Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
File: YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json)
Hash identifier: n6kfnqKTthNCp4Q49rcld1INy/UaLehohBpbzK83A/M=
Subject key identifier: 35:AA:72:0C:9C:C8:D5:8D:60:6D:C2:21:83:1E:F5:AC:60:74:96:E3
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial: 019A4DAAB82388B830D3AC7D6F7DD6C2F402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 07:00:25 +0000
Manifest this update: Tue 04 Nov 2025 07:00:25 +0000
Manifest next update: Wed 05 Nov 2025 07:00:25 +0000
Files and hashes: 1: 1hMpXEk-3MWaN_1A5D8V9EPMUFk.roa (hash: CWNT05GFaywUZSs5xqqgNA+kl89pNKE3DHnIiDI2iJE=)
2: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: jQyobGenAPVDc/UnsVXEL1/VuL7Dvwm8/nFMLjRuK/4=)
3: rWHh4mQ0uaKggoKTpG34xhoULNA.roa (hash: E9+8lA/ClMI1O0rcr+QMuqVLJyMAlgl6OS/N6XXdTOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b8:23:88:b8:30:d3:ac:7d:6f:7d:d6:c2:f4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Validity
Not Before: Nov 4 07:00:25 2025 GMT
Not After : Nov 5 07:00:25 2025 GMT
Subject: CN=35aa720c9cc8d58d606dc221831ef5ac607496e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:a7:f8:54:9a:01:8f:05:59:2f:89:db:72:
be:7e:56:6e:d9:fc:b4:f7:cf:e3:10:39:cf:cc:b3:
38:3e:79:51:1c:cf:90:6f:0d:c1:f2:39:fd:75:35:
68:6e:e0:3f:42:1a:b4:7b:81:ec:02:39:ff:87:89:
3d:d3:ee:fe:71:61:00:b7:be:60:47:94:5f:f9:d3:
05:41:fb:e9:ec:a7:30:32:da:ef:7b:ab:37:03:18:
1f:c6:f9:95:b4:48:41:4f:6c:f0:65:fb:9d:cb:8c:
34:23:76:49:6b:bd:0f:8d:b2:b7:62:31:00:b0:9e:
65:e8:2d:90:c8:d9:47:94:c0:a6:e2:82:b3:1a:af:
bc:19:3a:c7:32:34:49:f0:63:4a:ec:b9:ce:19:0e:
3b:ee:18:85:04:a4:fa:4a:56:89:c4:7f:be:6f:8f:
07:4e:ac:7c:43:ac:d5:8a:41:a8:4b:03:9f:a8:ec:
88:c0:80:2c:0b:30:11:58:bb:04:5b:5a:d6:9c:ec:
63:4b:3a:d0:99:f9:56:5a:b8:7e:0a:52:f2:30:e0:
78:a9:0f:5f:fd:01:b9:74:05:78:2a:ae:62:08:d4:
7c:8f:3d:67:41:1a:13:77:21:ef:6d:dc:f2:fe:c7:
65:89:4b:6a:93:f8:9a:80:ef:1d:2e:76:f2:49:1a:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:72:0C:9C:C8:D5:8D:60:6D:C2:21:83:1E:F5:AC:60:74:96:E3
X509v3 Authority Key Identifier:
keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ce:d3:02:ab:2f:a8:7e:d4:1e:bf:74:dd:f9:1d:e9:e2:7a:
e0:cd:0b:b7:52:46:86:70:61:91:09:5a:b9:4b:d6:01:fb:54:
1e:cc:0e:69:ff:9b:7e:aa:6f:62:87:91:0d:66:73:34:f4:93:
95:26:43:7d:75:9a:55:86:99:6e:0a:1b:d0:15:05:0a:c9:14:
b5:01:d7:57:4d:c2:77:55:48:a9:0d:bb:b6:60:31:a2:21:e0:
58:a6:20:f5:53:e5:8e:68:89:cd:cf:64:e8:f1:d5:42:48:2b:
65:4f:77:0e:cd:56:51:97:60:e0:07:e4:18:b1:9f:47:48:bf:
f8:49:aa:13:64:7a:27:f4:50:dc:b4:e1:cb:0f:e8:1e:85:e9:
3e:af:7c:2a:e5:26:d8:e7:1c:af:3c:c9:59:1e:23:d3:a4:99:
f8:cb:13:5b:db:a6:6d:c7:97:44:5d:14:72:a9:d2:b7:d3:3e:
0c:27:3b:c8:ba:17:ec:05:26:94:16:7c:ce:d6:22:a0:08:0c:
61:da:e9:77:f8:ef:4a:ac:bb:ee:c0:ea:79:a9:f5:64:93:16:
38:b0:2d:19:80:5a:f8:55:e2:a6:a8:bd:d7:11:07:97:fc:ae:
05:b3:85:93:03:a6:8b:54:26:16:8e:71:1b:3d:01:55:cb:e0:
7e:07:7c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:07 2025 by rpki-client