Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier: MAT5ky3Os2XOcldv5OLpwJ3e17uiuXJW+rsaNZOKfAY=
Subject key identifier: B7:49:90:F5:53:B3:3A:97:A4:0B:C5:6B:42:D1:02:3D:FA:6A:3C:09
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 019A4EF45BB4C446BF0B566C2C82E8A43547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number: 1301
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=)
2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=)
3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: uM4phZamj2SQG1IqPVONMSbe+wKAge663AVXYKLULr4=)
4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5b:b4:c4:46:bf:0b:56:6c:2c:82:e8:a4:35:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=b74990f553b33a97a40bc56b42d1023dfa6a3c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:3a:e4:21:5a:7d:15:dd:85:83:a4:e8:21:
1e:8e:a0:84:a4:8a:7f:37:f9:6d:49:63:79:e5:c1:
c2:6b:61:a6:3e:6c:55:01:a2:21:1e:64:72:a0:c4:
87:e3:d3:c3:53:b3:bf:33:45:1d:05:47:a2:93:6d:
9a:bb:72:60:38:ce:a8:86:a6:cb:4b:1c:2c:e3:46:
61:d6:ec:cd:da:82:c2:62:dd:42:f5:5a:5c:6a:d6:
78:e6:93:e0:77:46:37:95:30:f8:28:13:d8:1e:91:
54:08:c0:22:4f:73:16:7b:f9:b9:42:56:d6:13:f2:
59:99:ce:cf:26:c4:5d:f9:16:dc:8e:52:23:f2:4b:
db:fe:8c:46:ba:34:e6:60:c3:ec:2a:c5:a7:70:8c:
14:79:84:d4:68:0f:f2:53:2b:a0:ba:f0:83:d1:86:
80:65:da:2b:12:bb:a5:97:f3:a9:d8:53:68:0c:74:
07:93:05:71:bf:ac:15:c9:79:39:30:92:5c:9b:13:
6c:60:ae:38:a6:b1:6d:af:b1:87:48:f7:6c:5d:54:
3a:d8:31:fd:2f:e5:60:e1:7e:00:3b:38:3c:fb:89:
d5:de:82:ee:4d:00:97:e4:0e:bd:eb:c0:b9:3c:db:
34:5a:0a:7d:b9:e6:a8:5f:a3:fb:d3:26:29:07:c2:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:49:90:F5:53:B3:3A:97:A4:0B:C5:6B:42:D1:02:3D:FA:6A:3C:09
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3e:91:31:63:ea:f1:5e:55:eb:0e:fc:c0:20:e0:5b:af:92:
82:95:2f:d8:78:1d:41:af:37:fc:04:89:0c:03:a6:72:62:21:
43:2a:85:37:32:ed:9d:7f:b9:a0:c2:f8:99:41:f5:4b:40:40:
cd:ab:95:1d:23:3c:22:b8:ab:0f:3a:70:4d:53:b8:b9:02:15:
f6:77:ba:21:d6:ff:df:76:cc:dd:13:67:bf:1c:95:4f:25:e0:
9e:62:62:84:8d:af:9d:df:53:ac:77:fa:a1:e4:c6:58:5a:31:
d9:c4:a4:bf:c7:d3:13:e9:b6:56:d9:94:93:52:51:45:b3:0b:
62:d9:2f:16:0a:2b:dc:a0:40:c1:2e:54:5e:c2:dd:2c:97:96:
a0:d5:69:1b:69:a0:19:8f:4d:26:31:61:d9:98:7f:43:e1:51:
18:99:df:08:12:43:e7:bf:27:89:33:66:3c:0f:1a:89:d4:30:
11:0a:f5:aa:3a:ff:27:d6:a5:84:02:d1:ef:2f:87:0c:0b:c5:
0e:b7:97:53:28:ac:43:49:88:be:02:59:70:4f:33:7a:b8:22:
1b:17:b1:8d:e9:20:2b:ab:fa:f4:10:53:e8:84:9b:85:27:9c:
2a:3c:69:41:b0:c3:db:0a:39:9a:b4:7f:bf:a5:a5:87:12:a4:
77:9e:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:59 2025 by rpki-client