Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json)
Hash identifier: lkQJ+CWQLszFWdcuVUBsw4NdGgLE/mEpNR8LSC1VEME=
Subject key identifier: 48:5C:3A:75:53:6C:CD:17:2E:BE:7D:18:A1:BA:6E:E8:45:78:E4:43
Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Certificate serial: 019A51503BF1BB79E38D5EF48FFDDCFC06FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 00:00:03 +0000
Manifest this update: Wed 05 Nov 2025 00:00:03 +0000
Manifest next update: Thu 06 Nov 2025 00:00:03 +0000
Files and hashes: 1: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (hash: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=)
2: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: FtTbey/cHsUOrqGVF49ItqjoFccb93ZAp9iFjtadKS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:3b:f1:bb:79:e3:8d:5e:f4:8f:fd:dc:fc:06:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350
Validity
Not Before: Nov 5 00:00:03 2025 GMT
Not After : Nov 6 00:00:03 2025 GMT
Subject: CN=485c3a75536ccd172ebe7d18a1ba6ee84578e443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:4d:cc:cc:9e:64:2e:e1:39:05:d5:6a:ae:
ef:0e:77:e5:e8:dc:19:0d:b8:49:d1:39:1f:ba:e7:
6c:fb:ec:44:00:61:65:d2:80:37:5d:bb:97:44:a4:
70:33:5d:fe:e1:13:1b:66:7f:f0:47:63:b2:62:93:
88:c3:b5:a5:52:08:5d:7f:50:36:39:fe:aa:ad:99:
c5:3e:a0:91:aa:df:8e:5d:c3:b8:58:b2:64:7d:db:
3d:36:2e:b7:5e:c1:0b:69:ff:b0:84:e5:ff:93:6d:
b3:24:ca:4f:05:49:96:6c:fb:10:c1:a7:df:04:ac:
cf:42:58:2e:c9:ae:65:12:94:c3:e4:fb:00:1a:ed:
12:39:93:46:86:d1:c9:c5:37:fc:c0:3d:8f:f1:1b:
37:2e:d9:13:b0:97:58:64:70:c1:95:06:ff:2f:e7:
af:85:af:bd:27:f8:23:b0:4d:de:8b:02:67:39:24:
fe:11:3c:6b:59:08:9f:ac:6c:e3:d2:3f:4b:04:ef:
f0:ca:ad:9d:46:f7:df:71:93:07:ae:03:0c:a3:0e:
8d:07:06:a6:ec:07:4c:cc:42:03:f1:d8:89:d1:c5:
88:e1:af:de:c4:2a:29:85:66:b7:c6:88:1a:4d:75:
d5:fb:77:13:4c:3c:9f:5e:80:bf:df:fd:59:e0:ee:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5C:3A:75:53:6C:CD:17:2E:BE:7D:18:A1:BA:6E:E8:45:78:E4:43
X509v3 Authority Key Identifier:
keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:71:7b:12:7a:85:9a:49:1c:e3:fb:f6:16:d7:74:07:10:ee:
2d:a7:1b:61:ca:c6:76:6f:ea:7b:0e:d2:f9:2d:f9:92:65:d9:
0e:31:ac:7b:d0:dd:ac:44:3a:6b:c3:0a:21:1b:af:1a:95:94:
b3:b0:7e:c9:b7:cc:d6:50:ba:f1:5c:1f:20:b0:44:b9:5e:a7:
d8:84:60:29:dc:dc:2b:37:47:30:fb:1a:73:52:81:05:69:b0:
2d:bc:68:e8:27:68:72:c7:92:d0:35:a0:46:41:6e:45:62:97:
5a:b3:17:47:16:55:34:af:c3:97:bd:1b:f5:e9:53:a0:b1:0f:
37:8f:35:e9:22:e1:4a:4b:be:03:ed:e5:2f:e1:5f:37:6f:54:
9d:d2:17:4b:ea:81:99:c9:26:e9:6f:9e:09:1a:ef:f8:41:ab:
d7:d3:f0:a3:c9:89:f6:9d:9d:e2:b9:70:0f:5c:9c:fc:80:d6:
27:76:33:5c:d9:8a:4c:7b:a5:1d:7f:75:6e:f1:3b:a1:75:87:
94:12:45:28:57:c2:f9:4c:c3:58:2b:9e:54:83:61:12:55:c0:
e2:ce:43:e7:2d:1c:54:ef:9a:df:a4:df:38:92:33:88:c2:96:
1c:a9:82:41:49:b7:75:31:99:11:3c:f2:83:92:70:a9:41:af:
43:d5:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:46 2025 by rpki-client