Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier: 5p/9Oo68502dCD16obRZ7k4R7VxHHhunhkmfDjKYlvk=
Subject key identifier: 3B:F2:7D:34:C6:54:7D:01:46:21:09:E9:AA:81:E0:F0:80:F8:30:96
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 019A50071462168A86A01190765B0CEC6D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number: 12D0
Signing time: Tue 04 Nov 2025 18:00:32 +0000
Manifest this update: Tue 04 Nov 2025 18:00:32 +0000
Manifest next update: Wed 05 Nov 2025 18:00:32 +0000
Files and hashes: 1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: uXYS7Bi1pD0DvWLcVAudsZrnVieBRvOn/vXd273awr4=)
2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:14:62:16:8a:86:a0:11:90:76:5b:0c:ec:6d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Nov 4 18:00:32 2025 GMT
Not After : Nov 5 18:00:32 2025 GMT
Subject: CN=3bf27d34c6547d01462109e9aa81e0f080f83096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:d8:fa:1f:15:01:32:a6:9a:0d:26:dc:ee:
a9:9b:2d:74:ca:05:0f:75:c4:c5:74:bd:c2:a4:ef:
af:7d:31:3d:81:18:2d:af:2a:4b:6f:21:cc:05:40:
77:fb:1f:03:f7:71:bf:41:90:54:ea:82:3f:a6:79:
51:a4:9c:7e:38:81:31:9b:1c:a6:c8:71:6b:97:99:
f1:9e:5f:e2:89:57:3d:5e:f5:9f:e8:08:c4:5c:58:
a4:6c:41:c2:1f:a1:d9:e2:9c:a2:97:f2:d1:87:01:
1c:2c:3d:d3:b7:9c:cd:6b:68:7a:c5:11:e7:bb:4c:
a0:bb:1f:85:71:e5:bc:16:8f:26:5e:b1:16:f5:9f:
8f:cd:47:75:dd:8e:fb:54:49:92:79:0e:da:36:89:
0b:1a:5c:db:3b:1c:51:52:fe:85:76:66:f0:2a:39:
ce:24:72:a7:1a:fc:6b:8a:e7:76:a2:e0:f6:3c:b6:
24:33:59:61:61:fd:20:a4:cd:2d:82:8a:6f:57:b4:
58:e1:47:e8:9e:67:5f:bc:3e:c1:e9:06:23:bf:c1:
73:86:b6:ca:78:95:79:9f:1d:78:85:4a:e7:75:71:
18:08:28:3c:1b:f5:3a:f9:16:59:37:df:e9:2b:dd:
55:82:5e:6e:42:bc:a3:df:c3:e0:74:e4:c6:9d:1a:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:7D:34:C6:54:7D:01:46:21:09:E9:AA:81:E0:F0:80:F8:30:96
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8a:75:4d:bd:d1:3f:0c:0b:bd:ae:75:bc:45:fc:b2:b1:e7:
82:d8:75:10:82:d4:18:b1:46:42:b1:75:5d:fc:e4:86:e4:21:
66:4f:e4:1e:9f:23:1c:06:bb:f3:9e:ea:85:eb:fd:e0:03:ae:
ed:51:91:f6:96:57:a8:8a:fe:5d:4f:74:c2:66:27:48:cb:5e:
83:f1:be:f6:52:1d:ac:83:89:63:07:a4:40:01:98:09:ad:37:
0f:53:dd:e5:df:fc:c9:6c:b8:74:ab:69:d6:02:b1:a6:93:f4:
a5:ff:6f:63:e1:61:a3:66:9b:b1:a9:17:e8:3c:02:f0:f9:2d:
a7:46:92:55:0d:0a:8f:4c:87:f1:b6:64:1e:ab:4d:6f:f8:86:
44:49:21:8c:88:e2:69:9b:c6:7c:b5:f3:d3:f7:05:c9:28:47:
31:d7:7b:2a:4d:5d:fe:41:63:14:98:9f:b3:db:33:56:18:71:
45:9a:c2:75:ba:e2:8d:3e:ba:d2:ef:28:10:11:5e:d6:7a:9b:
9f:59:85:a2:3b:c4:18:c1:3e:51:04:d2:47:89:a6:46:c0:c8:
17:b2:04:c5:05:8f:61:fa:e9:c4:fd:4a:33:3e:8a:84:ca:1b:
37:02:25:1e:e3:48:c3:0f:6c:ad:ff:1b:64:32:d9:76:f0:80:
55:3a:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:13 2025 by rpki-client