Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
File: Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json)
Hash identifier: kB/Yiwh6/ECrqg5ED1JwAlBWUu35PX4hWt3549033hQ=
Subject key identifier: AF:66:71:A9:15:9D:13:C9:6D:FF:8E:CE:FE:8C:68:D5:87:64:9B:35
Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Certificate issuer: /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Certificate serial: 019A4FD018998A0388FB688D0BBC67B1756E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
Manifest number: 0FD1
Signing time: Tue 04 Nov 2025 17:00:29 +0000
Manifest this update: Tue 04 Nov 2025 17:00:29 +0000
Manifest next update: Wed 05 Nov 2025 17:00:29 +0000
Files and hashes: 1: LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa (hash: MZ/fbmAB50oT4J+U1xzh08P+Raln/5z9YHMJGvIm1Zg=)
2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: ulGXPGZRH3M/PGbAlu+WiMdCyrkTYiUw7RJtFRX3kzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:18:99:8a:03:88:fb:68:8d:0b:bc:67:b1:75:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Validity
Not Before: Nov 4 17:00:29 2025 GMT
Not After : Nov 5 17:00:29 2025 GMT
Subject: CN=af6671a9159d13c96dff8ecefe8c68d587649b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:19:e5:51:b1:c4:9f:09:a6:98:63:cc:9e:
82:57:59:6c:76:21:5d:1b:b2:26:5b:4f:07:7b:db:
23:7d:7e:aa:8e:54:70:ed:38:e9:7a:91:a4:ab:f3:
a2:76:8d:1b:77:13:9a:ec:f1:36:89:6a:b7:25:4e:
14:4b:87:eb:2f:37:cc:23:7d:23:67:fb:29:8b:4e:
d2:3c:b4:44:6f:ff:13:0d:2c:4a:41:b5:e0:61:3b:
11:19:ec:8b:c3:6b:5c:13:27:ec:38:60:4d:8e:9c:
18:3a:80:36:55:af:9e:b7:c6:f6:30:ff:2b:ed:3b:
a9:75:94:6a:40:04:b8:d7:80:0f:20:20:51:66:c3:
6a:79:9b:cd:11:db:04:05:44:7d:e0:77:74:2f:70:
07:53:ea:09:0c:68:ba:ce:9f:aa:f0:7b:42:0e:b3:
9d:e2:00:83:13:79:d9:a7:5a:b3:d2:38:fc:79:1d:
77:c3:19:c6:4b:0f:04:24:80:92:62:74:cb:fa:81:
b8:4a:b3:f9:61:c8:0f:bb:2c:e4:48:c6:60:79:3c:
a3:72:83:af:f5:06:92:85:07:af:2a:30:fd:75:c0:
e8:26:ff:bb:d0:de:95:14:11:ab:71:2d:99:46:46:
80:9a:a7:79:9d:1d:89:a7:f4:4c:01:4b:68:cf:a5:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:71:A9:15:9D:13:C9:6D:FF:8E:CE:FE:8C:68:D5:87:64:9B:35
X509v3 Authority Key Identifier:
keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e2:98:0a:40:75:bd:02:0d:f8:7e:b6:c3:9c:38:5a:9d:35:
f0:b7:ee:3f:06:69:c8:da:0c:b1:d0:c0:41:bb:b9:74:d4:d7:
fc:76:69:69:21:f7:25:e8:0e:58:26:9f:65:1f:cc:ad:c8:0c:
73:55:2d:c6:d7:f5:0d:20:d3:fa:2c:37:71:8f:60:a9:12:ac:
89:82:ea:28:a1:e8:59:87:86:79:ab:b1:aa:d7:4e:4d:9d:28:
fd:4f:cf:cd:3f:19:ee:57:a3:7e:0d:13:40:bc:d1:8d:dc:df:
c9:ce:d7:74:96:e6:c2:62:d6:85:bb:7e:f7:12:4d:57:5e:b6:
48:26:e8:30:59:75:25:c8:26:fd:56:aa:9d:19:53:7f:86:31:
eb:e6:d9:37:9a:29:4c:89:40:07:07:72:18:5a:26:76:db:40:
fe:a9:25:46:b1:b0:bb:cf:47:a0:e3:97:5d:4e:ec:bd:9b:f9:
46:b0:0f:35:f0:71:45:7e:6b:4d:e0:87:6d:c8:a1:af:0a:14:
f1:72:38:01:4b:5c:15:25:a4:97:84:ea:32:cf:4f:57:68:d8:
9a:62:51:d3:b3:8f:be:ff:7d:94:86:88:00:b8:98:f7:78:1c:
6e:85:f3:8c:b0:2b:53:c4:75:da:6b:95:26:26:74:df:f1:68:
96:2a:12:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:23 2025 by rpki-client