Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File: YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier: iYxad4VBUUqS1OY7Ol01Gm0tWZdJvy5MZ72kTC22pgQ=
Subject key identifier: 13:BF:EC:85:6E:8C:3D:E7:94:66:21:8D:19:29:69:DA:D1:F2:6F:64
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 019A5375FBC694F1DC0AC73B04F0C12512A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number: 1450
Signing time: Wed 05 Nov 2025 10:00:32 +0000
Manifest this update: Wed 05 Nov 2025 10:00:32 +0000
Manifest next update: Thu 06 Nov 2025 10:00:32 +0000
Files and hashes: 1: 4shZBDKZZPGnSQMfuQiOImBHql8.roa (hash: Jfoq3n1s/kyNKvCWlVGyWbHUx4CSO8/9+CCCYgnc/Us=)
2: FA2h5OHRpegZzdAFMMwkYVBg-BM.roa (hash: 9GzazJbnHKp6+I1Ph8x2q38kHV8Nlnih0rihfAr5aBo=)
3: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: 7Le370EbDmjVaYU6XTWq21g+AVnHABFgXF4vuMFgvgc=)
4: ZEOW67E73LjGkhRbjT8p8HAuQ7g.roa (hash: 3byQhC85THLNsX/WfVA4T3mVllKuuMpO1Ynx6g/Ksak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:fb:c6:94:f1:dc:0a:c7:3b:04:f0:c1:25:12:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Nov 5 10:00:32 2025 GMT
Not After : Nov 6 10:00:32 2025 GMT
Subject: CN=13bfec856e8c3de79466218d192969dad1f26f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:54:a1:b3:a4:df:e1:2f:82:5c:95:a0:96:
27:b3:ff:d6:8e:75:c3:d4:0c:9f:34:96:57:1c:74:
ca:c1:e8:10:13:9a:72:f0:f0:4b:76:ca:76:cf:aa:
e6:34:c9:08:03:cb:f9:09:05:ed:8d:8a:b4:46:b7:
7b:14:a2:77:b5:c6:43:29:18:ac:45:6d:89:6e:47:
c0:a3:30:96:40:e4:cd:03:97:c5:f0:2c:4a:d4:32:
5a:ef:b2:d4:41:bc:65:6d:80:00:25:df:8e:e4:94:
b7:2d:4d:9e:3d:e2:b3:6e:d5:21:cf:d6:b6:8a:5c:
53:f3:dd:54:2b:4c:45:5e:74:38:c4:0a:1a:bb:58:
d1:44:8f:96:5c:3f:a6:23:ba:41:56:32:99:c8:32:
ee:6e:3e:d7:70:56:28:c8:c7:c3:5b:37:6e:02:6f:
62:8f:ee:ef:cc:12:f6:5e:7c:ce:b2:6b:a7:a1:a5:
db:47:a0:40:fa:01:81:0e:fd:c7:0d:a0:04:37:3f:
54:a7:dd:fc:a2:59:be:65:61:5e:3a:82:e6:c6:54:
51:23:9c:ad:f9:b4:93:be:b5:23:68:8d:54:72:55:
2d:7f:ba:dd:6a:e4:3e:cd:12:79:f4:6a:10:6e:72:
86:6b:40:09:76:9b:77:55:d7:eb:f2:7e:3e:38:96:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:EC:85:6E:8C:3D:E7:94:66:21:8D:19:29:69:DA:D1:F2:6F:64
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:04:df:5d:19:98:b7:28:02:04:65:23:ca:5b:ed:d5:7b:f1:
b0:5e:04:5b:b8:35:98:b2:7a:a2:15:78:16:90:7c:7b:40:bd:
cf:7d:89:01:d1:74:0c:73:19:81:75:d0:0c:37:22:0a:49:a2:
d4:f6:fe:72:ed:77:ec:82:38:5e:ee:d2:32:ca:2b:65:29:e7:
e8:7e:7e:30:73:b1:64:2c:fa:31:2d:08:46:05:ef:56:1c:1c:
21:52:8b:f5:f9:c3:3e:c6:d1:c9:e2:07:de:cf:5e:83:80:e2:
18:36:12:4a:82:e9:e1:bc:01:d7:86:65:db:c7:4e:72:7d:58:
bc:7d:81:87:65:a5:e5:03:df:f2:1b:c6:af:3f:bf:38:1c:63:
e6:df:9b:9d:37:3f:ab:a1:fb:f4:c7:e8:08:93:01:d6:44:d2:
ee:22:82:8b:0e:c7:1d:81:5a:73:2e:2f:5b:00:10:64:5a:aa:
be:f4:aa:82:68:73:77:e7:02:2c:88:f6:58:6e:b0:a1:bc:1d:
ae:7b:1f:b4:f5:53:66:ee:95:8d:68:89:99:25:b2:b8:39:b7:
4f:89:27:8d:63:83:68:ec:2c:95:7b:b2:62:a2:12:ba:65:a2:
1c:1a:8a:15:fa:8f:ae:cf:9e:91:e8:70:84:a3:ae:99:10:e2:
67:79:59:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:34 2025 by rpki-client