Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: /mr2EMBtosdYnXzsCHovHJXLgWauRirWPRbyfZmzJHo=
Subject key identifier: 90:28:6D:49:FA:C3:7A:6C:8B:63:FF:7A:6F:6A:02:D8:6C:51:49:0C
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 019A522CB1B5517B2529BC1DBEEC0C7BA5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 1175
Signing time: Wed 05 Nov 2025 04:00:52 +0000
Manifest this update: Wed 05 Nov 2025 04:00:52 +0000
Manifest next update: Thu 06 Nov 2025 04:00:52 +0000
Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: iK44zDXwZ2ToCxL4qG8Lw5cXaMv0Sl6RvEBxf5lO+bo=)
2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=)
3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:b1:b5:51:7b:25:29:bc:1d:be:ec:0c:7b:a5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Nov 5 04:00:52 2025 GMT
Not After : Nov 6 04:00:52 2025 GMT
Subject: CN=90286d49fac37a6c8b63ff7a6f6a02d86c51490c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:35:42:14:6e:29:d0:c7:2e:ec:b0:90:97:
2e:8a:b3:5f:83:f5:08:7f:d5:d7:e5:c9:95:9f:f4:
6c:0f:0d:c3:37:22:92:be:c3:0a:20:3a:e9:0b:c0:
78:97:f9:73:86:12:7b:5a:e3:0e:8f:cd:34:1b:88:
b9:6d:6e:50:e9:28:6f:cd:df:c0:1a:25:e4:a6:57:
9c:f9:41:ec:98:f7:26:fb:b8:fb:3e:3c:9e:01:de:
36:b4:17:fa:a6:19:31:47:bc:29:bc:94:61:48:d8:
f7:ff:00:4e:6f:84:fa:65:a1:c7:8a:fe:e7:57:62:
e9:ee:03:39:5c:72:45:58:a1:0a:de:3c:60:fb:f5:
53:d5:0b:6a:06:c2:82:de:87:e2:54:49:67:d9:01:
85:6f:8c:10:d4:04:f2:90:e8:67:07:d7:73:98:3e:
ee:48:54:01:11:7a:31:06:2a:14:61:4e:3f:96:65:
e2:8a:c9:b8:d7:61:a2:17:12:e9:00:aa:7c:ed:24:
2a:41:af:01:4c:cb:99:85:17:06:24:45:7c:52:3e:
ae:a1:47:70:05:6b:42:87:6f:96:ed:36:a5:d5:41:
74:a4:3d:71:b6:e8:4d:62:6f:e5:52:c0:2c:2c:8c:
dc:d0:02:cb:fe:bb:af:fe:af:4f:09:30:f0:4d:90:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:28:6D:49:FA:C3:7A:6C:8B:63:FF:7A:6F:6A:02:D8:6C:51:49:0C
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:83:25:78:cd:a5:22:4e:3b:9d:7c:61:d1:6c:1e:9b:7b:93:
c8:e0:50:2f:9f:f3:cf:a7:25:aa:9b:30:13:a4:c0:ee:cc:7c:
80:91:77:39:4b:e0:b1:1a:2e:5a:b2:ec:60:9c:cd:b8:1d:a0:
42:2c:34:6b:f2:56:b2:ec:e5:f4:d5:cc:af:2a:2b:b0:dd:d8:
67:8f:cc:c1:2f:13:0f:88:ce:d4:a1:39:16:0d:ad:28:00:27:
8a:ac:74:06:f2:13:f3:ee:b4:ee:54:82:6d:ee:bf:7d:5a:07:
98:6c:e8:23:ec:f1:0f:bb:fa:68:3b:32:6c:f8:60:02:15:b7:
9f:34:57:48:6d:da:09:b9:f3:23:1e:61:80:5c:4f:50:03:cf:
93:f1:f1:d6:e0:f4:ef:89:ab:71:eb:e5:a1:c5:9e:46:d0:33:
e0:4e:df:10:ec:ff:a0:45:3e:31:e2:ba:24:51:60:54:6f:a3:
9b:ca:70:7e:18:9f:5c:77:4d:c8:c2:71:6a:13:97:b1:ab:27:
f1:1d:70:dc:01:3e:e7:f2:60:89:03:7d:1d:dc:80:99:d6:f3:
92:ef:47:b8:88:bb:a2:3f:13:15:24:43:84:c1:3f:f6:a8:99:
d5:b2:47:8e:c0:b2:a0:2d:cb:97:a0:76:89:40:9b:b8:b1:cd:
fa:40:c5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:06:01 2025 by rpki-client