Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json)
Hash identifier: 9njnOWEEzglLefguJ+PrDKqN8C52RtEEGh8hqCSa1jI=
Subject key identifier: 0D:F8:35:1B:21:71:E4:EC:81:10:61:B2:CA:EA:27:F3:4D:D9:B6:5B
Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Certificate serial: 019A4E86C1A326298F02A8C0B0B8723CBEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
Manifest number: 0E9C
Signing time: Tue 04 Nov 2025 11:00:45 +0000
Manifest this update: Tue 04 Nov 2025 11:00:45 +0000
Manifest next update: Wed 05 Nov 2025 11:00:45 +0000
Files and hashes: 1: XsLpmpu2xvBP4JjcplMw-4A56mY.roa (hash: zDQ4NxbIV24C02r59jK+8GO4r9TIoUq4yC6lv1rRxf0=)
2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: rf5plkIy7EBiPEN+kyF8Lz0RDFXiTe+5HIdaLe0mjE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c1:a3:26:29:8f:02:a8:c0:b0:b8:72:3c:be:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0
Validity
Not Before: Nov 4 11:00:45 2025 GMT
Not After : Nov 5 11:00:45 2025 GMT
Subject: CN=0df8351b2171e4ec811061b2caea27f34dd9b65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:3f:15:0a:cb:68:13:ec:07:3d:e9:7a:a8:
4b:1b:ba:c4:47:1a:ef:3c:95:bd:d9:2d:3a:2c:c2:
28:62:8b:8c:08:01:65:78:58:78:15:05:d2:90:7a:
67:a0:52:84:b3:68:26:92:21:0f:ae:01:59:30:2e:
00:2e:a7:9b:6b:ff:e3:1c:85:92:e0:37:a5:8d:00:
31:0f:dc:42:58:56:fa:b7:99:af:63:14:1e:92:fe:
4d:69:86:b8:9e:47:e4:21:00:3a:f0:a0:a2:0d:21:
16:73:d5:aa:9b:cc:1d:24:79:1c:1d:f1:dd:a1:d2:
8a:5c:9d:81:12:4c:d9:3a:31:ae:84:2a:c3:46:22:
af:8b:cf:6e:84:3a:15:10:a0:ce:ed:03:91:46:7f:
5c:24:df:8e:a0:b1:a1:3b:52:7e:72:75:15:99:e2:
4c:3e:a5:f1:3b:22:a6:da:20:90:c2:c1:3a:08:58:
7a:d4:2b:b0:ae:a2:bc:f0:94:05:53:17:ca:5c:e9:
32:b0:35:d3:a3:45:4c:fb:1b:2d:d5:c7:e7:c1:82:
2f:3c:ba:94:d0:df:75:a1:c5:6d:eb:80:3b:fc:ca:
59:2a:54:71:89:01:94:e8:8b:96:40:1b:c1:68:83:
4b:b3:b0:d1:90:55:fc:bd:2c:67:39:99:a7:06:fe:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F8:35:1B:21:71:E4:EC:81:10:61:B2:CA:EA:27:F3:4D:D9:B6:5B
X509v3 Authority Key Identifier:
keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5e:ce:d2:aa:e4:bd:38:21:ec:31:93:68:6a:27:71:13:6c:
56:c9:8a:30:56:14:c6:95:b2:a4:a5:1a:04:1d:91:1e:da:8b:
bd:a6:0b:a9:3a:75:ec:29:0d:75:80:09:ed:0b:dd:03:59:68:
b5:19:f9:26:c9:b5:ae:59:d1:a6:6e:84:2d:20:cc:2f:b5:00:
66:08:09:8c:1c:cd:7a:27:67:e0:34:54:ae:90:b8:ed:fe:a7:
3f:da:71:89:e2:7e:e0:62:9f:09:4b:ef:d9:0d:c9:a7:9e:0a:
d6:7b:d3:be:9a:6e:2f:0b:43:5a:51:e6:fd:48:f1:b0:a2:c5:
b5:32:81:0d:89:4b:a0:59:a3:3c:21:d2:92:9d:17:21:45:c4:
39:2a:7d:87:49:3b:42:34:b4:07:38:cc:5f:5a:36:63:b4:fd:
ea:8a:28:08:96:23:17:a0:cf:a9:9f:4f:2b:21:ee:89:f5:cd:
4d:0c:f7:e4:df:a9:0d:5c:69:ef:35:ff:5f:36:16:27:4b:b9:
9a:e8:46:24:ff:4c:17:0a:21:d3:4a:04:64:66:24:9a:5d:f9:
1e:58:ae:0f:fc:69:61:78:ae:ac:21:82:e7:00:c6:d3:52:37:
eb:cb:97:39:77:5f:e7:be:f2:86:09:cb:22:ab:da:73:df:f1:
be:a1:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:48 2025 by rpki-client