Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: gwIxzqHuT3wFaU2rOple/m84NMlBVVcpl6MjP52ms70=
Subject key identifier: F1:B0:57:80:63:98:F3:0F:CD:01:DC:93:41:D8:6F:4E:07:F2:91:D9
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 019A4F2B5C22F7C191EA45B7DFFA597A9DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 14:00:32 +0000
Manifest this update: Tue 04 Nov 2025 14:00:32 +0000
Manifest next update: Wed 05 Nov 2025 14:00:32 +0000
Files and hashes: 1: 7vWonm9bF5IcZc4b_JwarXdqm9s.roa (hash: hJURA5qklA/bOkBC37NwKVvc+QzGI8iekbBVx5yVdVA=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: 3AtqujurCZ+AncdpNCA5fthcZJlaYHAMwb0as09aNZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:5c:22:f7:c1:91:ea:45:b7:df:fa:59:7a:9d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Nov 4 14:00:32 2025 GMT
Not After : Nov 5 14:00:32 2025 GMT
Subject: CN=f1b057806398f30fcd01dc9341d86f4e07f291d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:80:cd:78:f4:14:2e:b1:08:57:57:66:02:
54:91:e2:7b:cb:9b:28:3f:26:20:3b:64:e8:e6:4b:
9c:a4:3f:88:e4:5f:04:5f:dc:bb:88:f5:f7:e4:e3:
c9:e4:71:f8:76:39:b4:13:9c:af:73:6f:01:04:c5:
3a:25:bc:f5:a7:6c:22:35:c6:f5:eb:3a:ea:77:05:
b6:7a:82:61:57:15:fd:ac:7e:e4:67:43:38:4a:52:
c9:81:96:38:38:a4:90:c3:34:11:ab:02:73:a2:9a:
1b:f7:8b:c7:11:21:96:96:1b:24:f9:22:45:39:0e:
26:13:fa:31:ae:6d:e6:26:6b:5f:7d:65:e9:7b:f9:
72:00:08:15:8e:9c:39:f0:c9:d5:c5:3b:4d:e9:c5:
60:2e:d0:83:b2:50:e5:28:0e:b3:a0:46:20:98:ea:
48:2a:fa:14:02:81:78:06:87:ec:1c:7f:80:01:19:
85:a0:88:5c:b4:a7:82:46:89:36:c7:52:97:17:57:
45:bf:04:82:85:1c:03:82:24:a1:b8:7f:89:0f:e5:
ef:56:2a:fd:e3:27:e6:d6:34:2d:88:42:e9:41:7c:
30:11:1f:3b:5c:1c:c9:0b:af:77:18:41:b7:a7:5a:
ba:b5:2b:a8:9b:6d:ff:df:e1:7e:80:1b:88:02:de:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B0:57:80:63:98:F3:0F:CD:01:DC:93:41:D8:6F:4E:07:F2:91:D9
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:24:ca:30:2e:b5:e4:ee:d5:09:d5:12:db:b6:ef:21:29:a2:
06:ea:8a:82:ce:7e:ee:12:0e:4a:ee:45:49:ad:a6:2e:7f:d2:
17:63:f3:62:b3:31:a7:bf:b8:29:09:c9:d8:b7:7d:27:86:a1:
b0:ad:16:6c:38:07:9e:f3:9a:e3:74:d3:aa:c4:d7:a0:fb:55:
53:58:4d:b5:fd:bf:c7:76:d5:c2:bb:95:03:6f:86:85:04:af:
5a:08:52:8b:14:96:e1:59:ac:44:9c:45:6a:5e:91:18:a8:a1:
df:97:7d:5a:fb:a7:73:35:4b:9e:1f:26:d1:d9:9f:e0:fe:39:
53:57:8e:95:f4:5c:06:89:c0:ac:a4:c7:9e:6d:55:3b:ac:6d:
b1:60:06:16:f4:e6:28:bb:c5:1a:a2:d5:7b:2c:51:4b:b7:c6:
f2:16:bf:80:c7:fa:c4:57:e5:47:a8:67:cd:1d:50:e5:ca:17:
25:3e:8b:f5:4f:e8:32:88:0f:f1:6f:03:2d:1c:6d:e9:76:a8:
77:ec:32:51:82:c7:24:94:2f:a1:fd:e1:d5:1e:b4:60:24:3c:
75:95:15:1b:a3:f1:a7:c1:7b:5b:f5:c9:d0:04:15:47:8d:50:
4a:d6:67:de:04:43:05:f9:5a:4b:c7:99:5d:ff:18:e8:2d:b1:
bb:f3:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:15 2025 by rpki-client