Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: cp9MX+jHR5IsR8LhZ0GiaIiT0Pizx9vU83POE2BbVL8=
Subject key identifier: F8:01:DF:52:32:A6:23:B0:0B:0F:8B:31:56:76:DC:11:3E:08:18:58
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 019A4EF5631A85A16D1C59120451E67545A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 15A8
Signing time: Tue 04 Nov 2025 13:01:35 +0000
Manifest this update: Tue 04 Nov 2025 13:01:35 +0000
Manifest next update: Wed 05 Nov 2025 13:01:35 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: CJpYhn85LkUiZP3Q83fCPYZo5xnWG3e2day9sfWTVn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:63:1a:85:a1:6d:1c:59:12:04:51:e6:75:45:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Nov 4 13:01:35 2025 GMT
Not After : Nov 5 13:01:35 2025 GMT
Subject: CN=f801df5232a623b00b0f8b315676dc113e081858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:6e:a5:c8:64:8c:c0:d1:5d:9b:f5:34:64:
0c:ca:68:bb:d1:41:7c:c1:07:b4:da:2c:d6:6e:5e:
3b:06:87:e5:60:e1:30:4a:cf:a3:0a:e6:47:c6:a4:
43:fa:9b:b1:96:15:cf:ea:61:96:ad:8b:ba:5b:f8:
3c:03:f7:7d:5f:71:2b:56:fc:36:24:cd:30:45:50:
04:56:16:61:a8:01:62:e2:55:08:d7:9e:e4:1d:9c:
79:45:5b:6b:d4:8b:07:d5:ae:48:d4:83:77:81:b9:
c4:b5:4b:77:5c:17:ec:15:b9:36:ee:b5:bc:bc:88:
6c:d5:69:4d:0d:bb:c5:f8:9c:56:82:46:ed:ff:20:
78:f9:7e:54:5b:b3:30:87:80:b5:c4:aa:78:6a:ee:
77:b8:0e:4f:94:91:c1:8a:79:13:cd:e2:f8:67:40:
e9:88:8e:9a:1c:16:6e:61:13:da:36:e5:0b:2c:38:
da:95:ef:af:99:16:f5:ba:ac:cc:1a:7a:fc:0a:bb:
77:c7:c6:e7:be:1e:04:82:c3:ac:f7:20:1f:ec:3f:
5d:b1:94:71:df:2d:b1:91:52:0c:da:b9:ea:1e:15:
77:33:1a:83:6d:63:3f:04:6b:5f:4c:f3:2a:6c:e2:
7f:be:5c:24:25:5a:7e:e9:ac:48:df:25:5a:ac:6c:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:01:DF:52:32:A6:23:B0:0B:0F:8B:31:56:76:DC:11:3E:08:18:58
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e0:40:88:00:df:ac:c9:42:c4:66:11:4a:56:2a:00:22:2b:
e9:77:66:5c:a7:14:b6:0b:57:0c:76:21:de:03:e7:ad:cd:35:
5c:b5:e2:3a:8e:18:07:b0:e8:a6:64:eb:c8:d4:0e:37:68:de:
6d:8f:06:d1:6a:f1:1b:5b:b7:48:b9:1b:ad:34:b6:ed:a7:d4:
69:e7:c5:4d:08:c2:b4:ea:e4:86:1e:7f:66:26:8b:da:02:91:
40:aa:61:f0:73:27:ac:b9:99:8f:86:9f:5c:c3:7a:fd:95:3a:
e5:a1:68:62:b7:ca:9e:11:8c:8e:bb:06:6a:1f:00:5a:3d:ea:
e4:f3:70:4f:3d:58:93:1a:19:21:24:47:d1:0f:ef:60:36:c0:
b7:3d:32:f1:b8:98:3b:83:85:c1:22:d1:22:6e:52:52:17:83:
e5:3c:a4:86:b1:ba:0e:c7:a4:62:3a:8c:82:53:7c:84:fe:d5:
8a:5a:d9:67:95:ce:1e:af:46:71:94:6b:3d:42:38:fd:84:b7:
2a:42:36:78:c2:72:70:19:e3:d2:2e:ef:f6:de:fe:5a:fc:56:
dd:23:81:fb:e3:37:92:51:fa:dd:07:72:bd:8f:36:6e:52:58:
a4:cf:32:4a:d0:19:f2:be:1c:1a:02:2e:b2:6b:58:a3:e9:65:
29:7b:f8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:48 2025 by rpki-client