Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: hbmpZZ9+9a8jmFUlkNV5PEfJPH+isDJFJ3FbGrEVFDI=
Subject key identifier: 72:B4:5B:F4:DE:2B:08:4E:D8:1D:6B:71:AE:D1:B5:EA:2D:94:05:08
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019A533ED1BBB68B125292F5243EBDB23CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 09:00:17 +0000
Manifest this update: Wed 05 Nov 2025 09:00:17 +0000
Manifest next update: Thu 06 Nov 2025 09:00:17 +0000
Files and hashes: 1: IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa (hash: b/cViJlJxKUPbwFvpzqTCCVlNXv5JOZkWmVOeYB/zSc=)
2: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: Lnp7hh84HV+/7teEC0dois6HCN2rJT48ErU/yiK8bks=)
3: t987O0pDHzvcsP9c7cARqX9qeU4.roa (hash: hXKjhjrksvE7FwT6RC0bILWOybHNXPXiwbfxF18ramw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:d1:bb:b6:8b:12:52:92:f5:24:3e:bd:b2:3c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Nov 5 09:00:17 2025 GMT
Not After : Nov 6 09:00:17 2025 GMT
Subject: CN=72b45bf4de2b084ed81d6b71aed1b5ea2d940508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:a7:10:d4:50:e7:d0:76:6a:cf:4d:06:89:
91:5f:bb:c8:a0:27:4a:f1:c4:c5:c7:78:dd:98:e7:
18:b1:9a:6e:05:d8:2b:2b:85:39:79:77:7b:53:d1:
ed:85:62:80:e2:71:37:06:1d:2c:69:a2:2c:eb:71:
0d:3e:a8:23:48:b9:61:0a:f2:d7:9c:ba:6b:46:f7:
df:cf:83:af:98:9e:75:10:fc:c9:ec:36:26:52:9e:
2d:d3:6a:8e:24:59:9f:3a:49:0e:b6:1b:02:4c:22:
b4:2b:b9:e1:e0:db:15:f9:de:46:43:a1:7e:9a:79:
cf:cc:e1:67:c7:46:94:07:ce:1c:f2:25:3b:6a:62:
50:df:e7:bf:73:fd:34:0c:0c:cc:cc:6f:61:f2:58:
a7:60:22:3e:6e:11:73:6f:68:4c:b0:e1:74:d4:ad:
f7:11:b0:86:1d:29:09:03:11:4e:7d:2b:66:29:01:
3c:b4:b0:53:67:ab:c1:a6:b0:50:4c:8e:6f:0b:21:
4f:68:40:35:a3:40:4a:86:d7:62:6e:5b:21:87:f4:
dc:2f:6d:4f:2c:d7:22:89:b7:da:19:ab:c3:8d:59:
ef:50:a4:06:5e:fc:10:f6:23:9e:61:d6:8b:af:18:
13:4b:33:45:38:e6:40:47:bb:cb:3b:67:13:6b:23:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:5B:F4:DE:2B:08:4E:D8:1D:6B:71:AE:D1:B5:EA:2D:94:05:08
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7f:18:c6:fb:d8:dd:c1:12:3f:31:3b:29:d6:0e:ab:f0:72:
e1:76:63:86:03:32:2f:75:95:31:0b:6c:1f:d8:20:40:da:0f:
9e:6d:c3:31:44:41:d6:d4:30:8b:49:b0:a7:ef:eb:68:1e:02:
66:11:89:ad:b0:f9:73:ff:32:24:a7:fb:70:e3:5f:9a:5b:44:
98:61:eb:85:7f:4a:0c:90:2c:34:34:0a:16:18:28:c8:2d:7b:
cb:29:81:b8:54:e3:a2:11:ad:f4:45:7c:86:a3:36:29:1b:ec:
15:c8:1b:f8:d8:3c:ac:70:a2:bc:3d:04:e6:ec:58:81:ea:6f:
c0:43:12:2e:7e:30:66:f5:e0:65:49:13:ce:b0:89:1a:65:61:
e8:d8:db:79:d3:37:6e:5b:e4:e2:e3:73:ad:95:a2:fc:18:4c:
cf:da:05:5f:42:82:3a:8e:a4:bf:be:8a:5b:3a:5c:2a:2b:ad:
b2:89:26:8a:d1:7d:a8:db:5e:15:0f:0e:ab:25:1d:2e:ca:94:
4b:50:77:96:13:3d:1a:70:eb:76:80:eb:94:75:c1:ac:ce:c7:
fe:43:69:88:3b:81:70:48:ad:5d:b9:5d:77:74:8c:f6:47:5d:
c0:d3:ef:c7:77:c9:88:49:67:fa:18:35:76:87:fb:8c:d6:4a:
df:55:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:48:03 2025 by rpki-client