Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: QIaLqJufHvikulsYI44D/MpuPijJaIeDZ/X8Eic+n+A=
Subject key identifier: 8E:51:A5:A1:F6:8B:04:40:34:3A:87:24:2B:87:AE:F2:0B:AA:C9:5E
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019A4E18767FAE67C1028455DE82D43F74FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 0660
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: BWZ8TffzeheUILd5O5vwxA8ANgs.roa (hash: 9mVvCij2ArMXMv49a46m8ltBnU+gbtg05+eZlvNEdYk=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: G3npNmWWGJfjxXNIY0M1khbTVYFvB+xZ8wcEG+HbK0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:76:7f:ae:67:c1:02:84:55:de:82:d4:3f:74:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=8e51a5a1f68b0440343a87242b87aef20baac95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:63:80:42:3e:95:95:fc:c7:12:fa:f8:54:
0e:ef:d6:36:ce:cf:ce:52:8f:13:4a:4d:f4:95:7e:
9b:9f:c3:11:b1:a3:83:3a:d1:68:cb:48:d3:0b:0c:
ba:19:8b:40:0e:63:c4:64:c2:83:7b:c2:96:ae:4d:
61:e2:91:89:c8:c8:9a:01:5c:5f:e1:22:d8:18:49:
a4:9a:5a:86:60:a5:04:a4:44:5a:44:8f:c0:48:2d:
f3:2f:48:5c:61:90:a8:8a:d6:75:a8:51:c1:9f:a7:
86:bb:fd:ee:9b:6c:1e:c4:25:4f:ce:34:f7:c1:ef:
c7:e5:9c:57:ab:1e:32:40:aa:e3:80:30:03:bb:9b:
ef:58:f1:3d:6c:15:7e:b4:ab:e5:0f:50:d7:10:d7:
13:58:86:27:b9:74:e1:df:36:28:d3:fa:1b:67:b7:
39:7e:01:a4:fd:1a:1f:07:9f:29:3f:42:e1:07:da:
ba:b2:b2:9d:13:e2:1f:a5:ab:aa:01:1a:c6:08:0d:
8f:fb:23:98:0e:f4:e5:64:e2:df:6a:b5:a3:c0:57:
af:f5:49:c9:0c:73:6a:6c:7b:b5:08:b3:4b:f4:c5:
a0:13:d4:f9:25:12:b3:d8:9e:3e:0a:60:53:ac:ac:
15:08:be:10:e5:87:e5:ae:17:db:64:57:a6:8e:6a:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:A5:A1:F6:8B:04:40:34:3A:87:24:2B:87:AE:F2:0B:AA:C9:5E
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:35:f0:ed:a3:f3:68:8f:11:c2:2e:e3:a2:d2:69:fe:17:3f:
2f:db:e3:fb:fe:76:c4:cc:31:c5:88:a4:45:bc:8d:00:ed:58:
b2:97:78:5c:25:42:71:13:a4:81:6e:2b:10:24:9a:05:34:ce:
a4:f7:0c:73:63:3d:77:18:a6:3f:63:5c:5f:cf:5c:5b:9b:d0:
48:11:d0:9d:0f:87:7a:a2:4f:8a:aa:7e:ad:8a:75:d3:7d:4f:
3e:a5:da:c1:8d:f0:0e:51:97:74:53:c8:48:5f:15:04:c7:38:
82:de:de:aa:d7:28:3c:3e:e7:5e:01:ba:bc:cb:c6:77:76:2d:
3c:4a:26:c2:9c:6e:76:90:30:e6:22:b6:e0:17:39:5e:15:81:
d9:11:f8:99:d9:11:6d:6f:38:fd:c1:57:09:d3:9e:9a:9c:19:
2a:3f:00:7d:c5:93:d3:7e:61:c3:46:37:16:c9:b6:79:65:ed:
ec:fc:0c:00:72:61:0f:7b:52:5a:99:e1:28:f4:9f:2a:59:4a:
67:71:16:a6:ce:e2:de:47:d5:da:c5:8f:ff:ef:cf:15:fa:6c:
5b:b8:d1:f0:5c:27:c1:8a:2a:2b:58:f8:5f:73:f3:5c:53:3e:
b4:78:7a:c8:25:80:fe:bd:d1:65:2e:1f:53:3e:d6:6a:bf:d8:
b6:2c:76:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:41 2025 by rpki-client