Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: WHVFQrEIcz5yypHaSy4QooW6U+xqWXoQzGAT3BBx/MQ=
Subject key identifier: 02:EA:F2:3D:0E:40:F8:B6:10:F6:79:7F:AD:39:BA:EF:D6:3E:32:6D
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 019A54C02ECDEAB201776049EEA504E54684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0B9B
Signing time: Wed 05 Nov 2025 16:01:12 +0000
Manifest this update: Wed 05 Nov 2025 16:01:12 +0000
Manifest next update: Thu 06 Nov 2025 16:01:12 +0000
Files and hashes: 1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=)
2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: ZFUNBC7EDEY7yM7bt1ibEQ0AtZgp7VVDcqQZ342LCdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:2e:cd:ea:b2:01:77:60:49:ee:a5:04:e5:46:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Nov 5 16:01:12 2025 GMT
Not After : Nov 6 16:01:12 2025 GMT
Subject: CN=02eaf23d0e40f8b610f6797fad39baefd63e326d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:af:57:ae:50:b6:84:4e:06:b1:80:39:28:
9c:87:a3:56:b6:8a:d7:fa:7b:78:08:4c:e9:08:ab:
d0:00:e8:ae:9e:a7:6e:ea:a7:64:40:5c:12:cc:f0:
40:9c:e0:c8:1f:82:e0:c2:8a:0c:48:e4:3b:46:c5:
46:f2:ad:4a:76:4d:63:b5:bb:0f:85:75:5b:39:e3:
43:e3:8a:92:b6:22:03:5c:73:c0:ac:5f:2f:3b:85:
b2:ea:f2:42:40:4b:da:70:aa:6c:66:24:af:6e:bd:
9d:61:9d:61:64:db:21:5c:5b:38:c5:87:06:a6:9b:
88:70:b5:3a:6d:db:ed:64:2a:df:11:70:1e:10:50:
61:50:d8:f5:af:c6:d4:49:34:ea:17:d1:f2:f1:9d:
4d:fb:a1:9c:0b:25:1e:dd:52:5f:96:47:a4:c9:10:
a9:b6:ce:16:6c:ee:ef:e5:27:87:d8:b2:17:f6:26:
81:5c:29:da:7a:43:37:f3:15:b0:88:b6:a4:28:1f:
04:9f:9d:09:4c:80:0b:1a:88:c7:c2:e1:1a:79:a8:
c1:f4:47:55:b7:77:c2:22:13:14:5d:79:19:c0:12:
47:10:ee:54:f0:b4:4e:c4:77:31:51:af:6c:46:62:
7e:2d:82:54:4b:44:82:a7:f7:13:94:57:8d:d8:5e:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EA:F2:3D:0E:40:F8:B6:10:F6:79:7F:AD:39:BA:EF:D6:3E:32:6D
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:17:f6:20:ca:9d:af:49:48:49:34:80:26:74:a9:5f:44:03:
07:09:8d:e7:dd:36:fe:b9:6a:45:f5:63:4b:1b:31:df:b3:7a:
9d:8b:74:10:56:7e:5e:57:af:5d:4a:28:99:0b:32:c2:95:cc:
a7:b1:ce:95:21:d8:82:78:83:1c:0d:f2:87:17:2f:5b:49:8f:
30:0e:2b:36:23:a6:e9:21:56:b0:fb:f4:20:25:01:af:7f:10:
0d:84:df:45:67:5d:a0:28:87:97:5f:34:15:24:ed:7d:a4:7b:
18:39:1f:51:81:cb:b5:06:6a:4a:24:4e:75:fc:f3:44:ee:7e:
cd:d0:23:cd:bd:6c:0a:e6:65:49:7f:b5:52:ab:8f:36:5a:a0:
96:ec:a9:0e:b1:e6:89:54:a9:cb:4f:bf:91:04:02:a7:ec:69:
52:73:d1:8e:c1:94:da:c2:2d:2e:9b:01:73:73:c3:63:8c:64:
fa:09:40:66:83:e9:75:96:7c:c1:e2:82:6c:47:6c:8d:7b:74:
4e:40:58:a3:8f:e6:54:65:35:96:68:38:69:22:a5:16:d5:66:
9e:2f:8b:a3:8d:81:30:c4:6f:19:6b:d4:a5:3a:bc:29:ec:31:
46:ca:6d:3b:c0:27:f2:0a:ad:07:3d:2c:85:5e:01:87:d2:b1:
6b:aa:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:20:43 2025 by rpki-client