Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: bJM4bJzvsrJPkzxvc0CEf1XNjsjHKXflwSAgwM3+OFw=
Subject key identifier: FB:C7:63:1C:77:BC:9A:54:26:8E:48:5C:87:E3:9F:C7:BC:A6:AB:10
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019A4C97ED5C35BF6F17CCA3E68430EFD555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 1553
Signing time: Tue 04 Nov 2025 02:00:16 +0000
Manifest this update: Tue 04 Nov 2025 02:00:16 +0000
Manifest next update: Wed 05 Nov 2025 02:00:16 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: rrrsgtcOwM9fquOdcoZgJ+R9Yr38zrIIRvqiZ1s4E1o=)
2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:ed:5c:35:bf:6f:17:cc:a3:e6:84:30:ef:d5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Nov 4 02:00:16 2025 GMT
Not After : Nov 5 02:00:16 2025 GMT
Subject: CN=fbc7631c77bc9a54268e485c87e39fc7bca6ab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:80:0b:7e:6e:77:e0:4f:46:43:af:bd:32:
e6:c9:90:25:1a:64:57:99:2f:47:5f:eb:48:b0:f4:
f5:68:3c:93:3c:43:4b:ff:2a:bb:48:fe:56:96:6c:
38:80:7a:78:98:3b:b4:73:03:f0:32:8b:70:60:79:
39:2a:4e:07:b7:35:1f:38:30:43:37:19:2a:cb:c3:
3b:68:3e:be:6c:2f:c0:2a:fd:17:5c:67:af:cf:30:
a6:43:08:40:11:f6:db:c6:a9:4f:10:b2:f2:ba:9f:
d9:9d:90:dd:19:ee:2b:07:f8:bb:09:8d:e4:18:a5:
4d:b7:0e:5e:80:43:a4:ae:1d:00:46:40:98:30:51:
89:1e:dd:f9:98:c4:15:cf:af:1c:8e:c7:64:3f:dd:
72:c1:71:5e:ac:48:3f:4c:3f:c2:23:43:01:97:5c:
e2:2c:2f:f1:24:a7:f5:fd:1b:5e:b5:72:ff:1e:c1:
c9:fc:b8:fd:b2:d6:89:4b:82:91:93:62:b9:5f:79:
ce:0f:aa:70:a6:b0:85:1c:a0:51:28:0a:40:9a:12:
e8:20:7c:0c:02:4b:e3:a5:e5:5c:96:73:88:c6:b6:
50:50:38:10:48:a4:3f:33:fc:c0:f1:ad:70:d6:51:
15:41:89:f2:32:c7:02:5a:5b:5a:80:8c:35:aa:9a:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C7:63:1C:77:BC:9A:54:26:8E:48:5C:87:E3:9F:C7:BC:A6:AB:10
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bd:9f:ae:35:1b:15:9c:50:9f:38:79:bb:b3:69:40:9d:77:
f1:ce:19:9d:39:98:ab:13:19:d0:a0:f6:af:d6:7c:40:70:c8:
87:94:fc:34:58:83:df:4f:59:1e:b8:3e:a8:4d:c2:ac:40:4e:
72:85:01:dd:89:97:ea:c2:68:6d:5b:19:fe:31:6f:d6:9b:87:
b3:64:12:20:c5:92:f8:0f:f1:f8:65:4d:36:34:b6:d0:c4:c2:
a6:87:b5:54:00:4c:83:a6:2e:94:fa:96:16:3a:28:32:6d:eb:
f9:00:51:b6:e6:45:d9:f7:28:03:b8:c6:a7:f4:14:02:da:56:
db:38:3f:a9:c1:34:98:f2:14:10:c1:d7:33:ef:02:b2:f9:99:
92:11:40:46:d5:18:bb:99:dc:f5:08:7f:3e:d2:3e:91:56:6b:
df:5d:84:a1:0e:89:f4:ca:7b:43:74:57:ba:f2:55:44:70:3d:
ac:2b:93:57:9b:1f:4d:35:75:fe:76:e4:9c:ce:0a:fa:d3:65:
19:8e:b7:c8:cf:c3:9f:7e:d8:7a:80:52:2c:8f:01:02:67:2f:
c2:50:5a:fc:e0:6d:62:8d:c7:30:f3:d1:95:d9:06:15:24:e7:
b0:2d:0c:50:f0:18:d3:e1:72:a9:3c:38:e6:ee:05:46:6a:61:
09:76:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:19 2025 by rpki-client