Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
File: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft (raw, json)
Hash identifier: j9fhPwz7UjyppldCfEcjBqhyXZwH1+IIMfui/1LLenA=
Subject key identifier: 6F:EB:2F:36:82:70:64:74:9B:E0:4F:D7:17:B1:9E:E4:D6:E8:C6:25
Authority key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
Certificate issuer: /CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Certificate serial: 019A4FD0660B67569E1C66F7EC445A9AC175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
Manifest number: 02FB
Signing time: Tue 04 Nov 2025 17:00:48 +0000
Manifest this update: Tue 04 Nov 2025 17:00:48 +0000
Manifest next update: Wed 05 Nov 2025 17:00:48 +0000
Files and hashes: 1: FRrrM4yAfnu6pnFh5wowlvqVDWA.roa (hash: Hv8/4ynB8VDf7OX62BWXwwqyCndg3mMaA+WdwhpJSlw=)
2: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl (hash: obBUkZq4LP1DweHFwy8zt4u3ObsGYzlvdeuKlDKXGSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:66:0b:67:56:9e:1c:66:f7:ec:44:5a:9a:c1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Validity
Not Before: Nov 4 17:00:48 2025 GMT
Not After : Nov 5 17:00:48 2025 GMT
Subject: CN=6feb2f36827064749be04fd717b19ee4d6e8c625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:ec:40:7d:72:ba:3a:36:02:ad:6f:4c:a5:
56:03:e1:64:11:e4:b7:76:f5:9c:62:64:de:4d:ac:
f0:3a:19:c8:6a:1e:36:63:6f:14:59:1b:e4:aa:d3:
b9:7f:de:55:af:1f:df:7d:57:79:68:0d:88:1b:29:
f0:e9:e1:f0:d0:17:62:80:13:7b:8b:30:dc:f2:be:
8e:d1:f9:f7:00:11:71:44:da:06:68:d5:bc:e3:61:
10:74:de:ac:55:c4:60:8e:3a:9f:92:d6:f5:b0:61:
4a:35:28:9d:25:66:75:54:be:06:e9:a0:26:3c:92:
c8:07:54:3c:b2:0e:0c:0d:13:e3:fb:9e:37:be:8c:
ce:66:28:8b:35:cc:25:a2:9a:43:27:53:e0:2b:62:
f6:43:2d:f9:aa:ee:6f:46:18:7a:d5:df:0e:2f:50:
7d:22:51:1f:da:0e:fe:9e:f5:64:a1:72:c9:49:76:
17:1f:15:21:4d:54:76:92:90:1f:78:8f:ba:ed:22:
42:fa:1f:fd:22:2f:6e:59:c4:21:c7:e0:68:95:ca:
46:a3:54:37:74:82:33:b5:9f:15:6f:1a:5f:29:0e:
05:09:5e:7d:cc:e9:83:cb:63:b6:60:d0:74:b7:39:
d0:02:b9:c3:71:c6:a6:9d:47:c1:c1:90:91:93:8d:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EB:2F:36:82:70:64:74:9B:E0:4F:D7:17:B1:9E:E4:D6:E8:C6:25
X509v3 Authority Key Identifier:
keyid:62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:24:c1:51:34:98:15:be:ba:d9:04:f5:c1:04:21:48:43:9a:
5c:a9:db:cc:12:c6:73:79:58:73:03:ef:ca:ac:09:fc:8d:a1:
1a:3c:49:2a:69:3c:3f:30:02:60:65:60:8f:21:7a:0b:5c:41:
e1:b7:7c:62:d9:b3:c3:24:d8:5f:a2:0d:d7:c5:42:5b:d0:16:
59:ad:cd:9b:f8:da:25:d4:e7:16:72:2d:1b:e7:08:45:95:16:
cb:53:b6:24:52:41:da:93:6a:d3:cc:02:03:2c:a2:fa:45:a5:
6b:e8:72:6f:d4:c8:09:e9:99:ea:95:95:24:ae:51:15:21:ff:
54:7d:57:5b:a0:d7:04:70:a3:d1:a5:9b:19:1b:73:59:0e:60:
5c:48:2f:1d:55:85:af:3b:96:30:a1:37:d1:c4:08:62:09:b5:
45:5c:ac:b9:31:9d:81:ae:5c:4d:a4:56:c4:93:f4:66:c2:34:
53:49:23:96:92:29:5d:99:9b:5a:aa:79:26:ac:9b:48:1d:0f:
97:e5:ee:96:0e:1d:59:63:e3:43:05:c4:d9:29:80:3a:2f:c6:
1a:4c:f6:b1:d3:a2:ab:ac:7b:a0:40:66:63:db:1f:bb:75:eb:
55:e0:90:19:c6:9e:73:8d:ae:e5:0b:9d:47:b6:41:fd:71:cf:
37:0f:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:08 2025 by rpki-client