:12:14:2b:80:63:c4:
64:65:5a:a2:08:0b:c6:e6:f0:b5:f7:e3:f8:44:a3:4b:e3:c4:
af:9f:56:f2:74:cc:5e:b6:09:74:28:90:01:db:81:1f:61:a3:
ca:03:91:c5:a0:50:5b:44:52:af:b2:38:7e:c0:a1:80:22:43:
85:3c:a1:52:4b:46:c0:3d:34:9f:b0:af:78:e7:82:52:11:a6:
34:57:e8:03:8c:39:16:00:3e:84:05:f2:a4:4f:ff:51:49:fd:
89:c4:e8:90:89:cd:fa:4f:97:3d:4e:e1:bd:56:df:29:ae:fa:
e9:8a:60:e6:c0:66:83:a4:23:bd:0f:ae:4e:8e:e6:41:02:a2:
de:4a:85:86:ec:36:c6:d6:17:53:33:e2:4f:6b:c9:3c:53:a2:
ce:4d:33:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:15:31 2025 by rpki-client