Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier: dCWDN85qtsaBq2uyRGgt7Zyuif4Ug4iSb9aQFXXO01E=
Subject key identifier: 39:8B:1E:41:B7:7D:0A:D3:8B:19:4D:1F:1E:97:8C:EE:97:F8:D1:95
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 019A50747F2772807914A03FCDCD67685325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number: 0BB7
Signing time: Tue 04 Nov 2025 20:00:03 +0000
Manifest this update: Tue 04 Nov 2025 20:00:03 +0000
Manifest next update: Wed 05 Nov 2025 20:00:03 +0000
Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: lpGG29ye7M7zjeR80ooB+BECW1F4I6wxX//kT1u6FhY=)
2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:7f:27:72:80:79:14:a0:3f:cd:cd:67:68:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Nov 4 20:00:03 2025 GMT
Not After : Nov 5 20:00:03 2025 GMT
Subject: CN=398b1e41b77d0ad38b194d1f1e978cee97f8d195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:63:e4:4f:03:cc:61:22:40:be:51:03:bb:
1e:92:6a:fb:6e:84:2a:23:92:b2:82:4d:06:84:fd:
a5:c4:8e:e5:01:a6:7d:d6:ef:e0:e6:e5:ba:45:cd:
ed:99:34:50:4c:5f:7d:47:be:f2:6c:48:30:06:54:
79:da:a7:8d:38:b9:21:a4:56:87:d0:0a:e3:a5:36:
2d:25:cc:2b:af:ae:b3:06:7b:57:52:63:c4:de:56:
0d:24:17:eb:18:2d:92:02:8e:6a:bb:12:c0:b8:1a:
1c:d0:30:7b:b7:fe:21:6b:a5:fe:79:d6:8e:7f:26:
74:52:2a:4a:db:d5:61:44:96:42:4e:4f:f4:c0:12:
29:05:fa:ed:c4:75:ca:2a:8b:c8:e1:a7:42:a3:7e:
3d:2a:60:4b:77:f8:d9:b6:7b:27:3f:5f:4b:40:16:
91:68:c8:63:0c:22:40:16:5f:2e:ee:90:bc:ba:47:
e0:f7:a5:ea:07:92:72:fb:e0:eb:e2:95:f9:e9:23:
8a:b4:a9:bb:b0:32:af:f2:8d:54:ac:d8:23:48:83:
84:58:c1:f5:93:2b:47:88:0b:ff:9e:5b:c4:23:e1:
e4:96:c5:7a:95:79:e8:1b:44:8b:2d:17:eb:20:86:
79:a5:99:82:f6:de:f4:7d:70:27:60:47:5c:78:f1:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8B:1E:41:B7:7D:0A:D3:8B:19:4D:1F:1E:97:8C:EE:97:F8:D1:95
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3a:a4:af:ed:d4:2c:99:d9:e4:09:e6:0d:83:92:ce:8d:b1:
64:2d:1f:ee:af:e5:e4:f5:2d:99:51:ef:7b:c2:e2:06:d3:c7:
db:b9:7e:ad:84:cc:61:1f:b4:db:00:d6:a9:1e:56:2b:eb:50:
2a:ed:89:2a:24:b6:af:9c:c3:cf:7f:d7:e3:99:03:9a:29:1d:
f9:2d:01:9a:2a:c0:44:58:b0:ef:c8:ea:6a:01:77:89:50:52:
81:b4:1b:77:e0:45:22:a2:4a:9e:b5:73:98:45:44:a6:11:c4:
a1:05:f6:51:20:22:67:2c:87:3e:6f:fb:2e:93:25:dd:87:4d:
0f:64:df:76:c1:ae:35:ae:0e:57:29:9f:a3:f4:c3:41:a9:58:
49:77:ff:20:e3:d6:5b:7f:21:c1:ac:63:b0:af:06:ee:78:3c:
1a:de:32:4c:ab:06:5d:bf:fc:06:4a:28:bd:9a:3e:3f:32:03:
88:17:c4:31:e6:17:b8:3b:13:b8:d1:f9:9a:9c:7f:fe:cd:ba:
2f:68:17:b2:8d:f0:d8:b4:47:ec:dc:53:8a:59:8e:45:c9:eb:
08:26:40:e0:7b:11:27:51:46:33:96:0d:eb:9b:bf:46:1a:8f:
21:b2:ca:a4:39:8d:e3:ea:59:6c:8f:f8:9c:dc:c7:23:d0:ff:
33:a7:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:49:15 2025 by rpki-client