Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier: 94idgtYCZaKyQOplCa5+EhtYRITFKb1Csc328fZcRc0=
Subject key identifier: F9:25:EB:C1:56:35:C1:E6:03:E9:C0:4A:A5:9D:E5:0C:E1:1B:BB:2A
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019A4E4FD8E537198F8440975299F73AE85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number: 176B
Signing time: Tue 04 Nov 2025 10:00:46 +0000
Manifest this update: Tue 04 Nov 2025 10:00:46 +0000
Manifest next update: Wed 05 Nov 2025 10:00:46 +0000
Files and hashes: 1: BH4JiNSau-Drbx1LaCjE1x1v30A.roa (hash: TbmERc+CgiPXJOmSpqLjpiM3C2RIrXoRaOqYGrV/7rc=)
2: J2m2ISQHz5hJjKyZkS2pJF0KRqI.roa (hash: 6G3IQ5SdI2eYbxPznkHPeUYzIj1Gq0tlz/lJz4R+v2c=)
3: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: A+zrlm//RHaQTylVnJ/KgN4xutx3mwBkk9gbG47S+Ag=)
4: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=)
5: cp0gE5jpNrX7nIdlUiuYX6bnQvc.roa (hash: iIvBJBq8Zqf9eohi0Jyj3xgkcfVFeTX7lCO1jrChOO4=)
6: fj1r2eQRURbfHzLqz1r8LUH9mVA.roa (hash: RTFZ5yGadIatm8cDgVUSamVjEv2odxS8PZJ1SetFXHU=)
7: gG2bczsEgp5Ea6HMTqVTO22bBwc.roa (hash: AuttycrlvdsTGOArCiNMxWWJ+uIg0wEj7C+tLNzzUug=)
8: v3x5iNNrmiatDTviLrTJBlnNTao.roa (hash: y4jZmJDEPRDwVYIDs+oTsrk+QPXd/ySPMMJZ/R51xOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d8:e5:37:19:8f:84:40:97:52:99:f7:3a:e8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Nov 4 10:00:46 2025 GMT
Not After : Nov 5 10:00:46 2025 GMT
Subject: CN=f925ebc15635c1e603e9c04aa59de50ce11bbb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:dd:28:c8:7f:48:03:da:aa:0a:aa:49:89:
fe:2f:fd:55:08:28:fa:ac:09:2f:1f:21:b6:00:d4:
b8:f1:f4:ec:2b:79:21:73:e3:94:8a:08:6e:32:0b:
ef:0f:5e:d9:b6:be:ef:ce:57:69:cf:82:e7:ef:21:
4a:61:4a:b9:47:7d:2b:25:3f:68:8d:ae:18:78:63:
28:fc:d8:6e:08:90:20:9c:55:e6:90:77:82:0e:e7:
8b:e4:8f:e4:3a:69:62:da:2b:0b:79:e4:64:a8:11:
64:5f:70:58:34:5d:ba:4b:ce:61:8e:0c:d3:81:61:
1e:84:67:36:f8:55:f4:12:9d:f3:77:40:4e:13:b8:
c6:83:ef:cc:9a:95:f3:9c:f7:d8:1d:1b:e8:62:35:
a9:73:f1:0c:1b:f2:01:29:8a:e1:d2:7a:7d:c4:f9:
13:f5:ad:96:4b:26:56:fb:96:45:d0:81:9e:95:15:
c2:4e:4e:ce:95:12:20:36:59:42:60:d1:38:ad:16:
80:2a:1c:88:94:9a:b4:1f:cf:9e:38:a6:b2:93:c6:
d6:9b:84:59:8f:ec:c0:27:87:fa:6e:f4:a0:7a:5e:
e3:55:47:5a:69:de:5d:d9:6e:99:34:cd:ab:ef:ff:
84:08:76:1e:2a:15:ef:0c:3c:71:e0:ce:15:e9:50:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:25:EB:C1:56:35:C1:E6:03:E9:C0:4A:A5:9D:E5:0C:E1:1B:BB:2A
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5e:2a:c8:c9:b1:35:22:80:02:ec:52:6d:e9:d2:23:09:e6:
aa:64:27:f3:c8:14:6e:4e:9a:73:f6:14:09:af:ce:3a:70:40:
6e:65:d2:4d:c0:6f:65:0e:39:ff:45:b6:d5:46:da:c2:ae:42:
fe:e3:20:06:b7:63:ce:08:93:3c:6b:30:84:da:69:99:2e:56:
de:27:d4:e9:7c:f4:82:87:ee:ab:a7:f0:65:1a:c1:e3:85:9c:
22:90:cf:50:3e:7c:7c:c4:59:ed:0e:37:ce:0e:41:dd:51:68:
d3:57:d1:89:2a:2c:bb:45:f8:4b:85:8a:78:4f:c3:d4:d0:0f:
a2:80:f4:e6:6a:8e:d8:43:84:b1:d0:fd:03:a8:35:cf:2d:e8:
99:34:14:e1:b6:b8:0b:35:78:d0:24:41:03:2f:1b:e1:1b:4c:
c9:ba:00:e0:e4:8b:8e:25:75:f3:16:94:7a:ff:d5:10:60:d4:
da:0c:48:b3:2f:3c:4f:16:3b:3b:fe:f9:82:f0:ce:e8:55:1b:
8c:65:66:29:de:52:ab:e9:c8:ab:35:87:dc:63:61:e9:36:5b:
c6:94:f2:62:8e:ca:88:0d:29:12:9f:0a:6a:1d:b2:85:65:ea:
89:c1:da:02:b8:23:9a:5b:80:ac:f4:98:2e:68:23:cc:59:76:
7d:e5:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:27 2025 by rpki-client