Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File: YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier: +gjfFxKPNN6XX5PfUq3mXIdkYt5TlQbJXdfCypSudpo=
Subject key identifier: 60:0C:41:B8:D6:98:33:BC:9B:7C:C5:D4:59:43:7B:AA:CA:2B:EB:3F
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial: 019A4DE201C101E1B6D661D85828882950BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number: 0E1F
Signing time: Tue 04 Nov 2025 08:00:48 +0000
Manifest this update: Tue 04 Nov 2025 08:00:48 +0000
Manifest next update: Wed 05 Nov 2025 08:00:48 +0000
Files and hashes: 1: BbO3Y81u57rZF7WlM500MsuZpRM.roa (hash: ENegZhckEyjrMTUEgK0PeHY3+6b9WA+KNwr6cWbkGV8=)
2: VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa (hash: syajYrJmIJZ/O9q2a3nZ7jEdzvbYM5uKAi7nB9k82iw=)
3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: nZg9/sFhmHVOkAyY+wp+sixQiDMMBuNEOqQTAWbJNIc=)
4: _mYolmt2fF0wabxHp1kAcOpFjJQ.roa (hash: Ni2pHhwSkaVczL8tsRRH+ZM9PBph4eSrgcYZ18OoRUY=)
5: ucZk7RPUTaIeSxLkQGWFeSNWVec.roa (hash: 5rWJbfTjArOhmwmwJF8k3Fgre3TIPFtEAx1ngBb1v5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:01:c1:01:e1:b6:d6:61:d8:58:28:88:29:50:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Validity
Not Before: Nov 4 08:00:48 2025 GMT
Not After : Nov 5 08:00:48 2025 GMT
Subject: CN=600c41b8d69833bc9b7cc5d459437baaca2beb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:b9:d7:50:2c:6a:89:d2:6a:47:38:04:55:
19:90:6f:14:14:56:5e:51:45:14:18:17:c9:94:5a:
28:b9:19:84:a7:e3:6f:13:fb:4d:38:b4:80:f1:b9:
09:c3:05:0f:5a:4e:96:47:5d:00:79:42:a6:37:3b:
15:f6:88:fe:ec:7b:ed:31:c1:67:5f:83:77:88:8d:
99:9c:f9:f3:06:d9:6f:26:c6:6d:67:34:ae:01:27:
b4:f3:6d:be:34:60:26:49:b6:0b:f7:e7:46:63:f9:
26:be:e6:bd:06:94:25:f8:ee:c0:27:4b:d9:b3:34:
fe:7e:30:1b:19:73:d5:f5:2d:df:2d:5f:19:e2:c6:
40:35:8d:e3:84:b8:65:f8:cf:1f:63:ab:42:63:89:
9a:fa:0d:e0:83:08:06:b4:06:ea:d7:df:c6:14:99:
e8:b9:e0:63:f6:15:ac:25:76:44:95:80:94:6d:0c:
ac:b7:ed:20:5c:91:82:27:d2:91:6b:8f:fb:da:53:
63:75:83:99:f8:fd:6e:64:17:0c:2d:57:cb:30:48:
b6:85:d8:c7:60:ee:bc:04:ce:73:d7:4b:40:4d:8e:
b8:f5:22:c0:1c:f7:3d:43:cb:29:ae:cf:c9:36:37:
cc:27:be:6d:29:16:39:2e:54:47:d0:b0:aa:e6:46:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:41:B8:D6:98:33:BC:9B:7C:C5:D4:59:43:7B:AA:CA:2B:EB:3F
X509v3 Authority Key Identifier:
keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:76:da:dd:cf:65:fa:33:40:43:8f:f9:e4:2b:eb:d7:d9:41:
2c:2f:24:60:f8:2d:db:1b:a3:43:a4:12:9d:62:32:e4:d0:66:
b9:94:86:e3:13:39:03:fa:9a:7c:87:e5:f7:d4:86:1a:15:e5:
32:b0:1c:55:e3:f7:04:b6:19:d1:8b:62:07:88:86:c3:d2:be:
36:45:26:7b:0c:88:09:e1:64:d1:d5:0d:74:c0:e6:88:82:27:
fb:f7:00:ea:7f:48:21:37:99:d7:f3:00:91:79:e9:d5:e8:b8:
d0:d7:57:94:21:78:c9:05:bd:d9:fa:12:46:37:99:bc:b6:6f:
40:7d:4a:04:5e:33:07:64:61:1e:1e:aa:ed:61:31:52:f3:1c:
c3:9f:9d:b2:cc:45:b4:fe:05:72:f9:30:78:1f:f0:dd:f1:ae:
36:a3:07:64:ad:76:3f:e9:42:91:41:00:66:99:2f:4f:a9:e5:
6b:cd:2d:ee:ce:49:9e:ae:c4:be:4a:b0:cb:8e:9e:81:32:88:
41:15:01:dc:1b:01:b4:3b:de:ab:cc:81:b4:b0:65:35:9a:1f:
b5:d9:24:5f:0c:54:37:eb:f9:a2:f9:7d:7d:0b:f6:ac:50:53:
7f:d6:ee:b9:fc:69:1a:91:1d:ed:2c:7e:04:19:86:f1:a9:d3:
81:04:7f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:47 2025 by rpki-client