Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File: Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier: VDXJNQiHYGZOwWFWq3WgGWgCJS9IryCWKq0nItEfi64=
Subject key identifier: 7F:5C:84:61:D2:8B:72:CA:E6:44:9A:AC:33:7D:29:DD:D9:84:69:16
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 019A4EBD500FC4A068E27ABF3261F9EAE724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number: 0D3D
Signing time: Tue 04 Nov 2025 12:00:20 +0000
Manifest this update: Tue 04 Nov 2025 12:00:20 +0000
Manifest next update: Wed 05 Nov 2025 12:00:20 +0000
Files and hashes: 1: 8HjMGt2u-FXw7B9KaNMeiFRl_SI.roa (hash: PIXJikr44w+6nZYZyCRJ915rQc/SIe+DvX16n4ZT0no=)
2: G_qyBKK6ClXdG1bs8Wh_ckDLkeI.roa (hash: 05zKtGqeHJmsZPaIinYmSC+r/nrmG7SF+AMON4UTZOQ=)
3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: jFoYje6+0PHo5AgA1fQhBcagzFA7NpHoJ8pNQBtXX/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:50:0f:c4:a0:68:e2:7a:bf:32:61:f9:ea:e7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Nov 4 12:00:20 2025 GMT
Not After : Nov 5 12:00:20 2025 GMT
Subject: CN=7f5c8461d28b72cae6449aac337d29ddd9846916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:ea:16:b5:f4:74:c2:1b:6f:59:94:37:87:
6a:5c:74:43:df:f5:fd:69:cb:a2:d8:5c:49:45:04:
4d:cb:ae:11:48:a8:3b:3c:3d:46:a8:77:c8:32:3b:
06:34:2b:1f:7b:a1:39:44:0c:7e:2a:c4:3b:ca:97:
15:c0:c2:a1:be:e9:9a:06:b0:9e:01:61:d8:3e:5b:
69:7b:02:39:89:39:39:61:a6:d4:e7:39:71:ff:9a:
ec:68:61:a6:df:14:e1:40:39:79:de:49:bf:d6:94:
df:ef:2e:37:50:c7:94:8c:e7:ee:bb:58:8b:35:03:
86:23:42:e1:b7:d5:9c:6a:e4:4a:6c:66:aa:59:83:
d1:49:ea:c0:8b:a6:62:39:c7:2c:1c:16:38:23:b8:
03:7f:52:42:f2:a2:c3:50:e9:47:3d:f6:1b:6a:57:
a0:f3:d9:7c:4d:1e:c8:fb:ef:ae:af:1a:cc:db:86:
ae:b8:dd:c8:4b:ba:56:ab:88:82:70:4a:99:55:f8:
92:72:1f:5f:bc:28:27:a5:bb:b8:ba:f0:4c:cb:84:
e0:52:00:58:e2:39:97:d5:63:d9:0f:39:72:68:c5:
ea:9a:69:e2:bf:b3:00:0f:4f:27:32:e1:ca:03:88:
2d:8c:4a:3c:74:b0:97:8b:54:52:53:b9:ae:5e:74:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5C:84:61:D2:8B:72:CA:E6:44:9A:AC:33:7D:29:DD:D9:84:69:16
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:af:d2:ea:d1:4b:19:e8:79:de:1d:9f:8a:7c:c4:59:88:c5:
46:4a:b7:61:6e:c4:83:8d:04:9c:0a:bb:6f:26:3d:d2:12:5f:
32:96:61:21:ff:16:fd:40:ab:6a:4a:61:14:44:3b:30:e1:1a:
21:74:5c:51:90:92:0e:e2:9e:56:ee:46:81:60:24:ed:1f:2d:
77:ba:b2:30:de:0e:a6:51:a7:f4:85:ab:44:d7:31:6c:3f:bf:
20:be:5d:63:36:f4:c2:7e:86:a1:85:75:22:82:5c:47:81:9c:
f3:1b:0e:cd:19:c2:bb:54:bb:79:c2:ae:ec:d8:12:cf:70:29:
41:df:66:ef:a7:c5:e0:e6:e1:ba:f0:c5:6d:e7:aa:fc:49:aa:
88:1c:64:ed:d9:49:ee:56:22:6c:b4:91:40:ed:88:79:bd:c3:
c5:c7:71:92:3d:a1:32:e2:1f:54:aa:96:33:60:b0:e9:28:80:
da:88:29:21:c9:fb:53:42:69:8d:d6:b1:8e:e2:f8:fa:1e:e8:
31:ef:20:71:cf:81:1b:6f:4d:31:29:2d:d9:c7:66:e0:5b:ef:
ea:ba:76:2c:f7:8c:49:b2:f8:90:a6:a9:41:62:d0:50:35:18:
98:cf:25:97:b9:d7:d4:03:73:e0:94:10:4a:d8:03:96:9c:27:
b1:8d:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:49 2025 by rpki-client