Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File: YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier: TpfJMeHdYBYOoVj3/Gx8JlanCFlYejf065RBqKT56oQ=
Subject key identifier: B7:B6:DC:BB:70:EF:1C:57:5F:59:43:50:B4:CF:77:3D:7D:7A:0D:01
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial: 019A4C9847DA19D740922C62B5BF39B643B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number: 12F6
Signing time: Tue 04 Nov 2025 02:00:39 +0000
Manifest this update: Tue 04 Nov 2025 02:00:39 +0000
Manifest next update: Wed 05 Nov 2025 02:00:39 +0000
Files and hashes: 1: TBiZ_CyXMsOJcf6YES-qeNnA7K4.roa (hash: QMLp06BguaI0fqG8Q739POQiUPSQCHhnkaMoIvb33Vg=)
2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: /xGm1djv0ogeTjqgSImUCYrFm+czo6us+SwlNTGlZY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:47:da:19:d7:40:92:2c:62:b5:bf:39:b6:43:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
Validity
Not Before: Nov 4 02:00:39 2025 GMT
Not After : Nov 5 02:00:39 2025 GMT
Subject: CN=b7b6dcbb70ef1c575f594350b4cf773d7d7a0d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:bc:fd:35:45:3d:14:83:84:25:53:f2:b2:
24:33:93:1e:cb:bc:9c:f1:52:50:7b:26:84:78:77:
3c:86:2f:f5:5a:ad:c0:5b:a7:58:52:a8:2d:1c:26:
bc:3a:34:63:c7:0e:50:70:31:ce:5c:83:bf:01:29:
42:18:b3:ad:a2:f9:09:f6:e2:db:35:14:21:16:41:
93:53:a9:d8:1f:c8:d4:d2:ca:ed:72:fd:6f:9c:3f:
2f:83:ff:4d:ef:56:0e:63:b5:7d:78:61:32:5f:da:
13:89:30:a4:89:07:52:a4:f8:87:af:f4:b9:44:49:
17:21:d0:0e:ee:61:cb:83:8b:39:6d:20:13:22:76:
c6:67:95:60:45:36:c3:50:44:5e:d0:7c:36:59:6b:
b4:1e:14:7d:9a:e1:73:e4:76:70:5f:b9:92:14:36:
6b:58:ce:57:aa:c8:1d:b2:4c:df:8c:59:53:5c:43:
19:1b:61:d2:98:8e:73:0f:09:db:1d:05:7c:eb:fd:
b1:44:e8:5c:65:d1:7d:2a:12:a5:57:ed:f5:b8:67:
0d:4c:03:b0:1d:26:4d:2e:f4:d9:b5:b7:be:fa:06:
50:69:a1:75:67:b4:d1:d4:ff:77:76:5c:35:05:17:
14:c5:08:3c:cc:9c:e1:5d:b9:11:be:bd:2b:9b:1d:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B6:DC:BB:70:EF:1C:57:5F:59:43:50:B4:CF:77:3D:7D:7A:0D:01
X509v3 Authority Key Identifier:
keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f8:ce:ce:d3:fa:c6:8b:38:99:c6:b1:dc:60:e9:ff:86:b3:
6e:8c:a6:ad:01:67:8d:23:5d:b3:11:5c:0c:4d:41:2f:7c:7b:
0f:36:69:53:d7:70:6d:0b:81:18:37:13:17:6f:3a:d0:52:09:
12:7f:73:98:be:f3:93:7e:e4:67:e2:e7:75:d1:ed:ef:11:aa:
fc:fb:93:7c:8a:5f:05:dc:0c:a6:bd:29:c3:cc:7e:00:5e:22:
34:0b:5e:0f:77:c4:72:51:8b:4c:99:34:fd:e3:a1:7e:30:a3:
df:b7:b2:c5:78:98:1f:96:f0:69:19:47:b4:fa:60:24:bc:98:
8f:3d:e3:eb:ae:8e:ba:2a:2f:17:75:4a:ba:3d:81:34:f4:9b:
0e:64:f5:71:70:73:8a:a8:28:33:7b:74:63:f9:2c:b9:45:bd:
02:bf:e1:7a:ad:70:34:d5:7e:16:bb:da:78:cf:14:0e:bc:2a:
48:56:eb:31:8a:36:63:18:10:ee:79:ba:ed:ef:70:a9:df:c2:
53:51:de:89:36:75:32:8f:b0:ab:98:5d:6b:4f:5a:29:1a:a6:
36:bd:2f:43:ff:86:a2:47:70:b5:59:2a:bc:4d:89:56:04:b2:
aa:0f:cf:96:ae:88:ff:8f:a6:d2:b0:16:86:8a:ba:9d:e0:a6:
64:ff:02:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:10 2025 by rpki-client