Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: oFfb1QcFRYVhYJuSonvpSxaohl+JXPrcWXUJmTsFJw8=
Subject key identifier: 5A:16:4E:B0:9F:CE:88:DA:06:BD:87:9A:48:F8:E5:25:20:91:8B:47
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 019A526312BF8DA9FCD375952EFE9FAE31E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 05:00:15 +0000
Manifest this update: Wed 05 Nov 2025 05:00:15 +0000
Manifest next update: Thu 06 Nov 2025 05:00:15 +0000
Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: lj0Mq5qJ4JOfHtiM88jdlCX0+ZieLbn5JFqcmCnkhkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:12:bf:8d:a9:fc:d3:75:95:2e:fe:9f:ae:31:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Nov 5 05:00:15 2025 GMT
Not After : Nov 6 05:00:15 2025 GMT
Subject: CN=5a164eb09fce88da06bd879a48f8e52520918b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:b7:51:f7:7e:47:bb:96:73:2d:94:4b:a7:
f8:fe:98:ad:38:74:dd:2b:1d:15:c6:1a:08:7b:bb:
24:9b:9b:e5:08:6d:dd:86:f9:f1:fc:a1:c9:65:49:
2f:f7:83:ad:ac:73:eb:94:fc:8b:a6:c1:9e:2e:66:
ca:b2:79:12:df:40:44:ec:55:c6:2a:30:41:e7:38:
d5:ba:38:51:3a:34:49:a2:32:b9:a7:e9:41:22:da:
ea:b6:22:ae:0b:0c:e3:7a:ca:41:82:23:da:9e:32:
bc:fd:83:01:31:38:6f:b1:a8:74:e6:13:a0:06:1f:
58:f3:03:04:24:a7:98:09:ee:ec:2d:b3:1e:ac:e3:
a5:36:89:0b:dc:cb:32:23:b6:d8:89:b0:e7:7b:5d:
43:e8:03:20:ff:05:4b:2f:2b:0c:f8:84:69:48:e2:
fd:fc:86:fc:07:dc:20:16:94:2c:ea:03:bd:90:b5:
db:26:ca:e6:af:f5:64:42:ee:7e:05:5a:dc:ef:02:
c2:09:15:0b:6a:39:35:33:28:f1:2e:8a:ed:9e:9a:
7b:ba:8d:96:a5:f3:4b:86:61:68:a1:a5:f5:3c:5c:
85:ef:29:3e:77:e6:2c:35:2f:2b:c2:93:a4:6d:b8:
29:c6:65:c9:b5:27:a8:c1:fc:f7:4b:e7:a8:f8:79:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:4E:B0:9F:CE:88:DA:06:BD:87:9A:48:F8:E5:25:20:91:8B:47
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c7:70:a0:29:7c:ff:ce:27:7a:f8:fb:ba:df:05:e7:9e:a7:
24:79:31:6c:b0:75:8b:27:c5:00:d8:01:3c:88:f3:81:c3:c1:
dc:54:44:73:09:ad:1e:13:d6:a2:06:27:02:b2:1f:f8:c7:64:
17:9f:a6:89:84:be:fc:89:a1:00:d4:e3:95:59:a9:a0:4f:78:
7f:96:f2:7a:b6:82:41:b8:63:3a:63:4f:b5:21:07:5b:03:c2:
07:cd:27:ce:41:25:54:07:7d:2f:61:0f:18:07:18:b7:5d:a2:
3c:a3:7e:06:15:6f:94:95:f9:f4:83:90:e8:80:92:5e:5e:10:
28:b0:f0:f3:1e:31:7f:0f:51:e5:94:02:be:70:9d:c7:41:e0:
e0:db:19:87:ee:1f:d3:56:05:59:5d:91:58:cc:23:f4:10:18:
9e:85:bf:8f:0a:d0:c3:b0:85:9c:95:08:45:eb:22:c5:47:34:
36:03:21:34:41:c5:36:d2:59:6d:ed:0c:58:dc:6e:e2:16:bc:
47:7a:4c:84:0e:47:71:8c:e4:51:e9:92:cc:b0:a0:8b:eb:46:
2d:63:b4:f6:ae:37:22:59:eb:8b:01:1f:de:20:44:38:f5:35:
e4:93:26:ba:ff:af:1b:ba:23:5f:12:e7:24:e7:60:c8:c9:5f:
68:ba:d2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:57 2025 by rpki-client