Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier: +DuBrPZ2TCjki/RXgVwrEfqxgDz+gAwfGh/E/wAQi0U=
Subject key identifier: 6E:0C:11:B2:91:D4:90:B8:E8:19:41:47:A5:AA:62:43:49:86:70:58
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial: 019A4E18C3319B9ADC620F76C0A808E5522D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number: 1676
Signing time: Tue 04 Nov 2025 09:00:36 +0000
Manifest this update: Tue 04 Nov 2025 09:00:36 +0000
Manifest next update: Wed 05 Nov 2025 09:00:36 +0000
Files and hashes: 1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: LO/SAEWRkaDsjk0NjNwY5PA1BCdW8HPraYtoeNgfRp0=)
2: gFgwOulWz8EdjBx0WPIuskEa2Xo.roa (hash: kmccz6rQP+OANRlJVswlZw+GA51smpUT7A9JAOVNjXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c3:31:9b:9a:dc:62:0f:76:c0:a8:08:e5:52:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Validity
Not Before: Nov 4 09:00:36 2025 GMT
Not After : Nov 5 09:00:36 2025 GMT
Subject: CN=6e0c11b291d490b8e8194147a5aa624349867058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:36:5c:ab:bb:4a:60:0e:9e:c7:82:10:9c:
d4:db:fd:3a:83:8c:d6:2b:10:3b:3d:9c:48:af:73:
1b:22:98:69:b9:f5:37:48:f2:7c:68:31:f4:62:d5:
86:fd:c6:ca:c1:e5:63:9f:c1:37:4a:1e:ae:f5:d0:
4d:f4:04:d6:f6:20:24:5b:28:62:b9:31:74:a0:3b:
bc:98:85:1c:02:43:20:4f:d2:67:f2:d5:01:24:48:
71:52:bd:f8:3b:15:18:7b:ff:b0:34:1f:79:92:b8:
fc:cc:0f:fa:35:67:1d:65:c6:4d:cf:5e:7a:5a:fc:
81:19:16:7f:40:7b:f6:5d:7b:0e:40:a3:ac:58:16:
f5:0b:4a:24:a4:96:3d:0e:fa:11:bb:5e:df:ee:32:
f5:2e:6b:0e:4b:f7:c9:3e:71:79:63:4f:b6:42:e4:
96:e7:e2:24:9d:82:df:47:11:09:7a:b1:71:a4:71:
f1:55:8c:56:ef:5c:c2:56:93:d0:72:9e:00:69:db:
78:15:34:61:bd:e4:10:4b:49:04:06:fb:80:e8:94:
1d:47:a4:f5:46:50:85:bd:12:be:18:16:0c:c7:dd:
cc:e5:cd:31:d0:32:d2:c7:9e:01:ff:7a:5d:f3:b0:
36:ac:f6:1c:61:21:c8:03:a9:bc:88:e3:1a:ec:aa:
0c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0C:11:B2:91:D4:90:B8:E8:19:41:47:A5:AA:62:43:49:86:70:58
X509v3 Authority Key Identifier:
keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:0e:eb:81:65:2a:66:a1:1f:aa:7d:db:71:50:a0:7f:c8:d9:
a4:21:7c:9a:d9:c5:14:4c:87:ec:ab:6b:b9:1d:f8:30:69:44:
60:67:9d:dc:57:65:cb:be:29:11:52:47:7c:34:f5:7f:bf:52:
7b:31:80:64:1a:0a:b9:30:ff:b1:22:8d:b1:fd:74:4b:ff:9d:
44:85:0c:24:0e:d7:f1:c9:e1:14:61:55:45:41:19:82:ab:fe:
1c:01:05:0b:4b:d0:9c:30:82:6f:8f:82:45:85:2d:bc:aa:03:
bf:ec:3f:a5:6a:83:0b:de:3f:d4:14:1f:34:86:9e:e3:01:54:
ee:73:e4:d7:82:18:d0:0f:32:fb:f2:1c:70:c3:5d:b9:18:b6:
30:43:69:d9:c8:b9:ef:5f:46:40:27:13:f4:59:73:9c:75:3d:
56:08:bb:de:6c:d9:39:5b:e5:ff:7d:b7:84:6b:6e:f7:77:e5:
0a:12:0e:dc:0e:45:96:e4:1c:fc:41:39:14:d7:e2:a3:37:5d:
58:fb:02:a6:ad:ec:08:41:49:2e:08:fb:0a:6d:4e:67:c6:33:
f1:e1:ed:b3:fc:64:20:6f:7b:9c:d1:da:9b:cc:04:18:29:49:
91:0d:ac:06:5c:d9:06:18:75:85:92:c7:89:68:e2:06:28:cc:
fb:98:10:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:26 2025 by rpki-client