Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File: ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier: O2s+bU52UgbMvCsVwk/+wknWqY8zfVrcjzADiQDKb8c=
Subject key identifier: F7:BA:46:93:1F:F3:49:15:0F:6A:F8:86:2A:7D:CC:39:3C:E4:4D:2E
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial: 019A4F6241013965A6DFE5ACEF4B3A5CFEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number: 06F6
Signing time: Tue 04 Nov 2025 15:00:30 +0000
Manifest this update: Tue 04 Nov 2025 15:00:30 +0000
Manifest next update: Wed 05 Nov 2025 15:00:30 +0000
Files and hashes: 1: ArFunhGUh4z5gE5BaMxIilumjuo.roa (hash: +Y+pIXJkKqGVxuRKoBP5VqtBPTsF8z5U0O22HLQqFaA=)
2: byUVA5qV1IbcwSPIkfdvjR5Q_jI.roa (hash: dK4W//mWQId08viaOEDpjWgfsu+tE5gfBKP2LChtCus=)
3: tLmXVGY6n6fVRzQmW79aMR0MJps.roa (hash: TSYx/9L1XrTJwYjdabKmZhceP9EJlWD0fOeM06mdy/g=)
4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: JoXwJFkQya9RPv4xQyL3Mz/VI42Tv73mirfP3PCLdhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:41:01:39:65:a6:df:e5:ac:ef:4b:3a:5c:fe:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Validity
Not Before: Nov 4 15:00:30 2025 GMT
Not After : Nov 5 15:00:30 2025 GMT
Subject: CN=f7ba46931ff349150f6af8862a7dcc393ce44d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:a4:57:7d:68:a8:6e:d2:4b:62:5a:3c:38:
04:6a:8d:4f:5c:1e:41:e3:fd:7a:23:db:20:90:04:
ea:9b:6a:f3:b3:85:a3:bd:d5:de:37:1b:d4:16:a8:
3e:39:c0:fd:de:46:69:47:fd:33:39:45:8d:b7:b5:
9b:88:32:f4:e0:dc:92:a8:94:da:0f:fa:95:3d:34:
ea:25:71:25:7a:12:d2:de:38:53:a0:71:ab:77:9a:
e8:75:b2:c7:42:fb:68:a9:14:31:a3:6a:0f:72:33:
ec:e0:fe:07:1b:32:4b:11:60:1f:0c:0d:23:d0:f1:
e6:a4:48:bc:08:be:c0:6f:e8:31:a5:0d:cd:ec:a3:
74:45:eb:55:14:ea:f3:e9:b5:36:39:6c:ed:36:e8:
67:0b:88:f5:62:0f:a3:07:25:a1:02:41:b2:87:f3:
20:8e:17:b6:29:10:67:04:be:64:f2:85:66:74:04:
b5:e1:13:58:3b:e5:db:f6:1c:1e:e5:b6:dd:b0:02:
1a:e3:42:48:53:09:84:75:79:1e:1c:28:2e:09:57:
f3:63:a7:7a:d0:37:3d:58:83:0d:9f:70:60:58:81:
83:9b:83:6f:a2:db:f3:1f:d0:02:fd:b4:bc:b3:5f:
53:3d:fb:9e:18:0e:8c:04:4d:79:43:6c:7f:5d:b1:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BA:46:93:1F:F3:49:15:0F:6A:F8:86:2A:7D:CC:39:3C:E4:4D:2E
X509v3 Authority Key Identifier:
keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5c:37:04:4b:c8:77:45:29:43:52:16:15:eb:f4:51:82:bd:
e6:ef:fc:82:28:8a:7d:51:d4:b5:40:f9:a7:b9:b3:cc:26:8d:
f8:f6:1a:c8:3c:88:a5:9a:84:cd:44:5b:0a:a6:1a:bc:39:4d:
62:46:4b:f0:78:02:7e:81:93:3d:4e:63:0f:8b:12:fe:cb:42:
40:01:8b:79:81:cd:7c:cc:7f:c4:ec:a2:54:ca:67:d9:27:5e:
df:85:74:c6:8f:6c:7e:85:e8:7f:36:7b:2d:23:cf:f7:5f:75:
9a:55:0b:79:14:bc:75:07:b3:93:0f:cc:26:ec:e3:9f:e2:c8:
4b:12:0e:e7:38:11:14:f0:87:ba:64:13:2a:4e:c0:db:37:41:
29:d0:b1:7b:20:b0:5d:79:d7:ee:30:af:79:df:66:ae:94:36:
bc:aa:0f:82:f1:5e:2e:b7:65:a1:1b:45:44:e1:ac:50:3b:1e:
40:d0:54:54:5f:13:59:2b:f8:95:08:25:8b:59:94:d6:34:1e:
43:ad:60:d3:3a:29:ae:2a:6e:0c:0b:99:08:b4:ed:7e:a1:29:
c2:66:9f:a8:0a:18:c5:81:ad:65:86:22:7c:50:6e:da:4c:77:
bc:6f:b6:97:15:71:26:96:ba:e6:9f:77:f6:40:3b:93:eb:ec:
6c:ad:8c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:14 2025 by rpki-client