Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: ZCWK0KjMYvqSSJsMLVZexvJU1NKNzhnho/1sYhcD1SI=
Subject key identifier: B5:78:DC:41:56:64:D3:F5:BD:AA:94:A9:9B:60:BC:52:01:3B:E0:41
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 019A4E1915875F61753A91845F551070FDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 09:00:57 +0000
Manifest this update: Tue 04 Nov 2025 09:00:57 +0000
Manifest next update: Wed 05 Nov 2025 09:00:57 +0000
Files and hashes: 1: HQDN-aj0TQhAX2FXvaTFWzQChUg.roa (hash: blFOlAR9sydif32qAhRClbIbQgCg0n31LrtAjrgoEug=)
2: M0bYeyfyOrMV_gB5qblOfbWilh4.roa (hash: f9XZswY2l4oflWNgmE9zU0KMUAtHHlyk4r3L1HHO+uE=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: Koarr3J84aMGgbNXnfsrmgu08HccJZZFF5JQJpJsVbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:15:87:5f:61:75:3a:91:84:5f:55:10:70:fd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Nov 4 09:00:57 2025 GMT
Not After : Nov 5 09:00:57 2025 GMT
Subject: CN=b578dc415664d3f5bdaa94a99b60bc52013be041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f1:3c:e4:f6:9d:a0:33:b0:f8:61:11:15:da:
28:69:d7:cf:fb:f0:c3:c6:ab:d3:20:b7:63:0c:3d:
38:ee:d5:69:61:87:a4:ea:ea:f9:4a:bb:6e:28:06:
49:88:13:22:5a:ea:89:b8:71:65:24:fe:3b:e6:33:
c8:9a:30:5d:d3:a9:10:88:0d:fa:63:bc:18:4b:15:
f6:1f:e0:6d:b4:1e:79:f8:e1:63:5f:ec:85:36:db:
70:19:74:75:8a:92:ab:c7:28:b3:5f:66:31:f3:a7:
80:2f:e7:0d:47:9d:79:aa:0f:49:1a:ef:10:9c:95:
57:5a:76:72:68:f5:4d:5f:da:6e:ee:a5:32:18:df:
a0:fb:3a:55:06:f4:49:52:b4:82:56:7f:68:85:a9:
15:25:51:a3:3f:51:ba:75:97:97:ec:28:a2:f9:22:
f9:76:a1:4c:fa:7f:83:df:6f:60:97:6d:18:99:29:
ac:ff:45:e6:90:d5:87:ba:80:72:91:44:13:71:01:
ed:70:57:de:cc:76:61:4b:45:39:a7:bc:b7:98:8a:
12:12:e0:be:e3:00:df:46:33:90:45:9b:dd:17:e8:
cf:5a:ba:9b:01:5f:54:bc:3a:5d:59:10:8b:ea:35:
74:7a:0f:58:00:84:fc:2b:fb:60:e3:ec:bb:33:95:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:DC:41:56:64:D3:F5:BD:AA:94:A9:9B:60:BC:52:01:3B:E0:41
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f3:b7:78:78:36:c9:1e:20:e4:76:2d:21:c6:fa:e4:79:31:
2a:21:2e:fb:e9:89:0f:19:3e:85:d7:c2:a9:08:b9:53:e6:bc:
86:d0:66:69:9e:cc:80:37:cb:44:75:55:10:d1:6b:8c:33:0e:
03:26:1b:ca:2d:67:c0:36:04:1d:fe:0c:13:0e:db:d5:a5:7c:
32:78:0f:90:f9:f5:b1:c2:13:9d:9d:86:5c:fc:cd:c7:4e:9c:
2b:a7:87:3b:a7:62:1d:c6:f6:e2:ba:74:09:2f:c9:ac:61:af:
55:74:7c:4d:27:e6:33:ee:5d:f9:e8:92:22:1e:8c:36:6d:95:
bd:77:56:9a:71:6d:25:b4:36:04:69:58:64:ca:dc:ae:d6:1a:
33:9a:c0:2d:ad:87:08:f6:a5:70:21:0c:f9:b8:e3:29:96:f2:
00:fa:e2:da:81:8f:59:17:c4:bf:a4:4a:4d:e9:01:1f:89:52:
5d:73:05:8e:bc:0a:f1:6d:59:26:b8:b2:a4:4b:e0:73:b8:1c:
2c:8f:bf:70:bc:66:98:56:29:2c:47:0a:75:e7:84:b7:10:f3:
94:ad:c8:1d:2b:a1:0c:80:02:b6:18:86:d8:9d:cb:9f:1a:1e:
87:c6:a9:ae:8c:73:a4:b2:7a:46:e7:c0:d7:29:d7:de:4d:c4:
73:c8:d1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:12 2025 by rpki-client