Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: dffY+FjspvzJdrbqOz7UFjpZB7YeydPpGVoasfbqMK8=
Subject key identifier: 04:20:3C:D0:21:0E:60:3F:ED:D2:11:EB:F1:CE:C0:38:8E:56:73:01
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 019A4EF40BBE18EA33B2C06E31C05FBCF569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 0F67
Signing time: Tue 04 Nov 2025 13:00:07 +0000
Manifest this update: Tue 04 Nov 2025 13:00:07 +0000
Manifest next update: Wed 05 Nov 2025 13:00:07 +0000
Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: DFZi+tCEw9f/1rsUt/9VsnWg1lrh9Jq8igc5emaFtR0=)
3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:0b:be:18:ea:33:b2:c0:6e:31:c0:5f:bc:f5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Nov 4 13:00:07 2025 GMT
Not After : Nov 5 13:00:07 2025 GMT
Subject: CN=04203cd0210e603fedd211ebf1cec0388e567301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:08:00:7b:f9:67:c3:7c:be:b0:0b:a9:5e:
f5:c0:30:32:df:19:89:fe:f4:b6:a2:0f:d8:9e:df:
a6:60:2e:2d:9b:ab:86:6b:48:4b:b0:4f:cf:ed:2d:
53:27:5c:20:6e:f4:b5:4b:7c:11:2f:a7:04:2e:0e:
41:c0:7c:95:7c:99:f6:98:a5:f7:47:5d:f3:16:ab:
04:e0:3a:41:87:ac:65:24:a2:ef:25:17:71:1e:60:
b1:1d:39:01:f5:09:fe:5f:28:c8:cf:b5:38:8c:6f:
59:81:79:f1:dd:1d:84:37:bf:94:8e:fe:df:e7:4f:
9f:db:d5:2e:a4:a3:55:ca:cc:33:33:1b:e6:dd:3b:
3a:01:7a:7b:f2:14:7e:44:6a:fe:bd:41:21:03:a2:
1f:39:c1:1b:79:50:88:d2:c7:f5:f0:0a:28:6f:72:
2a:e8:5d:eb:c8:20:06:9f:82:a8:97:ba:ae:0f:89:
8f:6e:c9:d8:c0:0c:ed:22:bb:91:27:1e:b1:11:31:
5d:03:a3:b3:75:b4:7a:aa:6e:5b:5e:36:3c:83:56:
e3:69:93:30:6e:46:71:e1:f2:81:c6:d4:56:de:bf:
28:52:56:a9:09:b1:a1:f4:2c:cb:34:d0:39:87:d1:
20:61:09:98:d0:ac:35:ea:a1:93:3a:14:b1:81:74:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:20:3C:D0:21:0E:60:3F:ED:D2:11:EB:F1:CE:C0:38:8E:56:73:01
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ec:3c:3b:ce:55:a7:c8:6f:35:24:59:24:d2:67:40:93:97:
e7:45:40:35:5e:39:01:af:06:3a:e4:9d:71:ee:e3:6a:37:54:
5a:2e:9b:e4:f4:5a:37:61:21:ab:ae:61:a2:f5:d9:34:75:36:
38:54:b0:ed:40:6e:45:63:7a:34:e4:e5:2f:5f:26:eb:65:84:
a7:7f:3a:85:30:15:0a:43:ce:5d:08:1e:e8:35:4b:ae:6b:5b:
7f:8c:d0:6b:c5:37:ec:eb:04:ba:59:56:a4:f2:ce:69:60:f6:
0b:d3:85:c0:6b:c1:16:4f:77:3b:3d:55:ea:99:fb:05:38:ae:
3c:b8:b3:0a:84:69:1a:6e:9d:14:4d:6f:68:2f:24:51:68:1e:
6d:e4:77:83:42:19:a6:d8:97:f6:64:05:f4:1c:13:7e:64:b3:
66:7a:28:26:81:75:f9:ba:75:8e:50:e3:09:f5:4d:03:12:91:
71:e7:37:e0:32:ab:ca:af:12:d9:9c:66:f0:a7:e5:90:18:6f:
4e:fd:65:b2:ea:e1:92:f5:86:3b:50:b7:47:48:30:e3:86:de:
3a:97:c6:55:53:77:38:a9:1f:3b:ff:cd:6e:13:99:22:50:59:
e1:65:3f:3c:a9:43:eb:31:44:21:9f:f1:57:5a:34:30:fa:87:
e5:c8:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:27 2025 by rpki-client