Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier: mtFEQoe9uynQiMW/dLkvnjO8jDnobIAJ6odCkxol5n0=
Subject key identifier: F9:24:A0:DE:B3:6E:F2:3F:C4:D3:74:E5:48:8B:42:71:D6:3B:49:F1
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 019A50E31364D91384AE935DC18F28E5D520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number: 0DA0
Signing time: Tue 04 Nov 2025 22:00:50 +0000
Manifest this update: Tue 04 Nov 2025 22:00:50 +0000
Manifest next update: Wed 05 Nov 2025 22:00:50 +0000
Files and hashes: 1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: Uq7/YUMJBAd2l+n8OX3FXYxEUmkjDdrrjdBPC+ftFFk=)
3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:13:64:d9:13:84:ae:93:5d:c1:8f:28:e5:d5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Nov 4 22:00:50 2025 GMT
Not After : Nov 5 22:00:50 2025 GMT
Subject: CN=f924a0deb36ef23fc4d374e5488b4271d63b49f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:98:c0:70:39:74:58:f5:41:e9:99:9e:77:
3a:c1:f0:d7:f3:de:50:2e:88:9f:bc:4a:1a:75:a4:
8a:e8:f6:ae:fd:ae:de:f5:f3:e5:23:7d:c9:65:ad:
48:aa:97:7f:d0:4a:d6:42:64:13:4f:fe:2e:71:62:
8f:93:a0:c7:c2:a7:cd:27:fb:6d:0d:37:43:f4:57:
24:26:26:0b:79:e8:1e:d1:4b:09:78:7c:9e:e4:16:
fb:dc:b4:f6:03:7c:59:f8:1a:c0:1b:f5:1a:bf:c9:
9c:5a:00:c9:90:74:f0:dd:6b:0f:65:30:8f:0c:35:
4c:70:01:61:d0:0e:a8:2a:0e:e4:36:4c:46:37:9d:
78:03:a8:c8:01:4d:86:ee:1b:32:14:fe:f7:cd:05:
b0:31:1b:b6:9b:0e:08:aa:50:41:de:93:a8:46:bb:
b9:32:47:bb:69:44:2d:76:37:2c:1a:4e:6b:35:45:
7b:fb:da:64:aa:6b:bd:49:b5:5a:df:07:78:e1:4d:
4f:07:0a:03:c4:56:8c:16:38:92:d9:c9:01:0a:89:
54:a5:3f:f3:1a:0c:7c:94:f4:50:33:3b:20:1f:e5:
5d:de:f4:01:04:d0:cb:3e:55:42:c2:f2:bf:10:c2:
ae:c7:76:17:6d:2f:e0:bc:3f:b4:2d:28:b7:f0:69:
68:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:24:A0:DE:B3:6E:F2:3F:C4:D3:74:E5:48:8B:42:71:D6:3B:49:F1
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:3a:56:1c:8b:48:17:26:b3:59:85:7d:ae:0a:32:fb:46:76:
6a:29:0e:33:4a:a8:66:77:ad:89:03:72:ea:c2:62:6d:d2:dc:
5c:58:63:cc:90:69:c9:0d:c8:5d:d8:7f:b9:68:c1:7a:8c:6d:
17:bd:79:e7:e6:b8:24:27:c3:4f:0b:5a:54:4f:15:8b:0e:72:
37:58:c3:2d:1e:e8:25:ca:3a:18:5d:1b:0b:09:a0:62:47:5f:
1a:23:9d:8d:22:02:ed:e1:4f:c9:dd:d6:1b:96:a1:7e:b6:38:
ae:6e:47:c8:9c:9e:1a:82:cd:30:9f:07:a1:69:fc:d8:7b:50:
a0:3e:b4:8f:c2:7b:97:8f:7b:df:ae:b6:dd:82:26:92:ea:3f:
e6:e9:bb:6e:f4:82:a4:1e:f9:75:8c:02:37:f6:b6:9b:78:a3:
41:bf:23:a9:14:43:19:2b:80:7e:9e:32:89:9e:45:5d:94:a6:
e7:31:ea:09:7f:54:20:fe:b8:a5:64:92:36:3e:a8:9d:8b:85:
53:fd:2d:11:15:93:60:51:98:44:7a:58:fe:14:c9:58:4f:9e:
b6:53:ce:f6:b0:91:e1:c7:08:5f:6a:d5:a3:ef:4d:da:20:47:
73:90:99:81:42:84:86:7d:9b:ac:ea:f3:be:ac:ab:80:d2:dd:
df:e4:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:59:58 2025 by rpki-client