Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
File: YbGV0TBQ_zxGihSXeHELU1giUdk.mft (raw, json)
Hash identifier: /STfWqC/yxi+YfSZ5sTwTKefL+8KCuZTAFv4JHhlR2k=
Subject key identifier: 7C:14:34:45:3D:ED:AB:74:83:ED:2B:9B:C8:DA:4D:67:B9:DD:AE:02
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial: 019A4F6257DB0BF56155043E04A7847DCE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 15:00:36 +0000
Manifest this update: Tue 04 Nov 2025 15:00:36 +0000
Manifest next update: Wed 05 Nov 2025 15:00:36 +0000
Files and hashes: 1: Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa (hash: q1LYdMsfXSEFkYw+v/2PtBLKm0CXtMVR1H0DEe1ErnY=)
2: YbGV0TBQ_zxGihSXeHELU1giUdk.crl (hash: X0OGzJiTry/K07dlY0cX4o6pp1EZqrK4T2uG7fGxdhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:57:db:0b:f5:61:55:04:3e:04:a7:84:7d:ce:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
Validity
Not Before: Nov 4 15:00:36 2025 GMT
Not After : Nov 5 15:00:36 2025 GMT
Subject: CN=7c1434453dedab7483ed2b9bc8da4d67b9ddae02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:93:ea:9a:ac:1b:68:23:64:7c:2c:87:42:7b:
1f:0f:ca:90:5d:cd:a4:af:0a:e3:1d:93:dc:ea:88:
e8:fc:35:5c:a9:b1:a3:48:1d:3c:ee:98:51:9f:47:
63:65:eb:4a:89:76:4e:f8:c0:53:19:b6:34:f8:0f:
10:76:b5:91:84:bd:11:a6:b6:93:39:fc:4b:3d:a7:
c9:20:4b:aa:c7:ec:8f:64:cd:13:7d:9e:9f:51:43:
4d:b5:2d:fc:f8:35:04:2f:2b:21:9e:2d:f0:32:de:
2a:0b:ba:a0:c3:24:b1:ae:40:22:01:3e:13:4a:ff:
4c:bf:44:7a:17:f7:ba:00:74:f9:9f:e0:9e:37:cd:
72:f7:04:13:7f:94:a0:13:d0:a5:3b:60:b7:8a:42:
6f:4b:ea:21:6f:6d:b6:3d:b7:34:01:9d:93:0e:b3:
45:7d:6f:11:6d:6c:72:2c:9b:a9:55:b1:a7:9f:38:
93:52:55:24:d4:c6:b7:bb:84:33:a1:0e:b0:07:81:
3b:bf:ea:72:3b:8b:3f:80:db:2b:0b:cf:68:e1:fd:
88:6f:a0:d7:03:35:9d:f4:35:6c:93:03:94:a3:f8:
92:b3:01:69:81:56:4f:1e:12:3e:02:5e:ab:13:ae:
22:0a:2d:09:0d:00:d2:0c:34:6d:a2:dc:de:89:65:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:14:34:45:3D:ED:AB:74:83:ED:2B:9B:C8:DA:4D:67:B9:DD:AE:02
X509v3 Authority Key Identifier:
keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e6:42:1b:5a:34:74:9c:2e:26:af:48:78:c4:cd:93:4a:65:
14:a0:26:8d:37:aa:10:e9:b1:1e:ca:e1:5e:80:7c:00:33:a2:
fb:57:20:f4:4a:eb:a1:2f:c1:74:9b:53:a1:96:99:08:36:42:
73:cd:d6:59:f2:2d:5b:02:03:61:62:82:5d:43:6f:e8:0f:01:
3c:99:64:b7:d1:c0:76:1b:71:d9:bd:aa:25:78:29:e1:e5:b2:
da:dd:c0:fc:ef:c5:36:93:ef:01:9c:c6:dd:46:f4:fd:e5:6e:
1b:30:07:c6:3d:fb:8e:78:c3:1c:d0:ce:7f:65:8a:df:ca:ae:
83:32:0f:f0:16:6d:e0:bc:9c:5f:2f:9b:40:c9:cb:52:ad:39:
7f:1b:e2:6a:10:fa:9a:7e:ae:26:00:e5:eb:20:41:54:12:7c:
b7:bf:43:77:40:d6:d2:17:e6:93:60:8e:12:ce:72:2f:7b:65:
a7:73:3a:22:b7:7d:32:1a:2b:fd:f0:64:c0:63:4e:7a:48:8e:
f7:74:d4:e9:d0:db:04:c2:36:2e:c8:96:df:1a:e5:2e:25:19:
64:3b:0a:e2:bc:81:11:38:ce:71:fb:12:54:2b:58:67:e2:08:
5e:77:71:85:53:7e:49:75:57:d6:92:77:cf:c4:a0:f4:09:41:
9a:0f:93:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:55 2025 by rpki-client