Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json)
Hash identifier: avUrC2qi/QCfCf/ilB4SI4/sXV0d5Uw4jim1clMTp6A=
Subject key identifier: 13:6D:26:B1:88:C3:2E:92:5A:8E:CF:0A:28:47:D5:46:A4:A1:76:A7
Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858
Certificate serial: 019A5150A219AF61823A1B854A99F369257A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
Manifest number: 02F9
Signing time: Wed 05 Nov 2025 00:00:30 +0000
Manifest this update: Wed 05 Nov 2025 00:00:30 +0000
Manifest next update: Thu 06 Nov 2025 00:00:30 +0000
Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: 4em231mU2ze9OavOSmDcf9rIbCkzDR7YnghzfQgkyA0=)
2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:a2:19:af:61:82:3a:1b:85:4a:99:f3:69:25:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858
Validity
Not Before: Nov 5 00:00:30 2025 GMT
Not After : Nov 6 00:00:30 2025 GMT
Subject: CN=136d26b188c32e925a8ecf0a2847d546a4a176a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:2d:4b:7e:6a:41:73:3e:18:c1:92:94:d5:
4b:36:52:38:38:7c:e3:51:cb:c0:97:a4:17:9c:d2:
74:15:61:f9:41:b1:f5:71:3a:e0:d8:98:74:2c:42:
8e:98:ba:01:9b:78:c2:9b:1d:93:f7:18:07:0d:5e:
ad:f5:2e:be:5b:4c:9f:01:c2:07:cc:de:c3:2b:56:
21:65:f0:cf:95:34:3a:2c:ca:a5:c2:14:78:e5:da:
c4:63:4d:a1:14:39:e3:31:8c:0b:22:20:cd:ca:eb:
74:69:3f:ee:c3:7d:e9:55:5d:6d:a0:4c:98:e9:eb:
78:3d:87:2e:da:47:6e:13:b7:52:1c:f2:6c:44:9f:
92:0f:40:bc:0e:d8:be:2d:4d:25:99:8a:b0:5f:f1:
ca:27:78:f3:ed:0c:11:e6:15:e7:c7:f4:92:a7:11:
54:69:b1:38:e0:7d:11:6a:fe:2f:4d:29:90:cd:32:
cc:a7:25:cf:29:88:39:34:39:b2:32:b6:86:0a:c4:
0a:ac:1b:f7:f6:2f:11:6a:12:67:95:eb:f8:6c:77:
7e:0c:fe:45:a8:c8:48:d0:d1:6e:b5:1f:26:d9:15:
ed:e3:b7:1a:47:69:82:67:d9:b1:86:92:c9:c5:8a:
08:64:f7:37:58:38:86:75:6a:53:ca:38:6f:49:c3:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6D:26:B1:88:C3:2E:92:5A:8E:CF:0A:28:47:D5:46:A4:A1:76:A7
X509v3 Authority Key Identifier:
keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8d:58:dd:5f:9a:0d:80:a9:1f:31:f9:32:ee:fa:57:83:db:
d9:7d:3c:41:51:8a:3b:8b:82:54:da:80:da:fa:75:4a:bf:a6:
10:6c:5f:91:2f:4d:a7:96:8b:a7:93:ee:fb:24:46:d8:6b:2a:
1f:87:61:2c:fc:4c:1b:98:06:a3:7d:41:97:6f:7b:b8:2d:a4:
d0:86:2b:d7:f2:3a:5a:a3:1c:1b:26:10:ff:fe:04:09:be:36:
a1:dc:0c:c6:78:71:b7:66:47:42:d2:bb:23:15:81:54:cd:1a:
83:fc:53:61:84:6c:46:9f:a5:30:95:aa:c9:43:29:22:e7:07:
5f:5f:d0:95:7c:fb:46:ca:42:30:07:ad:21:77:2f:54:10:7c:
a2:ee:8f:8a:cb:1c:bb:97:e1:c0:9a:fe:fe:71:eb:72:b8:11:
32:1f:a7:9e:2d:dc:4c:29:f6:92:bd:d9:33:3c:46:5b:8c:11:
4f:6a:93:40:e7:13:e8:eb:c2:b8:7d:3c:de:d3:a3:8d:06:c5:
2b:17:13:17:bf:69:18:2a:b1:07:2d:39:48:49:b6:76:b5:f3:
02:e5:68:06:71:09:35:39:ea:f3:9a:e0:15:f9:45:35:d5:b5:
9f:8f:14:77:2c:14:57:d7:1f:c4:3a:e3:16:b2:20:3c:d4:58:
e9:e1:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:34 2025 by rpki-client