Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier: Ht/xVBySaLB/ZyoQWAvILbR+6b73ODhrPD0Pt6TFhfo=
Subject key identifier: 91:16:97:AA:5A:91:03:D0:2F:E7:8B:A9:4D:D3:E8:59:05:E8:AB:C2
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 019A4EF463EC86AC75D1185B4A94E3211A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number: 15EC
Signing time: Tue 04 Nov 2025 13:00:30 +0000
Manifest this update: Tue 04 Nov 2025 13:00:30 +0000
Manifest next update: Wed 05 Nov 2025 13:00:30 +0000
Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: UlycUZ9Wiv/wxwWxwbtaZrOcM8D4VMJEOLTb7Tccbes=)
2: aC1zrHe-B2VbFWXSrCj-et8l1wo.roa (hash: dYtxir4EItimXJqX5OgUJO3jRJ2NZN3GpkUGUsB/28Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:63:ec:86:ac:75:d1:18:5b:4a:94:e3:21:1a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Nov 4 13:00:30 2025 GMT
Not After : Nov 5 13:00:30 2025 GMT
Subject: CN=911697aa5a9103d02fe78ba94dd3e85905e8abc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:27:3d:b8:75:6f:66:63:a2:5f:c6:03:e2:
f4:5a:54:45:e0:a0:b6:a1:00:c8:4f:42:45:25:e1:
21:43:d1:74:4c:1d:8a:3e:cd:f8:a9:13:a0:58:99:
8d:78:fc:9b:be:cc:60:86:41:53:0a:f7:f7:fc:de:
19:f7:d1:43:d0:8e:21:ad:2e:f1:a3:4a:fc:8d:52:
4b:b2:15:95:dc:58:04:51:9e:ff:45:cd:b0:48:b1:
1c:49:b2:b3:71:90:7b:37:d1:11:eb:24:f5:70:f9:
c6:97:c0:07:7a:c7:57:6b:c0:f7:23:67:42:03:65:
cb:94:76:d2:b3:41:7d:55:34:73:49:4e:07:dd:19:
55:b8:cb:a7:72:ea:3e:fb:13:0f:88:e8:82:f7:d6:
a2:47:c5:f1:e0:be:73:12:ee:e7:7b:07:6e:d3:e7:
f6:1c:8c:a7:3e:9e:22:2b:99:0c:d4:21:89:f2:b6:
c4:77:42:e1:ef:9c:54:84:a1:bf:cd:f0:65:bd:a0:
00:61:30:94:b0:62:b9:e7:d2:f6:8e:18:36:07:72:
ba:f2:19:d4:28:9f:e8:11:81:ad:fd:99:7d:a3:d3:
18:2f:49:94:a9:e2:1b:b2:c4:98:f5:3f:1c:a9:aa:
75:b2:1c:89:9d:b6:e9:79:4c:97:33:ec:6b:72:0a:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:16:97:AA:5A:91:03:D0:2F:E7:8B:A9:4D:D3:E8:59:05:E8:AB:C2
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:49:f1:a6:ac:54:a0:97:42:b3:9a:38:39:ad:2d:f4:a8:24:
d2:73:5b:2c:2e:bd:48:12:33:a7:3b:18:e9:14:b0:8b:78:af:
54:3f:84:f9:89:b4:7f:4b:8f:9f:85:39:ea:99:6b:d2:66:b5:
05:d1:39:39:ce:05:35:dd:75:eb:73:09:32:6a:74:04:6d:c0:
e4:09:fa:8d:2a:8a:3c:ae:56:b2:a6:05:1f:88:36:09:f0:17:
79:57:90:8e:24:87:f9:0c:8e:90:71:a3:6b:aa:3d:63:ac:fd:
69:bc:fe:5c:41:19:f0:e0:b7:69:f5:fa:0a:3b:b5:a0:d6:26:
13:c7:e6:8e:19:aa:01:4c:50:1a:af:30:2b:63:2b:d7:4b:17:
24:73:37:1a:e3:3b:4a:09:dc:77:c4:f5:ae:35:51:ab:81:9e:
d8:f8:ec:75:84:8a:97:c8:ae:81:1c:8a:07:fd:72:19:73:e8:
c1:fd:17:fc:1f:7a:13:5d:7a:2b:56:01:6e:02:df:d9:5e:a2:
da:26:14:24:2e:1f:c5:1c:48:c6:21:af:51:45:9c:f8:27:84:
b3:93:aa:ad:ab:db:da:f1:98:51:7b:97:20:7c:9e:09:3c:a8:
0a:1c:61:d5:ba:ae:08:4f:b3:61:04:0a:eb:39:56:d5:d4:a5:
c0:0e:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:24 2025 by rpki-client