Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
File: YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft (raw, json)
Hash identifier: y7+kLnEO8sY/OUyW67AkUJiP5+eKSKjR476lMcWpNpw=
Subject key identifier: 3A:20:C5:9E:B0:5C:F7:6F:EA:0F:1B:88:6B:A2:9D:B6:6D:E6:0E:BF
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Certificate issuer: /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial: 019A4E18B92D5B2EB6E5EE0A88511E888F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
Manifest number: 0770
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: 1DSZn5ns00u_zh3eaHcMM8S9LJ8.roa (hash: f2k2Rp4Tvmjd6WBxwwnYblRCaq4QO4K1UztQrgvzq4k=)
2: MNaMRPeSME_XYwjj2iW6Vinmifg.roa (hash: /1QrovjxUCyErSvoCQnPnqMxU5YJcSU6R6BPRoCuQcg=)
3: YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl (hash: dTyIB8zkREMji7aFlOSIcyvVeIxs51f8yQN+/AAzJzE=)
4: yIFDC3DQyKnYJrOVoxpI_9NxtQ4.roa (hash: cgrK+K+/SobWe5sM1Xw8KgFBTC6aou6l85u0UGfO0is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b9:2d:5b:2e:b6:e5:ee:0a:88:51:1e:88:8f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=3a20c59eb05cf76fea0f1b886ba29db66de60ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:07:94:9a:75:44:4d:e8:bf:9f:f1:41:33:
4c:b4:64:24:93:80:ff:b3:f4:c7:9f:9d:95:9c:40:
74:89:2f:73:21:99:2b:ec:45:f8:90:a4:a0:51:2a:
39:1f:27:a0:9e:1a:1a:11:02:b8:b8:ca:89:b1:8a:
59:95:20:45:02:a2:77:73:c4:14:f1:c4:b9:54:c6:
09:77:63:32:ba:bc:f3:23:af:f6:a1:6f:c5:3a:f1:
75:67:bb:6f:24:b5:10:30:a3:72:21:8d:3f:02:c5:
c3:29:36:38:67:40:76:1a:ba:09:8e:04:df:4d:f0:
6a:97:09:de:29:f1:0d:80:75:1d:9c:03:e0:c5:f6:
35:13:5f:98:c0:ab:68:54:74:0a:6c:30:02:f9:2c:
c2:1a:39:b1:cf:c5:09:00:c0:cf:8d:fc:82:ec:ff:
03:4e:f8:55:9f:83:b6:04:1c:21:fc:3b:22:74:c9:
4c:0c:67:5b:da:79:4f:c9:f3:5b:0f:24:ee:95:c1:
4f:55:49:64:0d:ce:f0:18:9d:f2:a0:93:d5:aa:5f:
0b:76:96:99:3e:66:2e:4c:3a:c2:ec:60:37:8c:33:
fc:13:58:6e:03:d7:41:2b:0f:03:5f:a9:47:d4:7c:
d2:e4:27:41:0e:c6:07:79:65:b0:d1:5f:c8:f8:b1:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:20:C5:9E:B0:5C:F7:6F:EA:0F:1B:88:6B:A2:9D:B6:6D:E6:0E:BF
X509v3 Authority Key Identifier:
keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9d:f4:1f:da:3c:12:73:f9:08:63:95:be:32:49:14:f1:cb:
46:20:34:5e:e7:57:13:11:56:18:01:fe:ca:d4:83:a9:a0:f1:
09:1a:76:f0:cd:39:b2:60:9c:ad:f2:3b:67:03:10:24:e4:85:
04:85:36:5b:b0:8f:56:72:2e:4f:7f:81:61:64:4b:e1:78:20:
52:cd:71:d1:52:26:9c:d8:f0:c8:54:9e:db:13:e0:68:2d:47:
66:3d:13:e6:58:6f:37:93:5d:3f:bf:d7:5d:bc:9d:f6:38:93:
6e:07:df:68:03:0e:90:28:c2:5d:90:5f:0f:23:e7:34:b4:d8:
b0:5d:29:21:db:70:22:0a:40:83:ca:38:a3:c8:96:14:26:9e:
3e:7e:5b:05:2e:cc:c2:e0:c3:2d:0f:0e:61:fb:89:04:96:9f:
65:30:a0:6f:e5:0d:bd:67:c6:47:20:31:64:3c:a5:7c:e7:2e:
b6:e4:11:29:20:f3:a5:5a:78:ed:b5:03:fc:1b:fb:0b:09:3c:
90:0b:a4:d9:f0:01:5d:df:d9:ea:3a:fd:25:40:f6:35:b9:3a:
03:03:72:05:b7:c7:ab:2f:84:1e:e7:8b:6e:54:cd:7c:30:4f:
d6:ed:59:55:ec:ba:7e:21:6a:86:09:78:a6:f9:81:85:72:1c:
fe:7d:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:46 2025 by rpki-client