Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
File: YVDKG6-fn2_hPYniZkRwST_mXmU.mft (raw, json)
Hash identifier: 0FO3zJsu/Pmm2BsRO7lTQWNe/P0nRRtNxjFrke6DIwg=
Subject key identifier: AE:63:DA:86:FC:31:4D:15:52:CF:10:58:0A:73:9C:86:93:4E:A9:39
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Certificate issuer: /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial: 019A4EF5742A50A4E85ABC43545B542BC38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:01:40 +0000
Manifest this update: Tue 04 Nov 2025 13:01:40 +0000
Manifest next update: Wed 05 Nov 2025 13:01:40 +0000
Files and hashes: 1: K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa (hash: AOJaEckufNSu4V7SdBMyiCpYmSZ+CDZ6Okor58DXN7s=)
2: YVDKG6-fn2_hPYniZkRwST_mXmU.crl (hash: LyI4EWoHP9E6SAkVnTK6k2S6YTvQ5g4xcAiqcRXGcZU=)
3: nfREQDaYK_u_RRzhJTauvf2Y8ak.roa (hash: NLnHR9EroQCyhWmQwjRMOzrKCez85XwXecl2W6KaGHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:74:2a:50:a4:e8:5a:bc:43:54:5b:54:2b:c3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Validity
Not Before: Nov 4 13:01:40 2025 GMT
Not After : Nov 5 13:01:40 2025 GMT
Subject: CN=ae63da86fc314d1552cf10580a739c86934ea939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:37:62:31:01:8d:a2:5c:ce:87:19:67:6c:
6a:9a:1e:43:f1:39:90:4f:0d:cc:f5:9f:c5:f6:80:
47:07:20:a2:b6:9f:00:5e:f4:b6:fb:c4:13:e8:d1:
1f:45:58:42:d8:48:99:9c:36:06:c1:51:63:d8:b9:
c9:dd:23:b9:a3:c5:3a:7e:a4:fc:3b:03:db:40:cd:
c2:95:96:9f:ba:8b:4d:c6:bc:8e:de:12:f0:6a:1e:
54:c6:54:b4:74:16:11:18:8e:72:b4:b8:51:3a:9a:
b7:30:cd:39:12:a6:22:75:a9:13:f4:2c:3d:8f:f6:
c7:12:0a:f5:b9:92:0b:d7:f9:49:e6:63:6a:17:c7:
63:12:e0:23:be:43:14:ea:1d:bd:a5:e0:fb:c3:a0:
1d:54:fa:7d:38:05:79:ed:10:63:15:5b:96:57:0b:
b2:b2:6a:4d:2b:12:be:57:f1:97:89:8f:53:c0:2a:
53:4e:a2:78:55:ca:c6:8f:cc:5a:cd:de:2f:63:e6:
07:a3:d5:75:a0:82:76:73:73:78:fd:f0:39:14:f4:
eb:70:2c:fa:81:66:fa:fb:d2:d3:64:4a:19:03:d3:
8e:51:fa:6f:1f:ac:3d:e5:ed:a1:a1:b0:fd:e1:5c:
da:a5:ea:5c:75:0a:1b:c9:6c:d1:e3:fc:cc:73:c3:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:DA:86:FC:31:4D:15:52:CF:10:58:0A:73:9C:86:93:4E:A9:39
X509v3 Authority Key Identifier:
keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:73:12:a2:bf:74:f8:12:4b:e3:cc:06:c9:53:f3:95:20:ef:
e9:52:38:a3:4b:46:61:6d:9d:76:60:bf:ff:3d:fa:4b:99:2f:
43:40:e1:3d:fd:c8:85:1c:3a:b0:b6:18:e1:c8:84:e9:ce:4a:
49:8f:95:21:51:4e:9e:0e:56:42:f4:d1:43:bb:74:73:aa:2e:
34:c5:47:ad:3a:cf:53:97:89:34:14:3a:2c:80:53:a0:64:8d:
16:1b:8d:6e:0d:7f:e7:03:a8:70:ec:a8:3c:6d:5f:d8:7f:a5:
cf:28:92:70:3b:5b:1b:f6:e9:95:2c:87:98:e8:b4:20:60:27:
57:c1:ab:9e:34:3a:bc:d2:08:00:b1:9b:d2:9c:37:3c:ee:ef:
09:dd:7b:62:ef:9b:f8:a9:cf:23:48:43:5d:e4:b9:65:9e:21:
36:82:50:b3:d2:17:59:f8:da:21:c1:7e:35:d6:4c:6f:0f:05:
8a:d2:15:a6:e4:a2:a0:55:17:1c:7f:9a:e3:66:34:ee:0d:1a:
da:8d:22:78:09:d4:3b:b8:73:bf:51:80:77:a9:c1:af:e6:b5:
20:53:3f:f1:13:b1:13:12:f8:4a:bb:04:d8:8a:3f:13:fe:62:
7e:e0:02:8b:91:9d:80:4c:09:96:e2:7e:a6:f3:73:ac:0a:50:
7b:7e:b0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:19 2025 by rpki-client