Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File: YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier: Aex5mwmJItx3Yo4gyukn0/KoDNa/Z9OVTlKTz2efuJg=
Subject key identifier: 38:DD:BC:D7:5F:C5:BA:3A:86:C1:EF:5D:39:B6:A2:F9:D2:BF:1D:55
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial: 019A51506A32A7EB37D118C6CE30800A7AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number: 0DD3
Signing time: Wed 05 Nov 2025 00:00:15 +0000
Manifest this update: Wed 05 Nov 2025 00:00:15 +0000
Manifest next update: Thu 06 Nov 2025 00:00:15 +0000
Files and hashes: 1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: 5882J5dvvxZEyYMZJlxt3xSjslYLAsSi6K3KsyvsTrE=)
2: tm8Rt7Sc2c1PcYKasPfyO3eBX9M.roa (hash: fWTds4doBQAqbglPwbw6IGwEFIO7de7/7OMc6gbtl08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:6a:32:a7:eb:37:d1:18:c6:ce:30:80:0a:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Validity
Not Before: Nov 5 00:00:15 2025 GMT
Not After : Nov 6 00:00:15 2025 GMT
Subject: CN=38ddbcd75fc5ba3a86c1ef5d39b6a2f9d2bf1d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:c4:62:4f:9a:f7:d9:7b:f4:76:f5:7b:77:
0f:c5:13:80:63:81:bc:7b:27:22:10:5d:dc:ce:8a:
55:ca:d1:f0:54:42:1e:17:ea:10:bd:07:a6:ae:f3:
fc:81:e3:92:97:1e:cb:b1:3c:de:06:ee:12:10:ca:
99:85:28:7e:73:cd:e9:68:23:4d:98:4e:b7:cb:03:
fe:81:a1:71:01:c4:0f:b2:1a:b6:fc:4d:83:7e:23:
18:96:94:6a:73:d7:34:ff:38:14:ba:65:97:a5:e8:
05:7e:86:41:e0:a8:43:77:1e:57:0b:03:3c:67:66:
1a:09:05:fb:c5:2a:09:75:66:70:21:cf:98:b7:77:
c5:d8:c9:b0:f3:19:d0:2c:9d:d9:bd:6e:10:fc:f0:
40:40:5a:eb:7b:97:25:c6:5c:7b:c2:14:9c:c2:2a:
8a:e7:6d:be:9c:74:d9:23:1f:65:3c:5f:79:2c:92:
c9:f0:bc:7a:43:91:ba:d7:88:e8:47:4b:63:f0:ff:
8e:29:db:72:c3:c0:51:8e:6c:f1:b3:89:4d:71:72:
21:f8:2d:57:ac:59:c0:bf:12:0f:9e:d1:db:45:e4:
37:9f:89:3c:89:84:8d:25:41:90:0d:f9:af:a6:aa:
aa:a5:c4:d2:e5:d4:99:1a:50:43:df:78:bf:2b:73:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:BC:D7:5F:C5:BA:3A:86:C1:EF:5D:39:B6:A2:F9:D2:BF:1D:55
X509v3 Authority Key Identifier:
keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:09:ec:25:3c:15:a4:53:78:37:a0:cc:26:64:e1:ad:ec:d5:
3c:4e:e9:b9:33:38:19:35:6a:41:49:0d:d0:a4:56:41:21:70:
60:f6:99:24:a5:ab:5f:00:9a:6c:b4:90:59:f8:58:61:30:5f:
86:7d:66:19:43:85:51:7d:56:d8:a0:87:27:52:8d:35:06:10:
41:50:bc:fc:9d:20:a8:e3:3b:1f:00:84:2d:3e:1d:0e:cb:70:
3f:45:42:04:70:b5:80:f4:77:d1:8a:c8:55:b8:ef:94:29:c9:
da:ad:ab:d0:7e:04:65:c9:76:6d:0c:a8:e7:7d:5d:11:17:24:
a6:34:16:2c:5c:b7:75:6a:52:9d:e3:ee:3e:5b:7a:f2:db:a8:
6b:89:86:68:fe:eb:fb:ae:12:59:00:cb:65:a9:a0:b6:02:c9:
26:c8:1f:0a:84:6b:57:04:e0:4e:d6:96:f9:53:b4:44:e6:e6:
28:99:16:81:62:55:02:0f:af:51:27:40:bf:86:1b:8e:04:09:
65:ec:8c:43:92:fc:c5:13:25:29:d7:0b:20:bb:d3:21:af:ac:
37:83:bc:aa:b3:72:be:f9:c1:25:b5:ff:91:16:88:e7:13:61:
72:75:c4:3c:15:4e:02:38:1f:1c:40:49:f6:72:21:a8:b7:95:
19:60:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:28:25 2025 by rpki-client