Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: rgdQe7vhizCTQQdofAnk0OHN0qhXMCzjv2eEoyuui24=
Subject key identifier: B0:62:EA:A9:58:C9:3A:EE:3E:20:20:15:83:51:7B:12:F5:41:FA:B6
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 019A503E5FEB89DE99FF450DA46184FA83EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 19:00:56 +0000
Manifest this update: Tue 04 Nov 2025 19:00:56 +0000
Manifest next update: Wed 05 Nov 2025 19:00:56 +0000
Files and hashes: 1: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (hash: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=)
2: hZOD7Y_mupZOHap9fLf6vk7q8ec.roa (hash: S7Xh16GME3MVdYv3MI3CqwSYnk2TD7axisWzIQZKMnA=)
3: kkgbITx0NnDqrc6NrPVjFVrJ5sk.roa (hash: 8TkKYybnSajtPi7S+EAIdOJJM4TQV3tglJHQvRJJM1E=)
4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: RHjZt0vkhqLcZ+UCXkb48IjBP/veYYr1ngEQ1TYnSeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:5f:eb:89:de:99:ff:45:0d:a4:61:84:fa:83:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Nov 4 19:00:56 2025 GMT
Not After : Nov 5 19:00:56 2025 GMT
Subject: CN=b062eaa958c93aee3e20201583517b12f541fab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:ef:79:28:28:6d:ed:7a:da:2e:53:22:82:
0c:9f:76:c1:d7:58:06:3e:79:e4:0c:3a:62:5e:2c:
cd:a3:b1:1b:fb:28:01:a8:59:ff:4d:03:33:f0:e5:
a4:52:8e:96:25:19:0f:52:5e:f8:47:a7:d4:a1:5f:
1b:bd:42:61:42:c5:82:a2:f5:93:0c:88:63:75:5e:
98:c7:71:b5:7b:d2:03:b7:cf:c0:ed:7f:da:b4:9a:
2e:c3:42:b1:08:04:45:f1:57:b5:4c:bf:0a:92:f1:
d6:db:3d:2b:ae:ff:df:95:5a:85:66:49:1f:da:8f:
33:53:56:05:90:47:c7:16:94:1a:0d:27:78:d4:aa:
ad:eb:2c:cc:14:60:47:84:09:31:4e:f6:a1:22:85:
e6:6b:b8:07:ab:be:83:5e:fb:19:94:5d:b2:02:43:
1e:7b:79:4b:8d:2f:0f:b7:59:06:bc:8c:81:90:ab:
d6:43:da:61:e5:c3:05:87:fa:ff:43:52:47:35:1f:
21:ef:3f:2d:1e:6a:b9:80:e9:76:68:a3:30:01:a1:
0d:f2:28:ac:35:64:31:0b:f8:40:0f:94:a9:1e:04:
a8:fb:31:2e:d1:d4:41:3e:90:62:ba:be:8c:e4:15:
d6:7f:bb:61:d7:50:67:da:c2:58:dd:39:1e:2f:6b:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:62:EA:A9:58:C9:3A:EE:3E:20:20:15:83:51:7B:12:F5:41:FA:B6
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4f:95:f9:ef:63:74:95:5f:e5:82:69:49:31:63:ce:a0:41:
ae:d7:a4:00:ef:61:a6:0b:dd:78:c8:b3:6c:82:53:68:ef:84:
22:f8:96:10:c6:33:eb:1a:a2:35:ba:61:dd:7e:d1:f1:f4:ce:
c1:92:76:e9:0c:dd:a6:59:be:c7:d1:e2:d1:52:8b:0b:d9:96:
a7:19:2e:79:76:3a:5f:d2:26:88:a2:23:e5:d5:b2:79:d1:21:
30:15:e3:b6:24:ae:dd:f1:ac:ed:d0:6c:82:2b:4a:0f:cf:1a:
8c:15:9f:9d:bf:30:de:a3:9a:00:61:ef:2f:07:d1:eb:5f:07:
d9:5c:6d:f5:51:f3:b2:8f:de:23:95:96:77:1a:17:bd:78:1e:
fa:0b:00:90:80:79:75:3e:fa:a4:f3:3d:82:f0:29:80:fb:d9:
b5:bd:b7:f4:3c:c3:eb:3d:fd:a0:23:14:b1:f0:5f:f9:df:37:
63:12:d8:60:94:08:7a:ec:5c:01:71:90:95:e2:38:32:35:2c:
72:57:47:fe:0e:5c:7d:fb:a4:94:26:b5:57:8e:6f:1b:2a:7b:
db:73:48:ca:be:58:85:22:5d:9f:c0:68:27:08:97:ab:8d:12:
88:f8:26:95:a9:6a:d9:97:fd:ab:37:52:34:8e:a2:e5:3b:81:
fa:d4:cc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:39 2025 by rpki-client