Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: w/zYpve9f9X8+2a5EE5cMJhV/dmRBzOO/H52Kj8BiT4=
Subject key identifier: E0:ED:BD:00:BD:5A:D1:BC:B4:7D:89:F5:EA:D5:BE:4E:A7:78:27:00
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 019A511978740A4FF6B34A987EAC504C71DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 09ED
Signing time: Tue 04 Nov 2025 23:00:14 +0000
Manifest this update: Tue 04 Nov 2025 23:00:14 +0000
Manifest next update: Wed 05 Nov 2025 23:00:14 +0000
Files and hashes: 1: MwOTM4NTpYgqtlsKuteambtyY6Q.roa (hash: 15PRhJOGtpjQfaXM28ile3ZgmOfmdwLuAPfdRlgIuMk=)
2: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (hash: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: daBZtii8O9BBvGWoAW1/sDH5O3uiX7E1LDKQJ7ippyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:78:74:0a:4f:f6:b3:4a:98:7e:ac:50:4c:71:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Nov 4 23:00:14 2025 GMT
Not After : Nov 5 23:00:14 2025 GMT
Subject: CN=e0edbd00bd5ad1bcb47d89f5ead5be4ea7782700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:13:67:16:45:9d:ef:53:3d:07:1b:c9:6b:
ed:58:fa:93:f0:a9:77:35:a8:e4:97:1c:7e:aa:3e:
b2:4c:6f:8a:93:c6:16:ca:2e:d8:5a:f4:a5:ed:76:
93:e9:f5:b1:44:c6:59:2d:5a:04:73:49:84:e6:ed:
f9:b2:df:64:53:c6:17:bf:d5:fe:6a:17:eb:e6:ad:
e9:d1:50:7c:a2:1a:85:25:a4:f8:3a:0e:97:4b:ab:
27:2b:28:c5:d9:b9:96:fb:3e:32:7a:e6:62:6e:7a:
a5:41:3b:ff:55:ce:ea:75:0b:dd:b2:11:9b:52:09:
c5:f9:19:90:3e:6f:80:aa:5b:74:c2:f4:b1:7a:1f:
b3:de:17:7c:c1:f8:d0:8d:54:1e:a8:0e:76:52:f6:
b8:2d:a9:07:cb:d6:ea:de:b5:c7:8c:53:41:2b:e5:
38:64:45:b0:76:75:33:6a:3f:16:54:13:c5:4e:53:
9b:03:4f:55:23:ca:25:8d:92:2c:2c:4a:3a:62:3a:
40:24:bb:15:5a:2a:80:46:c2:12:3a:d2:82:5b:ac:
43:f9:69:b4:b8:fd:6c:92:7d:ba:c3:bd:d7:30:2e:
bf:db:84:fe:4d:b8:03:47:d6:ef:9b:91:cb:b2:df:
13:fc:28:37:d8:2e:ea:00:86:11:9d:4a:42:7a:8d:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:ED:BD:00:BD:5A:D1:BC:B4:7D:89:F5:EA:D5:BE:4E:A7:78:27:00
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0a:1b:2d:47:68:f3:9f:25:86:d5:8c:99:a8:4e:f4:67:0c:
38:cc:7a:3f:be:7c:ad:a2:66:fe:ee:74:28:f1:5f:eb:c5:c7:
86:2a:5e:c3:27:c5:42:e6:54:88:ef:5b:49:4e:78:a0:7d:e4:
cf:89:b5:7b:00:bf:7d:c7:e0:09:da:e0:21:a5:af:45:7c:a5:
ee:b0:94:65:e4:09:4d:7a:e2:bd:3f:35:16:1f:62:7b:cd:58:
e2:0a:d7:47:90:90:24:89:af:ac:d5:a9:fc:36:5c:bf:07:c6:
79:0b:2a:b6:08:e8:f9:c8:fe:f2:51:65:a2:01:fa:03:da:4e:
7e:fa:95:1c:06:39:00:cf:e9:ed:e0:4c:8d:cd:3b:c2:c5:d5:
2d:d6:4f:3c:4e:f4:59:75:35:c6:3f:94:7c:1d:fe:ba:6f:b3:
8d:92:b7:50:3b:9e:6d:59:54:79:15:b0:d6:7b:cf:59:03:4c:
07:22:e7:68:e1:9f:79:67:59:11:1c:f7:ab:d8:b4:c0:55:22:
04:40:17:e6:18:36:ac:71:b2:4d:1e:aa:9f:34:42:c0:5a:9b:
91:0c:77:2b:0e:d0:ac:9e:e3:52:a8:35:bb:52:e1:f0:23:d5:
eb:1a:c5:6e:60:87:fa:22:98:b4:40:56:82:8e:6a:62:10:0c:
b0:ab:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:09 2025 by rpki-client