Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier: sYtngjYKNJYDThKv7kbdn5hWlO1gA56iT/Dx0yPhSzA=
Subject key identifier: 72:96:27:E3:2C:B8:BC:8E:08:D1:5A:3B:6E:B5:A6:6A:1F:54:B5:7E
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial: 019A51F5E14A86221B9FDC6F641590A2F3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number: 0139
Signing time: Wed 05 Nov 2025 03:00:59 +0000
Manifest this update: Wed 05 Nov 2025 03:00:59 +0000
Manifest next update: Thu 06 Nov 2025 03:00:59 +0000
Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: l53KHBFvtc3cRex6YXtRTLQHwGeVQircZvSPySTwpSM=)
2: yJ1HWDzaQf8_v_QIkEVeJhHUsNs.roa (hash: uRF7ZuSGISVIOWjvLjFgvjfyhiciNwgKOFC9/lRcs/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:e1:4a:86:22:1b:9f:dc:6f:64:15:90:a2:f3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Validity
Not Before: Nov 5 03:00:59 2025 GMT
Not After : Nov 6 03:00:59 2025 GMT
Subject: CN=729627e32cb8bc8e08d15a3b6eb5a66a1f54b57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:7a:6b:1e:9c:e3:31:39:6b:fb:9b:c9:39:
0f:fb:4b:7c:66:e6:0e:3c:bf:e0:fb:ce:40:25:20:
92:f4:b4:3f:cc:28:8d:7e:1a:a3:26:4b:18:c2:b0:
7e:aa:aa:5a:ec:03:6c:32:3e:b6:ba:a4:37:8e:4c:
24:ce:8c:9a:7b:e0:5c:81:35:3b:c3:c1:30:b9:50:
98:0b:b6:a5:c3:9a:1e:8a:f1:d7:09:c6:70:64:49:
7f:7d:57:92:30:c2:f1:c0:5c:fc:77:d6:27:a2:a6:
ea:6f:a9:e8:64:57:8b:b7:d9:bb:83:ad:39:bf:a2:
60:29:83:86:29:c4:28:be:d1:41:95:e3:78:8b:a2:
45:b3:45:41:ae:26:ed:96:d4:86:43:2e:16:d0:00:
50:93:34:dd:46:5d:39:0b:d9:85:a0:30:5c:f5:78:
7c:50:68:73:ca:f4:e9:61:88:ab:94:22:fc:18:38:
8a:e1:c3:f8:9b:6e:49:bd:91:00:71:a8:92:8c:1b:
cb:2e:ee:0d:7e:d2:f4:c5:25:20:3b:67:4b:6e:d6:
c8:9a:4d:43:94:5f:b4:b3:fa:22:f6:59:8e:f0:49:
2b:59:30:e9:c4:8b:1f:03:1b:0c:00:40:55:af:5f:
27:d8:b7:97:0a:10:aa:c3:f9:ed:a6:d7:69:0b:ed:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:96:27:E3:2C:B8:BC:8E:08:D1:5A:3B:6E:B5:A6:6A:1F:54:B5:7E
X509v3 Authority Key Identifier:
keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:93:36:d3:92:1f:60:cd:3b:ad:1e:05:67:43:bf:f9:cd:a3:
e7:a2:40:72:76:ed:4a:c2:bd:8c:8f:05:6d:da:b9:6f:d1:2a:
3d:a9:4b:87:b8:96:b0:a3:7e:db:c6:a4:33:cc:34:6b:98:7d:
44:12:ba:ed:f3:2c:78:21:eb:86:4a:b8:00:2d:08:01:42:9c:
9d:24:5e:3b:5c:e0:6e:a2:e9:b6:77:eb:d0:d6:42:b6:ec:29:
e0:87:b8:72:df:63:f3:09:67:b7:28:c6:0c:7b:73:fb:bd:d8:
cf:a9:2d:e5:a8:83:65:01:dd:90:24:be:e9:f2:50:fa:f2:22:
0c:00:e0:8c:2b:a6:30:f6:bb:25:79:0e:a3:68:65:59:74:65:
41:dd:07:a7:18:f6:c8:5d:a5:e2:e0:c7:19:63:65:3d:de:38:
48:78:33:23:65:4a:9e:10:5d:07:7e:3a:76:a5:4e:d6:b7:b2:
2d:09:c6:0d:48:2d:76:c1:ce:df:0e:1a:fc:12:5e:25:96:b2:
74:f6:84:db:e6:0e:05:8e:68:2d:68:57:c0:e3:ef:9f:36:df:
54:81:1d:45:5c:e7:cd:2a:a5:1a:5c:bb:23:8f:fd:ce:58:4f:
f5:f1:d4:fa:59:7a:5d:06:65:3f:32:ef:35:1d:6d:15:cc:ca:
86:1c:c3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:52:43 2025 by rpki-client