Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: 44L4bdwNSZSwJis0iPX2xCstmAjD+eEJtF/Y3lqAm1s=
Subject key identifier: 3E:23:C1:5F:3C:DA:BC:39:94:C2:67:89:17:BC:47:0E:2E:AC:1A:A5
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 019A4DE226733AD3C7F3819AA1F2E45201AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 038D
Signing time: Tue 04 Nov 2025 08:00:57 +0000
Manifest this update: Tue 04 Nov 2025 08:00:57 +0000
Manifest next update: Wed 05 Nov 2025 08:00:57 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: imZe7YFNkB2EeMBFj5JjAlQPFucS3MRN5IcelNb7aaY=)
2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:26:73:3a:d3:c7:f3:81:9a:a1:f2:e4:52:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Nov 4 08:00:57 2025 GMT
Not After : Nov 5 08:00:57 2025 GMT
Subject: CN=3e23c15f3cdabc3994c2678917bc470e2eac1aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:74:67:f2:e8:89:ab:bc:46:ad:83:b2:85:
c4:7b:ca:96:15:82:8a:d0:e0:66:ec:06:af:d7:ab:
7f:93:7a:72:c7:06:cb:6a:a2:f9:68:ba:a1:4f:d7:
e0:46:ba:0b:9b:23:a1:c2:c7:3e:9d:72:9a:65:71:
1c:93:41:60:49:ed:43:42:c7:47:78:96:2a:bb:a5:
8f:8e:ff:e3:78:8e:a9:9e:6d:2f:3a:07:2f:f6:c4:
17:67:1f:76:c1:4d:56:6c:da:33:2b:82:f8:d2:92:
40:8d:66:a0:49:e3:3e:dc:54:93:39:cf:e2:e6:15:
f9:b9:2a:66:38:25:75:7d:74:ff:f1:b9:e5:aa:3e:
e0:5a:e2:61:e1:c5:0c:ba:aa:d4:b9:ff:cb:ed:f4:
88:66:15:f4:a9:e2:8d:bb:aa:b2:06:07:09:26:8f:
5e:12:41:41:23:a6:aa:a2:b5:76:3c:49:62:07:fc:
00:a0:9f:49:ca:28:fc:02:73:d7:63:a9:62:e2:f0:
46:87:86:7a:7d:d7:9e:0f:9f:a5:3f:43:75:68:80:
dd:95:3a:c4:b5:c2:aa:72:d0:a2:36:35:11:02:f7:
2b:3d:f8:32:3b:42:93:9d:a2:57:29:4f:ad:1a:7d:
45:28:7b:db:0b:33:c5:07:ee:01:ca:6a:af:52:80:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:23:C1:5F:3C:DA:BC:39:94:C2:67:89:17:BC:47:0E:2E:AC:1A:A5
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:30:ac:85:76:7a:6c:69:a5:44:e9:c2:ac:ee:bd:e4:0c:37:
fe:6b:fb:49:ba:b7:e4:0a:c1:90:cc:1b:d5:bf:27:97:0d:da:
c3:23:41:26:da:ad:a8:11:aa:6a:aa:29:fd:e4:5f:70:ce:6d:
88:2c:5e:2a:d5:a8:04:a4:f5:6f:28:2f:df:50:ea:31:11:5b:
e3:02:3f:f7:85:ae:84:b7:97:d8:56:9d:81:43:d1:20:c2:c9:
36:12:42:1b:e7:00:fa:66:db:c6:c8:7d:32:08:a0:00:60:64:
29:ec:ee:b6:7b:cd:39:8f:a0:d6:8c:e9:84:c8:a7:63:1a:55:
59:15:54:6e:cd:61:90:35:26:1b:27:f6:50:09:68:1c:d4:a5:
7f:75:64:67:ea:e1:fe:4f:e0:01:de:4a:e5:0b:0f:b6:0a:00:
e8:5a:53:12:7d:b2:3d:58:a5:54:38:7c:3d:1c:56:57:c8:13:
74:9d:a1:77:0a:f5:b1:d1:ea:6e:f5:2d:ab:5b:d5:70:dc:bf:
5e:1c:f5:30:af:be:86:08:36:14:b5:e8:3e:5f:d7:53:ac:87:
8a:7a:87:9d:db:43:d9:ce:ef:bd:29:5c:56:23:9c:6d:8a:a7:
11:b7:ab:1e:98:53:c4:1e:15:a6:9c:06:d7:ef:15:ef:ae:cc:
05:95:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:26 2025 by rpki-client