Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: wVdAGL3Fen0bNmmegvrcSuRppnH5uQs2ReFzyeLUVv4=
Subject key identifier: C2:15:DB:35:00:52:8C:F8:B3:15:A4:8C:CF:56:0D:05:F4:1E:C1:14
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019A4D3D32E255308DAA970C8A497F109298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0D90
Signing time: Tue 04 Nov 2025 05:00:47 +0000
Manifest this update: Tue 04 Nov 2025 05:00:47 +0000
Manifest next update: Wed 05 Nov 2025 05:00:47 +0000
Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: w3vydGXm7SdOto6OOUOV6ztWxRzDIubYjy6HFOSNn0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:32:e2:55:30:8d:aa:97:0c:8a:49:7f:10:92:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Nov 4 05:00:47 2025 GMT
Not After : Nov 5 05:00:47 2025 GMT
Subject: CN=c215db3500528cf8b315a48ccf560d05f41ec114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:d3:aa:e0:ad:ab:e2:a2:b3:24:ab:85:d7:
0b:2f:28:12:a7:85:e4:2f:26:ef:df:96:14:be:9b:
ce:00:ba:82:5b:89:b2:2b:33:55:78:37:37:9f:d2:
48:49:40:46:5d:0d:e0:c1:6f:20:e6:49:0b:78:d4:
73:fd:68:37:87:0f:fa:40:84:88:05:ce:7b:d0:d6:
eb:d1:88:be:d2:4f:7e:02:3b:ef:0c:f9:3d:ee:63:
78:f7:31:9a:71:34:b7:42:2a:fb:ba:92:e2:8b:99:
51:36:f1:6a:df:82:2d:be:c4:3c:64:ae:ef:17:51:
94:91:db:37:38:26:90:2f:9b:e5:64:f8:97:1d:06:
53:2b:93:6b:06:a5:1a:04:bb:d8:86:88:fa:be:56:
9b:fb:ae:f0:c1:a7:34:8d:57:91:ce:72:3e:06:92:
d9:28:59:ee:97:e0:8c:e0:dd:3d:e9:79:d7:7d:e3:
db:d0:d3:3d:01:2c:28:98:78:34:89:ca:c1:67:a9:
f4:50:2b:b6:1b:e1:79:eb:6c:9e:36:92:61:16:1c:
ed:6c:9b:29:a2:00:10:c2:75:8a:b9:8b:a2:a5:f5:
92:5c:2f:0b:37:d0:cd:45:53:20:2b:34:27:6a:7f:
0f:6c:f9:90:6b:4b:d9:f6:48:65:17:b0:d3:a7:ba:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:15:DB:35:00:52:8C:F8:B3:15:A4:8C:CF:56:0D:05:F4:1E:C1:14
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0a:5a:d4:ec:45:d2:4e:42:a2:ef:8c:7c:68:72:e5:90:43:
92:0a:79:45:4c:05:f7:b9:15:1e:fc:16:ab:a4:4b:17:29:d3:
4b:07:69:d3:36:67:96:90:4f:48:f6:7c:30:27:06:2f:94:e5:
da:fa:4d:09:a0:89:f6:1f:35:69:db:39:36:e5:79:db:91:85:
ab:39:c5:9c:7e:64:fc:1d:92:ce:4a:21:55:1d:a0:d2:29:37:
3e:73:08:9f:5c:04:6b:93:d0:84:49:94:f1:5f:8d:c6:1a:41:
5e:57:af:3b:49:a5:96:f2:b4:41:b1:4f:99:d9:5a:cf:18:57:
9f:00:ef:7a:41:bf:23:ca:59:de:15:29:6f:17:bf:24:5d:27:
c7:23:06:a6:ff:41:11:16:66:96:d7:aa:35:83:8a:77:4b:7a:
be:2a:98:c6:f2:20:df:04:ff:6c:d1:c6:39:48:1d:5c:78:64:
7e:22:1f:6f:6d:7a:19:1f:52:79:59:d4:07:42:f9:49:5f:ea:
c0:c1:8c:88:c5:89:4f:10:9c:bf:88:e5:63:4a:81:49:8c:d1:
f4:ed:7d:87:41:ab:9c:9c:ad:33:84:9f:f7:80:d9:3e:e7:51:
0b:7c:5d:30:e6:ef:c2:09:37:5e:12:13:76:24:98:44:f7:a2:
02:76:26:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:33 2025 by rpki-client