Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: Bp2lMfSV41/enFvatuZxI4Xrvs1MXjkqXHeanf44Ahg=
Subject key identifier: BE:38:6E:5B:11:45:30:D5:0D:95:AE:7D:1D:08:4A:C8:ED:52:D4:06
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 019A52D1C64AAD7EDED85DB3A423E4E6063D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: 02E1
Signing time: Wed 05 Nov 2025 07:01:10 +0000
Manifest this update: Wed 05 Nov 2025 07:01:10 +0000
Manifest next update: Thu 06 Nov 2025 07:01:10 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: wXLzaH4o82WOtiKFMeS9/TJrJYVgJRBz3RfPJwpt6G4=)
2: wK5U0OA4so9Bb6LaTOAhvYcrZbw.roa (hash: i3F3Ec/aHEk6lLvyEsCOnZPx8LpXq7mO54DzXI/2qs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:c6:4a:ad:7e:de:d8:5d:b3:a4:23:e4:e6:06:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Nov 5 07:01:10 2025 GMT
Not After : Nov 6 07:01:10 2025 GMT
Subject: CN=be386e5b114530d50d95ae7d1d084ac8ed52d406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:73:6d:5c:57:84:37:b0:60:70:02:af:bb:
37:ef:f1:fe:d6:d7:91:aa:5d:ed:6c:67:d9:44:6c:
0a:86:50:78:8f:ff:e2:3e:9f:6b:44:03:b3:d8:66:
b3:10:f0:8f:b0:88:38:d3:d0:ba:a7:58:7b:98:ab:
83:f5:49:f8:95:ff:cc:e6:f0:33:8e:34:8b:b8:0f:
05:4e:51:ea:a5:bf:e8:37:84:f5:c5:70:e2:f0:00:
e5:f8:2c:01:69:9f:06:ed:00:7d:8c:3c:6a:c5:73:
40:45:e5:51:96:7a:0b:76:45:7e:56:43:9a:7e:c2:
dd:1c:08:b2:f4:e9:4e:e0:ba:06:b1:c8:37:61:5b:
29:55:81:e2:e5:28:1a:de:7b:b3:8d:bc:25:af:c4:
ff:ab:c2:62:6f:c2:10:df:a8:59:a4:36:97:1e:4d:
c1:5e:e8:28:bd:ff:f1:4e:86:22:81:71:e5:ac:1b:
29:00:8e:c1:56:b4:25:07:bc:f2:8c:73:f9:69:df:
bb:65:6e:f1:f4:92:bc:26:0a:0e:7e:43:f4:a8:5d:
ce:1c:f8:95:16:3f:18:bc:79:8f:3e:f2:64:af:fe:
a2:c2:72:20:10:99:80:90:e1:7a:96:b4:1f:8a:c1:
64:c7:65:e1:54:2e:cc:89:fb:8c:25:00:8a:93:20:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:6E:5B:11:45:30:D5:0D:95:AE:7D:1D:08:4A:C8:ED:52:D4:06
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b2:1a:fe:c7:b1:0b:6a:18:ec:bd:54:06:06:fd:38:0a:6e:
c2:b8:b0:99:5e:0f:10:9d:7d:c0:30:ef:a2:62:b8:7e:03:40:
08:98:f8:51:d0:3c:ce:39:70:96:1d:b5:e4:f8:51:81:87:7a:
46:85:74:b9:87:79:34:10:99:75:24:5d:4d:fb:56:ef:c7:8f:
06:2e:8e:cc:c0:5a:1e:2f:9d:21:18:61:bc:f5:3f:28:af:d4:
26:b9:be:d6:d3:ba:eb:2f:bd:6e:ce:1b:75:1a:8a:44:c2:59:
bc:d1:e8:00:ac:2d:8a:2b:25:ea:59:97:5d:da:42:cf:22:f4:
65:07:bd:b9:62:25:98:63:99:24:84:17:ad:d0:25:04:3f:7e:
77:cf:1b:be:03:5c:79:42:d6:95:bd:77:ff:fd:c6:4e:9c:32:
cf:39:39:0a:12:c6:c5:a3:4d:66:2d:39:89:c8:4b:63:37:21:
51:95:63:42:d9:ed:8a:78:5a:7a:4e:84:76:0f:f8:06:ea:fc:
92:cd:a3:94:27:e6:01:3b:93:7a:09:17:6f:f1:13:3f:be:5c:
54:64:b3:ca:dc:e0:48:fb:cb:fb:f5:0d:d0:91:6f:a3:d2:16:
2b:42:8d:c0:db:4b:8e:4d:8f:59:8f:c6:5d:cc:42:dd:ca:54:
2e:05:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:52 2025 by rpki-client