Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: ODeVYn6kHDRnaxdHJFREdh891t4bQr/f4qfmNAfbMFo=
Subject key identifier: 65:70:98:8F:33:DF:5B:FD:4B:BD:97:E9:1B:FA:74:7F:25:CA:C4:00
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 019A4D73C958834D3D7729125A9F2015E306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 06F5
Signing time: Tue 04 Nov 2025 06:00:25 +0000
Manifest this update: Tue 04 Nov 2025 06:00:25 +0000
Manifest next update: Wed 05 Nov 2025 06:00:25 +0000
Files and hashes: 1: HQp_yUg92FF87DlWPtvQf8oIbtU.roa (hash: WdzVBva5nz5iKOf23yLPoQ+M9QxUiJxb8xYxHWes+RI=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: +0FLmKw6Y19A9gY2JPN5cEu4m0jtsrHANcC1mH0NBrw=)
3: zCw-9AZjP26xMi8ifkh6cllXO9s.roa (hash: D1nIK1UZwod09XQftoKXhB7rZyXrZ+n2IZxVQbyl2wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:c9:58:83:4d:3d:77:29:12:5a:9f:20:15:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Nov 4 06:00:25 2025 GMT
Not After : Nov 5 06:00:25 2025 GMT
Subject: CN=6570988f33df5bfd4bbd97e91bfa747f25cac400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:38:ec:29:c2:fc:75:67:00:8a:ca:1a:d8:
70:0c:29:7d:9e:5e:f7:28:f7:10:cc:87:a4:eb:f0:
f2:b1:fe:6f:ab:e9:77:6d:5a:02:88:87:cf:73:3d:
39:bc:64:58:c1:65:f4:79:51:24:d0:5d:4b:fa:7e:
2f:69:0f:90:67:a3:e0:ea:29:a5:5b:be:48:a0:b4:
db:91:c6:7c:1a:57:92:f2:16:c5:be:98:b2:af:17:
62:e5:e7:41:c5:a3:db:b3:c0:44:fb:76:5a:dc:1b:
17:4a:ee:da:1c:56:ae:7b:c3:f9:03:51:cf:06:e7:
9d:1c:81:0f:c4:65:21:a7:3e:2e:6a:4f:60:4e:74:
cc:35:00:d3:dd:46:e3:1a:8d:e7:92:7f:5a:4f:eb:
1b:85:89:fe:1a:1d:a6:df:cd:a3:6a:7f:99:a3:5f:
f9:37:e4:f0:5a:ea:20:68:21:9a:20:b1:63:d6:5d:
57:4e:c0:9c:37:a0:6b:26:a7:0b:de:ca:71:d3:f9:
60:a2:72:c7:06:cc:c3:ec:dc:e9:d9:87:7b:9a:ca:
fd:f5:ae:87:78:fe:72:ad:13:23:6f:e7:7e:4f:af:
34:9f:cf:69:43:46:94:1a:e5:76:fb:94:85:eb:dc:
0a:92:ab:b9:9d:5d:cc:20:72:42:a4:2b:79:f1:61:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:70:98:8F:33:DF:5B:FD:4B:BD:97:E9:1B:FA:74:7F:25:CA:C4:00
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0f:9a:60:79:e0:de:96:aa:c7:42:17:d5:e6:64:40:a1:87:
65:9a:51:8e:20:1e:3f:f3:f9:68:f6:95:a9:b7:9b:31:96:2c:
5a:50:ec:28:29:8a:e0:d7:9a:d9:95:80:67:04:59:79:db:43:
7f:7a:11:56:46:91:64:aa:f3:13:80:56:17:f8:2a:fe:e8:21:
4b:b0:7f:1d:68:89:20:96:bc:22:94:55:49:75:27:04:0b:b4:
94:e5:3e:2d:b6:0f:c5:f3:88:1c:26:66:35:83:8b:7c:2f:8e:
11:45:a5:24:04:67:a5:df:71:99:53:fc:d1:0e:9e:44:a9:8a:
31:d1:55:04:52:92:8e:e1:1c:de:31:8e:95:ec:91:97:84:47:
2c:8d:ed:4d:8f:e2:da:b2:70:57:ed:10:2e:00:e0:fd:db:fb:
3a:37:f8:60:38:47:eb:4f:9b:85:4c:cb:e4:bb:cd:b9:1e:8c:
68:eb:78:64:78:a7:3d:a6:7b:b7:c9:21:da:dd:fe:a7:d7:4f:
44:96:28:9d:0b:d6:71:ba:a0:47:10:1d:e2:89:e0:d5:76:8d:
06:0e:bc:92:5d:04:5a:af:cc:55:9b:91:6e:ca:b0:0a:c4:ef:
c7:a2:51:88:b4:e2:63:d3:6f:fd:91:b4:cd:60:56:74:a2:4b:
6a:c4:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:52 2025 by rpki-client