Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
File: YIYxT4djXnk7wuPbvtZkBbisZ3E.mft (raw, json)
Hash identifier: wCETWAEA3Sxm8yg0uE4lXR8QeVuiP1nNSH/b1+xefYY=
Subject key identifier: 00:F8:52:A3:34:D5:75:46:28:E7:4E:00:3B:5C:F8:03:2A:24:8D:81
Authority key identifier: 60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
Certificate issuer: /CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Certificate serial: 019A4F2B2F482C1F004CE0B5CBB41EC8343D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 14:00:21 +0000
Manifest this update: Tue 04 Nov 2025 14:00:21 +0000
Manifest next update: Wed 05 Nov 2025 14:00:21 +0000
Files and hashes: 1: YIYxT4djXnk7wuPbvtZkBbisZ3E.crl (hash: xh/0VEmlNKWCaWsxzuBupNnBI8c57TU19hKkxG8LjrA=)
2: ul5EPC9Jg-xhzDe3-EnpTxgh7Dw.roa (hash: pDodgoORM1hTtwe+JSl0g3mWRdcfDqaXlT1wiKFyqck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:2f:48:2c:1f:00:4c:e0:b5:cb:b4:1e:c8:34:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Validity
Not Before: Nov 4 14:00:21 2025 GMT
Not After : Nov 5 14:00:21 2025 GMT
Subject: CN=00f852a334d5754628e74e003b5cf8032a248d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:0b:3f:cd:2d:40:b4:32:55:7d:7c:21:98:
97:65:b0:88:ba:7d:e7:3e:57:10:22:b1:2c:d8:76:
1d:ac:c2:38:c6:19:18:8c:39:92:0b:65:d0:25:6a:
0a:ae:20:bd:30:0c:be:08:1b:d9:07:64:31:65:32:
f9:15:79:18:21:0d:13:2a:d6:5d:7b:f9:a1:aa:f1:
2e:9f:18:58:7a:33:eb:33:98:1b:ce:a9:ee:56:10:
23:b4:c9:ff:43:ce:11:9c:53:9f:9b:7c:5d:f8:5f:
cf:e8:b0:95:5c:f6:4c:22:0a:be:da:9c:ee:3d:d3:
81:0b:96:49:1d:7d:1e:0b:0a:f6:81:a5:1c:08:6d:
ee:36:2e:78:c8:d2:77:1c:f5:89:3c:79:46:d3:80:
df:4e:ea:25:c8:96:ab:b9:fe:34:53:5f:e4:68:ce:
fb:d4:e8:3a:1e:10:48:71:f0:f4:b2:05:e8:d0:65:
97:e5:97:ce:cd:ce:4c:98:40:ca:13:cf:bb:ff:80:
c1:3e:b8:5d:72:91:28:3e:57:b2:13:0f:5d:6d:c8:
85:12:49:22:34:22:4e:5b:b8:50:d8:9d:38:ea:52:
82:c9:d5:11:b1:21:f1:78:4d:6f:d2:30:5e:05:f9:
63:3c:1b:10:d0:a6:92:d1:df:14:d7:04:99:59:64:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F8:52:A3:34:D5:75:46:28:E7:4E:00:3B:5C:F8:03:2A:24:8D:81
X509v3 Authority Key Identifier:
keyid:60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1b:47:c2:f1:c8:69:58:df:0c:b0:91:b4:bc:4d:5e:d0:3f:
d8:71:74:7f:30:6f:7f:2d:10:b2:20:e2:be:f8:59:81:a0:04:
f2:9b:b1:33:57:bc:e0:a7:a6:45:33:15:3a:53:e0:08:67:e3:
d4:30:bf:20:6b:a0:27:44:d9:db:5d:0f:fe:6c:9f:43:0c:97:
54:de:b6:2f:23:5f:0c:76:40:a3:48:e0:dd:8f:52:66:2f:cc:
96:e2:a6:7f:88:fa:bc:4d:70:2c:a9:b1:6d:8d:5a:e1:52:11:
d6:c1:d0:95:7a:16:ae:e2:b4:62:92:29:75:be:6e:92:32:e6:
38:89:cc:f2:e6:50:90:dd:0e:82:5e:61:24:7c:f7:c7:40:b8:
f6:ad:f3:75:d4:96:82:fe:93:da:fd:c4:79:c0:45:79:80:f2:
46:4b:15:90:e9:0e:1f:f8:ba:42:f4:07:d1:ff:86:a3:14:ab:
ee:34:82:55:ed:be:8d:64:2f:d4:fb:b7:0f:5f:67:4f:25:e9:
26:86:7f:60:0e:50:09:06:93:9b:cb:3b:f2:12:55:91:a3:56:
f0:33:41:34:47:4f:88:dc:f8:97:38:0d:42:07:57:3b:e8:c6:
3a:ec:54:45:05:77:d2:db:6c:d7:5f:6a:d0:fd:e5:d6:ba:40:
7e:e8:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:43 2025 by rpki-client