Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
File: YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json)
Hash identifier: 5enCPEgiKYBr1CSB3Nz2jMb4v2LGhjogKCPyqYvyxEA=
Subject key identifier: 6D:2D:1C:14:45:34:92:82:5F:30:23:71:E7:BB:F2:11:75:3B:4B:23
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Certificate issuer: /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial: 019A5307DAF90313FEB76E33B3A3642985E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
Manifest number: 01F4
Signing time: Wed 05 Nov 2025 08:00:15 +0000
Manifest this update: Wed 05 Nov 2025 08:00:15 +0000
Manifest next update: Thu 06 Nov 2025 08:00:15 +0000
Files and hashes: 1: WJ8mDGp2R9SerzYw88vehn3HSik.roa (hash: h5SXKLsi4QXI6eIjbslnIuS0eoxKGY5pZRrkhG82mKM=)
2: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: 7XBw5V89BmcDupq0UVg1YFnoxeIQcRJemrDVosXbNfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:da:f9:03:13:fe:b7:6e:33:b3:a3:64:29:85:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Validity
Not Before: Nov 5 08:00:15 2025 GMT
Not After : Nov 6 08:00:15 2025 GMT
Subject: CN=6d2d1c14453492825f302371e7bbf211753b4b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:c4:55:d1:04:d5:d6:3a:16:72:f6:13:20:
97:de:6f:4f:a4:d9:17:a9:3f:dc:c8:df:27:29:ea:
58:79:c3:18:d4:87:99:f1:75:8e:79:73:96:7f:5f:
a8:e2:7d:3c:b9:52:b3:19:f9:a3:b7:6d:fb:57:64:
8b:f8:02:f5:91:17:24:c0:fd:4c:54:4e:71:28:5b:
ca:34:d8:17:71:66:a5:96:58:95:0d:72:aa:e9:5c:
1e:e7:79:7b:ec:9e:c3:16:43:a3:41:de:e4:e4:65:
bc:1b:7f:5b:6b:df:e6:9c:ad:6a:28:62:f8:bb:be:
1f:b2:8e:ee:4c:d3:9a:2f:a4:56:2c:48:65:f5:e0:
04:de:3c:cd:ec:8d:ad:53:56:69:53:7b:fe:ce:8b:
68:fb:d3:5f:49:d0:4d:d2:03:89:ef:eb:17:d2:70:
a6:5b:d1:29:7e:3c:bd:cd:a7:85:cb:db:f4:91:ed:
af:21:8d:db:4d:3a:b3:f1:69:d3:39:ff:0d:5c:af:
ac:6b:e4:b1:58:31:ad:14:7a:5f:3b:bc:33:e3:72:
86:69:73:73:90:08:d8:4e:97:2e:d4:f8:07:67:a8:
63:5f:1b:06:95:37:0e:80:2e:d1:0a:24:dd:bd:5a:
3f:9c:71:4d:9a:7f:56:96:3c:8f:78:24:11:15:6a:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2D:1C:14:45:34:92:82:5F:30:23:71:E7:BB:F2:11:75:3B:4B:23
X509v3 Authority Key Identifier:
keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1e:41:e5:3d:68:a2:fa:95:28:d8:96:8c:62:22:5e:a3:fd:
57:5c:84:b4:63:d7:14:76:e6:50:36:cf:b2:57:da:33:05:ec:
1d:fb:c4:d5:b4:a1:8e:be:b7:04:64:84:05:b2:11:e4:65:9f:
32:63:94:f8:45:b1:06:aa:ca:11:54:88:13:49:ba:f2:96:9b:
51:07:db:eb:d7:6a:86:1d:aa:2d:63:46:c3:0d:e1:11:3b:9e:
de:62:ea:c8:03:89:67:df:6d:a9:7a:00:ed:15:d2:2f:94:cf:
35:a7:cb:69:4a:4c:91:51:82:71:7d:98:66:a3:a4:b0:9e:22:
0b:8f:3c:d5:97:47:4a:ed:f4:8f:c6:fc:26:72:c1:26:5b:26:
f0:60:ec:d2:4f:11:2a:d0:54:8f:41:08:03:81:ac:7a:85:b3:
fa:20:03:18:f2:a2:25:cb:96:0a:ad:44:69:9a:5c:54:7f:62:
16:fe:66:ce:0e:80:08:d9:c3:15:69:73:7a:55:26:92:c8:8f:
e5:32:7b:06:6b:7a:1d:b2:26:c9:a9:e5:b0:e1:ea:98:63:b4:
51:1b:24:7a:c7:a0:76:a3:cc:97:0e:a6:0a:a5:da:83:48:ff:
de:85:b8:7c:58:dd:96:75:e5:bc:09:52:ce:5e:09:d1:06:98:
84:ff:8b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:37:24 2025 by rpki-client