Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: 8HxesaKUKu11tK+0WyGMBR6MJ+GLX2pzTT2NlxXVV2c=
Subject key identifier: 84:33:18:C9:12:13:75:46:58:11:06:DA:2D:1E:BA:9B:97:27:5E:80
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 019A4DE22E525180D93578A702ACAF426526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 0773
Signing time: Tue 04 Nov 2025 08:00:59 +0000
Manifest this update: Tue 04 Nov 2025 08:00:59 +0000
Manifest next update: Wed 05 Nov 2025 08:00:59 +0000
Files and hashes: 1: A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa (hash: P87warA/sxgPpSILGT3rzWqyvJsB40eA4IbxWKqMVaU=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: 3QA+oE5eWR6ff+LtefeeUr4drQBlwtLmZGIKMrofxs8=)
3: fPNzH31qX0DZ8V4rij7Xo2sRGO8.roa (hash: fPCz6t8saFe/YCV6Ne6vHfZKosVB2msyYYqQELy/A2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2e:52:51:80:d9:35:78:a7:02:ac:af:42:65:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Nov 4 08:00:59 2025 GMT
Not After : Nov 5 08:00:59 2025 GMT
Subject: CN=843318c912137546581106da2d1eba9b97275e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:b3:11:08:b6:f9:49:8d:9e:3a:e2:20:63:
cb:18:55:04:06:dc:bb:a4:5b:84:4f:a4:3f:2a:4b:
45:18:04:99:68:6f:16:78:24:96:2e:7a:e9:f8:54:
fd:14:1a:dd:4a:e0:d1:52:7e:65:95:28:ba:27:6a:
27:7e:f0:b9:07:a6:25:f8:11:8e:dc:e0:02:81:88:
c4:6e:5b:84:a1:5d:74:ac:e4:17:e3:32:89:bf:68:
5b:56:92:c2:64:9c:55:5e:55:91:5e:df:45:0b:9e:
61:ae:87:83:60:a5:01:31:91:f3:b1:68:f6:48:e7:
e8:09:c2:2f:7f:77:f3:ed:f9:37:3d:f2:db:d9:01:
c1:34:27:75:6b:19:c9:83:fc:ca:44:9b:09:75:e0:
16:a5:2b:67:8a:ff:5f:68:2b:2c:47:46:67:44:88:
9c:76:42:7c:e4:31:99:73:e9:42:dc:cc:7c:db:45:
85:2f:60:6b:5f:6d:83:c5:36:29:d2:82:38:27:bf:
f5:cc:66:5c:a5:d7:be:f7:22:a9:50:b4:db:6f:41:
a6:50:8e:82:d0:cc:ac:33:ae:ae:ad:53:4f:e3:b2:
c0:bb:23:08:5f:75:6f:60:39:7e:b5:8b:13:4d:31:
9c:ce:02:0e:6b:dd:45:b3:ae:f2:08:40:2d:01:30:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:33:18:C9:12:13:75:46:58:11:06:DA:2D:1E:BA:9B:97:27:5E:80
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:21:7a:c3:79:ab:d2:ec:30:89:30:4a:42:21:a6:ca:18:3a:
b6:e4:05:0a:6c:5d:6e:45:f3:68:0b:c6:1d:79:90:04:98:2b:
13:68:9c:91:3e:c7:b1:44:04:e4:b9:31:e7:28:cd:7f:ed:5f:
fb:65:bd:48:55:ed:36:bc:65:c4:34:79:db:17:1a:9b:14:96:
bb:3d:6a:24:2f:05:5c:be:ad:75:69:f1:a7:b2:32:84:88:cf:
ad:3a:c2:e0:d1:f0:65:c4:87:1e:23:6d:a0:37:2d:ef:02:52:
1d:2a:45:2e:13:54:03:ac:46:76:f3:65:f7:34:2a:e9:17:24:
a0:e9:2b:d2:19:31:c5:c9:e0:9b:8f:6d:1d:96:e9:3c:64:5b:
23:ad:69:50:d8:3b:6e:4e:f7:1d:1d:0c:3a:5b:8b:2e:af:cd:
9f:7e:47:ee:21:36:97:1c:6a:a5:47:ba:36:8d:c5:a2:2e:49:
86:0a:fc:36:84:eb:da:75:52:df:cf:03:89:4f:26:fd:39:7a:
d8:fd:ec:d6:d6:e9:47:08:36:81:0c:3e:a6:3a:db:be:e7:d3:
b9:e6:5a:4d:bf:e4:83:2a:87:b0:6c:ce:8b:ae:09:d6:e3:87:
23:25:5a:07:74:4f:06:51:df:f4:73:c3:6a:c8:f3:de:ac:d8:
e5:84:02:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:00:58 2025 by rpki-client