Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier: bQVCoOlZPg3z4Z3R2S7/ZeOe2nspL86C60WBEZ57izY=
Subject key identifier: 67:97:9D:A0:4C:C0:DB:A4:04:EE:80:00:7D:2B:39:C9:3D:FD:83:E5
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 019A52637476A97A29E31AA8456C3C33F332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number: 01B1
Signing time: Wed 05 Nov 2025 05:00:40 +0000
Manifest this update: Wed 05 Nov 2025 05:00:40 +0000
Manifest next update: Thu 06 Nov 2025 05:00:40 +0000
Files and hashes: 1: 78p7eZsSQ8zonV0TNMaLaLjK96I.roa (hash: +QO+TKXARPaWdOJ8baQ83Q+fqGFHJ3lndWpB+9vwuT8=)
2: Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa (hash: s3KelrVfC9+y7bPujzwFv1EKOWZnruzzVkasMV5xnU4=)
3: Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa (hash: xVI7un3YDJ74QBZKCGBUFc9S59Re+F08cwvGlwnT43k=)
4: LuLOUOJIGHxq7ykgB21inUS-57w.roa (hash: ab5+eNLQ6Vj2WxgXbW4Ku3+IuOco/UzZZHvYaaD6UKw=)
5: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: 7x072JwP2Bl9rGO4nxhxR1aAUK00iAw7fh9nbXBsnFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:74:76:a9:7a:29:e3:1a:a8:45:6c:3c:33:f3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: Nov 5 05:00:40 2025 GMT
Not After : Nov 6 05:00:40 2025 GMT
Subject: CN=67979da04cc0dba404ee80007d2b39c93dfd83e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:fc:60:81:a1:cd:67:8b:f5:42:b1:cf:39:
f0:ee:9d:e7:e4:6a:5c:b0:65:4f:de:58:1d:53:94:
23:df:dc:66:b2:1f:f5:f4:a4:67:7d:c5:a1:07:58:
4a:9b:d6:79:95:ec:61:dd:53:ee:af:57:98:ac:e2:
79:04:20:39:30:d5:a0:a9:a2:66:aa:5a:16:65:59:
53:35:68:f3:4e:34:19:13:77:86:d7:91:fb:7a:7b:
e9:4e:af:80:07:00:a7:e9:39:7a:db:cf:8d:da:10:
49:11:5a:06:ca:39:69:2a:18:7a:84:45:57:1f:67:
fa:eb:5f:08:42:dd:c0:91:22:f5:7a:df:fd:a6:d2:
f1:0b:b8:6d:b6:ae:4b:44:a3:80:0a:b6:b1:de:b2:
f9:3d:d2:e8:19:10:db:5e:5f:80:96:24:9f:68:6b:
d9:2c:f5:7c:07:c9:1b:66:66:e5:1a:42:9c:fb:ae:
af:23:c7:65:93:38:ef:bb:30:94:d7:85:27:6b:7e:
92:b5:6e:3a:e2:0d:37:b7:5f:7b:14:eb:e1:5f:33:
b9:6f:aa:96:7a:d4:e8:98:05:67:e9:b9:bb:9c:7b:
d3:86:b2:cd:ae:9e:25:46:93:9b:1c:88:ad:c3:0c:
1f:a5:7a:84:ff:f1:8b:7a:fd:36:bd:8f:6d:e1:05:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:97:9D:A0:4C:C0:DB:A4:04:EE:80:00:7D:2B:39:C9:3D:FD:83:E5
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6e:a3:b9:e4:53:b2:ae:af:e2:2c:9e:84:1e:8f:72:83:6d:
92:04:a5:5d:91:a0:86:3f:44:a0:68:f0:a8:99:b2:4a:54:5d:
99:9f:5f:79:21:20:48:6b:c4:68:1d:3b:26:7e:ca:5a:e8:d5:
a3:dc:40:b0:a5:95:9a:bb:ca:18:86:f6:5d:0d:5a:7c:59:a4:
69:59:dd:e3:8d:c6:00:50:a0:45:1e:2c:87:7e:71:ed:d1:e4:
e4:2e:6a:93:a2:f3:f8:93:d8:98:3f:17:8c:99:53:10:33:07:
f0:07:34:56:a2:e8:28:68:0b:d5:50:04:73:70:42:4b:ad:fa:
24:55:59:ca:bf:f0:2a:69:ee:40:7f:78:01:b6:21:d2:8c:55:
3f:1d:53:36:4e:7f:27:11:01:de:87:9f:43:3d:ae:74:5d:dc:
9e:ce:80:d4:42:c5:b4:54:f9:b4:a3:58:a9:be:81:b9:30:dc:
c9:d5:3f:ff:5f:60:f6:de:0f:f1:bc:63:ca:4d:bb:31:3a:93:
ce:b8:dd:df:31:41:7c:b8:f2:5e:17:6a:6e:c4:96:f5:4f:1f:
92:0a:72:ba:32:a5:fe:e1:da:92:ac:7f:83:6c:ed:2b:cf:45:
40:8d:41:f1:f3:49:65:50:6b:d4:31:52:4a:3b:6a:a7:50:fa:
44:ce:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:55:52 2025 by rpki-client