Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier: 5593qPwJIbpO/eLpEg0crZ58s4NeV2TnoWrxUygMa7A=
Subject key identifier: BE:72:B5:CE:DB:A6:3E:27:67:45:4A:C2:79:B5:45:66:10:06:0B:EF
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 019A4E86BA1BEE5188720F1C55713D05215C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:43 +0000
Manifest this update: Tue 04 Nov 2025 11:00:43 +0000
Manifest next update: Wed 05 Nov 2025 11:00:43 +0000
Files and hashes: 1: 8gQzPchz9vCwdjVN_ZBPueH3G6Y.roa (hash: Z7w2/N0mbKOYhB3ua7HBgoWG65DoIXePIy8hWS+i+vg=)
2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: /+iWrcRpAhn4qvO3MCirbkAK3Eyi5BT86RXP67Dygjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ba:1b:ee:51:88:72:0f:1c:55:71:3d:05:21:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Nov 4 11:00:43 2025 GMT
Not After : Nov 5 11:00:43 2025 GMT
Subject: CN=be72b5cedba63e2767454ac279b5456610060bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:b3:44:12:a7:47:00:ef:74:64:93:e6:01:
35:39:38:c4:e4:17:8b:f8:0f:64:55:a5:b3:d0:98:
da:ac:b9:46:e1:88:f0:66:05:64:56:b5:9f:a3:d7:
a3:39:32:f3:81:01:69:4d:f1:a6:0c:b1:22:7e:16:
f5:db:16:93:d0:1e:10:38:61:ad:13:55:38:92:2f:
72:a3:63:37:e5:c5:c5:e6:cf:c6:e7:87:1a:16:e3:
4c:bd:03:ef:e0:f7:1f:a3:8a:61:af:05:0b:d3:e2:
15:0e:08:09:ae:81:56:a2:7c:9f:2f:e2:13:26:66:
27:ac:32:57:ab:6c:d7:3a:0e:a9:1e:f2:cd:30:f1:
b2:c1:a9:15:93:e8:5c:cb:2e:01:a3:79:a4:27:3e:
17:cf:3d:f7:4a:a1:e3:e5:8b:f9:b6:8f:96:04:61:
75:7e:35:04:15:1f:a9:cf:72:d4:14:bd:e6:b6:ac:
2e:25:b5:f4:cb:a3:d7:ec:dc:f0:0f:64:19:86:9d:
98:15:66:79:b7:35:17:6f:1c:53:d3:cf:c9:a3:bd:
57:90:68:e1:c2:7d:d4:f2:6c:6b:74:8e:b4:4d:9c:
ad:aa:57:85:db:a8:1c:b4:bb:13:47:58:b6:ca:34:
94:00:fe:d9:c0:38:d7:83:51:e0:b3:06:41:96:49:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:72:B5:CE:DB:A6:3E:27:67:45:4A:C2:79:B5:45:66:10:06:0B:EF
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b2:30:96:67:8f:dc:fe:60:f7:0d:33:08:03:23:3c:84:a6:
ea:89:88:73:0c:ff:d1:5b:c5:f8:3a:20:f9:76:e0:8f:9f:66:
71:2b:af:16:ce:b1:62:b7:a1:4f:42:fc:18:e8:27:90:fb:0f:
49:d5:7d:47:60:9f:b5:48:04:07:22:63:0f:41:f6:b1:ff:1c:
66:ed:33:42:5f:27:56:bc:42:77:54:9e:81:5d:90:58:2b:91:
43:9e:55:56:cd:10:fe:45:5a:ae:f4:f4:14:c4:88:1f:59:c5:
34:d3:38:51:76:b1:cd:13:e3:26:0a:73:92:59:1e:ae:c8:8e:
84:b1:73:ac:84:78:48:62:7a:32:01:a1:90:e0:81:75:59:48:
6d:c5:18:9f:c2:c2:a9:e3:91:31:b9:73:e3:85:eb:1c:c6:da:
01:3d:63:3f:96:a0:30:9f:a1:40:50:71:9b:67:32:82:be:d1:
99:26:25:5e:fe:58:4a:8a:4f:f3:5a:3e:d1:ff:97:76:e8:23:
f4:d3:88:73:73:fa:d8:a1:ac:d3:6d:c2:15:1f:7d:9e:44:5b:
a3:10:b2:12:90:5c:67:24:9b:56:9f:b6:7b:66:97:3f:65:7f:
47:fd:77:b2:69:df:11:3c:8d:a0:1a:da:4b:bf:c2:69:69:09:
70:c3:5f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:13 2025 by rpki-client