Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
File: Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json)
Hash identifier: F6KZN1DC5DX0qLrwsew+MoznyoTDShvWfra66dZn+lE=
Subject key identifier: DE:89:49:B2:30:D0:FE:9E:0D:17:CA:E1:AF:36:D5:CD:8B:53:20:84
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Certificate issuer: /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial: 019A4EF495A831B7F67A0D53E679AFD6C115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
Manifest number: 1128
Signing time: Tue 04 Nov 2025 13:00:43 +0000
Manifest this update: Tue 04 Nov 2025 13:00:43 +0000
Manifest next update: Wed 05 Nov 2025 13:00:43 +0000
Files and hashes: 1: YFIa0scc_xVUT5FKi7LKvASoEWc.roa (hash: V1CwEQLm9iXZGzptcaHc4LFmcOryBT2Kfmx1HSv4RTc=)
2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: cge2uVPlB/yhV4a/Dckr3y4Ln/tf51As32ghHP8CGzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:95:a8:31:b7:f6:7a:0d:53:e6:79:af:d6:c1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Validity
Not Before: Nov 4 13:00:43 2025 GMT
Not After : Nov 5 13:00:43 2025 GMT
Subject: CN=de8949b230d0fe9e0d17cae1af36d5cd8b532084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:ce:66:b2:bc:ea:61:84:91:1b:0b:0c:f9:
ec:d7:03:35:d7:c7:98:cc:54:29:a0:29:50:0a:5c:
c7:9d:5f:94:66:22:aa:c9:44:5c:95:2e:8c:e9:80:
d2:81:14:3f:88:cf:c2:26:2f:3b:58:5c:24:35:6e:
74:88:df:a9:a0:45:32:97:c6:00:0f:62:6d:79:1e:
d0:f6:5f:9f:77:af:f7:35:84:bb:83:e6:47:85:f8:
ff:85:5f:90:2a:fb:31:69:65:23:1b:ba:04:7a:33:
ae:f7:ad:63:82:2c:8a:a3:f6:1a:11:47:5c:56:93:
21:4e:87:4d:26:05:ef:66:b8:d2:38:b3:39:62:ca:
73:5c:a4:ea:dc:f3:72:6d:3a:08:ea:ba:4f:76:59:
3e:bc:10:7e:2a:a6:b9:f0:ad:c6:03:7a:95:63:21:
b6:42:61:9c:45:c5:55:c1:8e:7d:57:7a:23:9d:15:
e8:a4:dd:39:65:6a:fd:e1:51:87:b5:dd:a1:fa:9b:
5c:56:34:30:05:20:42:46:0b:01:48:40:1c:ad:f2:
e7:48:b6:0a:ec:68:18:84:a3:3b:d8:f9:fa:b8:c0:
f5:a5:b0:ce:10:f9:ca:fa:c8:21:f7:6e:e5:58:d1:
b2:17:35:e7:df:4f:82:c3:81:5f:a1:e7:e8:fb:94:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:49:B2:30:D0:FE:9E:0D:17:CA:E1:AF:36:D5:CD:8B:53:20:84
X509v3 Authority Key Identifier:
keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e3:b2:cb:b9:c9:57:c9:88:10:82:a0:22:aa:31:de:6b:e9:
b6:e7:67:55:c8:f4:b1:c9:05:09:38:42:ba:2f:6e:a0:21:ef:
66:d7:bd:d7:08:3b:c2:07:a9:cf:91:2a:90:8f:52:52:b7:b0:
13:f8:8c:48:5a:7e:7c:46:99:15:42:a8:b3:92:dd:f9:0a:42:
78:14:49:09:d3:bc:33:c5:3c:dd:20:e4:d1:65:77:b2:a8:fb:
7c:8b:50:4c:80:a8:66:04:25:95:07:01:67:6e:df:c2:e4:c6:
53:99:b6:c2:5f:f5:ea:cb:30:54:74:08:ba:52:c7:4b:5d:da:
8f:ce:44:26:94:0b:87:22:1a:7b:6a:7a:25:8e:87:fd:94:fb:
a7:ea:66:7f:85:3e:02:c8:27:fc:aa:10:dd:ce:fc:35:4c:2c:
3c:e6:0a:7e:09:72:23:1b:9c:49:d0:61:ed:a1:d9:2b:e5:46:
16:74:94:52:28:0b:34:86:c2:3a:66:7e:7d:b1:4f:1b:6e:11:
32:0a:ce:63:13:4a:61:2b:4f:93:38:67:04:74:e8:1c:d4:12:
93:19:00:3f:69:52:11:90:45:65:26:a8:df:14:fc:fd:24:4c:
2c:a4:d6:48:e2:a6:b3:ac:5a:99:29:db:23:0c:cc:0d:7e:7a:
56:00:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:34:14 2025 by rpki-client