Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: mDOABrG7bVBtCKMQpoal2Vi6Fsj30GOdYnTUh5Jkg0Y=
Subject key identifier: 87:C6:6F:8F:60:18:BC:DB:25:60:E6:42:B2:EE:FF:D7:D1:8D:10:27
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019A4F62A5F2503D5B9CF06D33C58F715B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 15D6
Signing time: Tue 04 Nov 2025 15:00:56 +0000
Manifest this update: Tue 04 Nov 2025 15:00:56 +0000
Manifest next update: Wed 05 Nov 2025 15:00:56 +0000
Files and hashes: 1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=)
2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=)
3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: MSTw6Zo5priR1ZNq8V1TOHQ9DUBhQ8B/ZolJIlsQBwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a5:f2:50:3d:5b:9c:f0:6d:33:c5:8f:71:5b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Nov 4 15:00:56 2025 GMT
Not After : Nov 5 15:00:56 2025 GMT
Subject: CN=87c66f8f6018bcdb2560e642b2eeffd7d18d1027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:d4:5d:dd:7f:c9:8c:e8:da:50:4a:0c:3a:
6b:61:f9:65:0d:bb:b2:13:93:a8:4a:fc:cb:8e:65:
71:bf:b1:6e:79:e4:45:bf:af:8c:af:9f:3f:bd:25:
a3:e1:9d:48:89:9a:06:03:56:5e:5b:2e:32:c6:ca:
f6:7a:09:6c:3e:fc:12:04:7e:5e:2a:eb:b8:f6:dd:
0b:fa:23:37:31:ea:8d:ab:8a:56:87:70:76:16:e6:
be:0e:1b:70:ea:9e:91:6c:ab:bf:94:e9:be:27:ff:
53:12:fb:5b:d4:e4:f2:ef:47:f6:cf:8e:72:12:51:
a5:ba:18:41:43:9e:7b:83:35:64:b4:31:a4:4f:03:
8f:bf:20:0b:33:06:00:15:82:10:0b:70:f1:74:5d:
4a:9a:0f:6d:00:78:45:bd:26:8a:b2:8b:d3:84:d0:
34:43:5c:f0:d7:c5:c0:e7:8c:2e:f6:ea:38:cd:18:
03:2f:98:bb:3b:eb:97:a9:72:38:46:60:2a:8c:ae:
64:88:93:78:a0:91:e4:42:a3:8b:c5:be:29:2d:64:
f1:93:95:67:75:79:ce:74:a3:92:79:cf:d1:d5:3a:
57:f5:5e:f5:e8:69:5c:75:8c:a4:0b:b2:f4:2a:85:
20:69:39:60:f2:38:59:d8:3a:3a:86:90:b2:1f:30:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C6:6F:8F:60:18:BC:DB:25:60:E6:42:B2:EE:FF:D7:D1:8D:10:27
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8c:08:5f:c5:a9:0a:9b:21:d7:b5:fe:24:df:9d:b3:8d:89:
3a:57:db:cd:9b:d7:a3:d8:78:68:79:e4:dc:84:77:86:94:5e:
2b:61:4a:e5:d2:86:70:d1:f7:38:e8:50:66:0c:99:f1:fc:14:
0a:53:31:62:78:80:8e:8c:ff:81:b4:e3:78:5d:ca:fd:6d:3c:
c3:9e:df:17:8c:c3:6f:a8:a8:33:b5:75:2f:58:74:3a:9d:b0:
bb:cc:d9:c5:e7:f1:3f:d3:52:09:6f:b9:2c:18:6d:79:8b:73:
7b:d8:27:c4:9d:a5:08:40:2f:96:e3:59:5c:43:75:1d:fb:41:
9c:00:c4:5f:36:39:af:ff:27:5d:56:55:e7:7e:e7:16:87:f6:
43:92:5c:1e:37:90:6a:95:10:71:f9:31:4a:ba:fb:49:6e:b0:
d3:a2:79:a6:3b:21:60:60:16:02:73:42:7f:0e:bc:4e:aa:d7:
0e:44:24:ab:77:66:40:a8:1d:bd:6b:2c:ed:70:e5:26:dc:65:
89:f4:77:c6:29:f0:12:69:c3:02:b9:f0:61:8a:6a:a3:d1:ac:
9e:e4:7d:25:81:ef:05:c0:53:21:91:7c:83:49:b6:f6:8c:99:
19:05:a4:b8:34:fd:64:a7:d3:64:c2:9a:d6:18:ac:38:9c:60:
f1:37:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:03:52 2025 by rpki-client