Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: BNRQjWMv+P3gjDRYNJPiGrSqkprCvPLNiUIojt4SQIg=
Subject key identifier: 62:4C:59:F3:69:41:A2:15:D4:D8:AA:91:50:02:06:AB:32:26:5C:D7
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 019A5D8BF96582DD7264066959BA0CDAF050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 0636
Signing time: Fri 07 Nov 2025 09:00:45 +0000
Manifest this update: Fri 07 Nov 2025 09:00:45 +0000
Manifest next update: Sat 08 Nov 2025 09:00:45 +0000
Files and hashes: 1: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (hash: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=)
2: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (hash: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: 4wJZ3vmc2ppe3Pg7b+owOPoqo06TpiD2QAXaMyx6SKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:8b:f9:65:82:dd:72:64:06:69:59:ba:0c:da:f0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Nov 7 09:00:45 2025 GMT
Not After : Nov 8 09:00:45 2025 GMT
Subject: CN=624c59f36941a215d4d8aa91500206ab32265cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:8f:f8:7d:2b:fb:80:ff:ae:dd:10:57:d6:
f9:c5:71:47:95:ee:c7:6d:bf:95:54:04:e0:38:61:
e3:69:0a:95:bc:e9:32:b1:55:4f:95:4c:02:cb:ee:
2b:c2:c4:aa:c3:c1:a9:09:95:1d:36:d3:c9:3e:9b:
1a:29:95:44:67:6c:85:28:53:d2:c1:46:70:20:78:
20:06:ba:65:56:ba:8b:fe:2f:f1:21:7f:9d:95:e9:
e4:22:85:18:40:c6:0f:11:16:58:dc:82:aa:6c:b1:
b5:3b:f4:35:39:51:32:2b:a5:5a:40:e7:2e:04:f8:
90:d0:17:5b:90:c2:06:ff:1d:4d:4a:58:0f:71:5d:
c4:09:ea:59:76:b3:74:d8:b6:a0:72:02:8e:1c:e8:
de:63:e6:2c:91:b0:3a:d0:59:20:5a:7b:eb:7e:78:
c7:1d:d7:2f:60:da:38:bc:47:ba:01:47:0c:11:05:
1e:24:32:17:4d:26:70:9d:96:c5:ad:ce:46:55:bf:
03:8e:83:30:6c:68:0b:f8:a9:0f:58:01:b8:08:dc:
59:c8:75:7c:32:59:a5:62:7e:4a:78:86:a9:ae:13:
c1:05:e6:88:58:b3:cc:e9:70:67:f4:ad:f4:7f:6b:
27:31:60:8d:d3:ca:ab:d8:53:81:1f:af:b5:62:ef:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4C:59:F3:69:41:A2:15:D4:D8:AA:91:50:02:06:AB:32:26:5C:D7
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6a:d7:a4:a7:fb:33:c2:c8:21:96:2b:6a:fd:68:a0:1b:80:
c5:08:5a:ea:7b:7f:de:4c:95:81:0c:9c:93:52:f6:76:fa:94:
4c:3d:b0:85:3f:0e:92:13:df:93:98:d0:7b:02:53:65:a3:2a:
3b:e6:d7:1e:87:6d:e5:35:9f:02:72:33:d1:ff:3b:cf:14:d6:
e4:ed:cc:a2:54:ba:be:29:b7:8a:2e:37:ab:fb:54:b3:b3:40:
d0:d7:46:f6:ac:82:d2:5c:39:f3:3a:24:14:df:21:4b:f7:6f:
5a:8f:ba:13:70:b5:59:3e:41:a8:af:cc:36:77:e3:bc:bd:6c:
41:3d:04:61:cc:28:a8:47:ec:63:4d:2d:80:f9:72:e8:8a:25:
61:3b:e1:03:71:ad:cb:91:35:42:79:47:36:b7:c5:f2:77:2e:
e7:89:fe:32:05:94:94:98:c6:72:6d:06:ea:c6:ab:70:de:6f:
2f:6a:3f:dc:8a:f1:0a:fd:19:ec:8f:75:e7:ba:75:a8:ff:93:
69:fe:80:3f:35:23:65:e7:10:70:86:c3:cb:3f:db:ae:69:1b:
16:40:5f:f0:c1:05:00:72:11:e7:da:a5:88:07:0e:cd:13:5d:
af:50:15:25:d8:16:1c:fa:06:c7:a2:f0:e3:4b:80:31:60:2d:
a3:4c:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:23:18 2025 by rpki-client