Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json)
Hash identifier: cdBaGjAOxsqx9ripwpbEg5v72z/eUi7LxRJczfWbx1I=
Subject key identifier: 76:02:81:D8:67:B6:DC:BE:2A:75:EC:6C:41:56:CA:91:AC:5D:2D:8B
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial: 019A4FD01DABFAF984630CE15D86D279C498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
Manifest number: 0B6F
Signing time: Tue 04 Nov 2025 17:00:30 +0000
Manifest this update: Tue 04 Nov 2025 17:00:30 +0000
Manifest next update: Wed 05 Nov 2025 17:00:30 +0000
Files and hashes: 1: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: +P5N/imR0E5li46i0ZfL/E2qlA5D/yp3DXgmxj+u8hU=)
2: jYlgI_qcApYE3RAZAnK4EbiyzdM.roa (hash: xXRxHK1q9xpKOQP7dBVRrylt76oRLGOFXjW/2uY1+iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:1d:ab:fa:f9:84:63:0c:e1:5d:86:d2:79:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
Validity
Not Before: Nov 4 17:00:30 2025 GMT
Not After : Nov 5 17:00:30 2025 GMT
Subject: CN=760281d867b6dcbe2a75ec6c4156ca91ac5d2d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:da:ff:78:6e:41:b4:af:d2:80:62:2f:14:
7e:90:5f:dd:71:d7:ff:ad:32:75:71:e8:60:49:10:
8c:d9:90:8a:b9:b4:5e:00:1a:8c:f7:e4:d6:f9:a1:
90:7d:92:c3:e3:f5:56:3c:ae:ad:f1:fd:11:79:6f:
27:8f:32:16:53:0f:0f:2a:32:8b:6c:6e:16:d5:11:
05:8e:d3:b6:9f:a4:ba:ac:5e:1e:5b:af:02:d9:1a:
02:d2:73:38:b3:f5:ad:fb:2f:5e:c5:2d:83:e1:ef:
f1:5a:6c:e2:4f:1a:93:45:da:52:2e:90:9e:05:04:
30:ec:a8:2c:2d:48:d6:6c:2e:64:f1:8c:f5:e5:6f:
a9:d5:12:01:8c:08:af:2f:ca:c1:7b:a9:c2:ab:98:
1c:32:31:5e:8f:24:47:bd:06:05:c7:7d:f5:6c:41:
bd:ee:ec:de:39:15:ea:ad:ea:c3:44:2e:e8:b4:d3:
58:4b:d2:ed:12:36:be:e8:28:8f:cd:4f:90:ff:c6:
db:b0:4f:08:30:99:ef:a6:31:9a:4d:3d:ce:b8:77:
f0:7e:e3:5f:5e:ea:8e:e0:34:6b:49:04:26:b9:65:
2b:1d:f7:00:b4:e1:39:a6:a8:28:7c:21:80:94:f6:
69:24:d4:55:aa:9d:1b:87:bd:50:cc:ba:9d:69:32:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:02:81:D8:67:B6:DC:BE:2A:75:EC:6C:41:56:CA:91:AC:5D:2D:8B
X509v3 Authority Key Identifier:
keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4f:ff:77:52:6e:0d:06:c9:ab:81:b5:fc:07:76:2d:be:6c:
ba:45:fe:70:93:a3:32:db:c4:5f:b4:9f:a9:ed:42:ba:b0:ad:
b1:e2:fc:b8:d7:7f:b9:4d:91:b9:22:01:73:b5:0b:6f:2b:a1:
51:21:83:c5:26:b0:10:ab:8b:ae:e6:ee:c5:89:51:95:04:9b:
2e:75:a3:0d:01:f6:ac:cf:07:06:0b:f4:87:df:0a:32:15:58:
a7:be:29:3c:64:2b:63:45:82:25:db:a6:3d:99:61:10:cb:ef:
04:e5:61:19:e2:c9:cf:7e:29:d4:bc:5c:c8:36:85:c3:97:23:
70:2e:8a:41:f6:08:22:2e:39:d4:10:5f:f2:34:3a:f9:6e:81:
9b:0d:2e:e4:b1:cb:04:be:04:fc:87:83:35:10:5b:bd:45:a5:
d9:6c:d7:c5:61:b1:fd:e8:e6:9b:6c:0a:4c:e7:f5:0f:dd:28:
ea:23:60:4f:bb:cd:e3:18:9a:a0:50:6a:19:83:1b:0a:de:e4:
44:61:0b:d7:95:90:1f:1b:54:e5:22:27:e7:0f:27:bd:b1:10:
0e:e4:98:30:7f:7c:09:9a:f9:47:0f:4e:b0:df:71:1a:65:d2:
34:76:5b:5d:96:b9:86:2d:b9:e0:50:77:a5:82:39:e5:dd:17:
a4:b2:f0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:41:19 2025 by rpki-client