Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier: uXX0a2E5uL+JRqTqF5B0Dt70rewaGjYQfS9tYeIhe54=
Subject key identifier: 19:D7:9D:E2:41:9E:D4:E4:E2:6E:0A:7B:AD:D0:8F:7A:3B:2C:BB:7D
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 019A4E86BE11CD27A0BB71287555F52A2E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number: 086A
Signing time: Tue 04 Nov 2025 11:00:44 +0000
Manifest this update: Tue 04 Nov 2025 11:00:44 +0000
Manifest next update: Wed 05 Nov 2025 11:00:44 +0000
Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: hnhbuPfpYPVvv32dz/rD11xKDbjOO9sHgvfr8jvHcCQ=)
3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:be:11:cd:27:a0:bb:71:28:75:55:f5:2a:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Nov 4 11:00:44 2025 GMT
Not After : Nov 5 11:00:44 2025 GMT
Subject: CN=19d79de2419ed4e4e26e0a7badd08f7a3b2cbb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:98:e4:a4:90:c3:5a:a7:ad:6c:54:c4:33:
cc:ac:42:f2:ba:68:4a:5d:aa:87:94:f2:7b:a5:b7:
d6:cc:02:2b:cc:87:04:2c:15:bb:df:c8:ad:fc:75:
d9:24:4f:09:6b:dd:d6:ce:ad:a5:e3:dd:54:11:20:
97:62:57:b7:97:3a:af:9a:22:d2:38:26:a6:46:19:
9b:18:5f:96:9a:9d:5b:c2:37:fa:db:50:9f:64:ee:
e0:58:18:e1:90:18:65:cb:7e:da:f1:79:95:78:78:
b9:94:47:53:51:21:47:19:ec:3a:f6:46:03:a1:1d:
47:bf:59:85:21:c0:f3:a7:3b:bc:e5:8f:6e:c6:94:
66:39:39:9c:da:f8:b7:ec:49:33:9f:65:4d:2d:16:
cc:fd:93:15:96:cc:5c:2c:dc:9b:72:51:b7:c5:29:
ef:7d:3d:14:85:e1:f8:ab:92:5f:81:9f:f7:df:07:
b5:f9:87:a0:3b:a7:33:4c:92:61:70:27:34:97:f9:
68:bb:31:62:7e:1e:40:6c:10:97:1e:7d:da:4a:15:
07:1c:dc:9c:9a:11:41:3b:c6:7a:25:b3:96:71:ef:
8e:cb:53:5a:22:fd:a8:33:7c:fb:02:c7:aa:5d:04:
f4:f3:85:cf:99:b3:47:30:51:fe:06:45:6f:dd:8e:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D7:9D:E2:41:9E:D4:E4:E2:6E:0A:7B:AD:D0:8F:7A:3B:2C:BB:7D
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a1:63:5f:bd:a7:59:a1:60:c4:3f:34:a9:3a:70:13:49:f5:
9d:9c:38:fd:b5:9a:09:70:da:d4:43:8e:e2:53:22:dc:5f:d7:
9d:68:8c:d6:e6:77:b3:c8:a7:71:b1:5f:f5:a1:da:a6:f4:73:
90:11:c9:8a:b5:b9:94:32:09:d9:9e:29:0d:b8:1b:ec:3e:d4:
4d:eb:4d:90:e2:45:78:0a:7c:b9:fb:fe:23:52:ec:9c:50:9b:
67:df:84:ca:5b:f9:5a:1d:79:cd:a4:d6:17:a6:55:26:79:6f:
f1:f1:eb:fe:98:a3:37:4d:04:c7:e8:dc:7a:19:8e:c4:07:57:
95:4c:9a:49:7a:5e:68:64:84:4d:e8:a2:94:82:fe:37:06:6b:
c8:67:ef:0b:95:7f:19:03:06:5d:d1:aa:1d:f0:de:02:16:70:
31:78:52:96:70:a2:6d:a3:70:a5:72:2f:83:3e:ff:79:48:f9:
c5:ea:e0:3e:16:ef:73:7f:fa:a7:c4:f2:0c:95:c8:dd:de:3f:
11:4a:dc:af:e4:28:7e:6e:4f:16:8f:2b:94:ce:f9:8b:b7:ac:
c3:de:75:97:a6:fe:b1:74:5a:08:f7:11:bd:00:8c:fb:8f:c7:
a5:25:10:57:25:61:f1:5b:5f:e5:7e:dc:fe:c7:24:82:74:97:
da:d0:48:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:27:56 2025 by rpki-client