Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: uIo2S6ErRJ9uNc2KToGDI4mkhGlTkuai/7gx6orHk/8=
Subject key identifier: 32:11:97:95:06:26:22:E6:D1:85:64:F6:3D:B7:5A:09:CA:F6:36:FF
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 019A4E866E1C999D82F1F7972B4D5F7FDB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 1033
Signing time: Tue 04 Nov 2025 11:00:24 +0000
Manifest this update: Tue 04 Nov 2025 11:00:24 +0000
Manifest next update: Wed 05 Nov 2025 11:00:24 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: 3FZxyPIvPo+u/vpUnioH5P70l1e/EBDMNiem+swU0z4=)
2: gqHU5wrARNT7BxKe3BSk4XNORdM.roa (hash: uD22dYfbtURUQN6zPqLnmvBkI8fmrnMLZJG7fTTS2Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6e:1c:99:9d:82:f1:f7:97:2b:4d:5f:7f:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Nov 4 11:00:24 2025 GMT
Not After : Nov 5 11:00:24 2025 GMT
Subject: CN=32119795062622e6d18564f63db75a09caf636ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:86:d0:a9:71:dc:9d:9f:b6:ed:41:46:ee:
08:04:1d:d3:2d:06:45:18:e6:f9:9e:86:da:93:1c:
16:83:6b:18:17:2e:e9:3f:90:32:94:41:0e:ac:28:
d1:f0:ad:9d:36:e1:cb:f3:51:8b:57:5d:87:d6:58:
fb:5f:00:e5:f6:d2:10:23:99:9a:50:03:02:2e:7d:
f5:68:09:38:ff:aa:db:58:64:63:25:58:7e:02:35:
4a:a3:bf:6d:5b:18:51:d7:e2:35:8c:fc:50:63:cf:
95:c8:74:6a:df:30:d6:8f:8e:51:6b:0e:71:12:3c:
90:35:91:71:b9:e5:ec:39:02:9b:95:88:07:c5:d2:
b1:5f:59:08:f8:ad:77:e7:0d:40:24:2e:11:15:9e:
f2:8b:77:db:ae:7d:87:00:ef:6f:7c:6b:44:ba:71:
4b:da:36:39:27:7b:c3:4e:97:0a:9d:9b:e7:dd:91:
45:76:79:95:26:19:48:92:5a:ad:3f:e4:b4:87:67:
71:fb:0f:5e:01:62:5f:53:b2:5a:1a:23:a1:bd:09:
81:f9:81:05:a5:cc:f6:53:96:d0:f6:59:00:c7:03:
67:ba:92:69:39:fe:45:78:df:12:1e:f6:06:fc:f0:
4f:94:03:03:ba:80:97:c4:fe:19:d6:2b:e8:53:f6:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:11:97:95:06:26:22:E6:D1:85:64:F6:3D:B7:5A:09:CA:F6:36:FF
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1b:9b:18:24:4c:fb:1a:e0:19:18:b9:29:9b:53:ca:f4:6a:
f9:81:9e:43:f0:65:49:d0:8c:e1:56:a3:52:8a:88:2d:0f:23:
12:32:e9:75:21:6f:78:9f:6a:ca:f6:b8:5a:0d:05:62:8d:ac:
80:c4:98:68:bc:27:ef:d3:79:17:fd:07:2b:91:ee:99:f3:cf:
2b:cb:09:09:82:01:e4:90:e8:c9:8d:c8:8a:1a:af:58:34:e2:
f1:04:76:c8:86:8b:f3:53:9e:8b:12:66:e2:2e:06:49:a7:8b:
57:58:51:5d:ad:c7:ee:f2:30:9f:a0:06:98:a5:d7:f7:50:b0:
03:a8:06:b3:c6:58:27:0a:e7:d7:9c:11:e5:37:da:ca:97:3f:
1a:3d:7b:4e:f1:4b:f9:2b:2e:7e:af:0d:9b:59:92:08:58:61:
15:0b:39:9e:33:6c:8d:15:d7:f3:1d:e2:21:12:be:33:38:10:
3a:39:59:73:fc:ac:ec:32:3a:83:d9:d2:fd:77:9b:62:cd:cb:
0d:e5:9f:2b:e4:64:7f:45:1a:11:9b:b9:ee:47:46:fc:54:37:
b9:dd:a1:2c:1c:71:0a:ce:e0:64:ea:46:92:b8:7e:ce:a6:57:
c6:11:c2:13:82:48:84:73:cf:7c:12:89:fd:85:b9:5b:eb:1a:
68:75:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:49 2025 by rpki-client