Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: fTr2/WdWDEWf8B2vF2LT50OaqNiOmgqlBoAJh8s23Z0=
Subject key identifier: C2:E0:44:33:54:E2:93:5E:1B:44:99:17:7D:3B:D8:D0:E3:9E:77:F9
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 019A50AB7B715184E03C4AC4DEA5403096EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 0671
Signing time: Tue 04 Nov 2025 21:00:06 +0000
Manifest this update: Tue 04 Nov 2025 21:00:06 +0000
Manifest next update: Wed 05 Nov 2025 21:00:06 +0000
Files and hashes: 1: VAzYkQRTgwiJaHwxuivv8ZFztSM.roa (hash: JX1t8tGMn8nyq5oj+S/xubK6nVg6WbHVtaOCdwSyvtE=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: ozkfq4Q8rpNRE7SXztrZ7Py62SnnjfuTd4TSElrIAKQ=)
3: mduHn1Ba-swk6VOib9ml9GoEMsc.roa (hash: 3VvwRqUaU666bsiQcBrlluuEPtapExzv8dYQUHsb8Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:7b:71:51:84:e0:3c:4a:c4:de:a5:40:30:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Nov 4 21:00:06 2025 GMT
Not After : Nov 5 21:00:06 2025 GMT
Subject: CN=c2e0443354e2935e1b4499177d3bd8d0e39e77f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:58:7b:eb:10:0f:44:94:27:3a:98:e5:ba:
c1:12:95:5a:97:e3:d2:7f:79:bf:6d:82:83:c8:25:
ef:d6:39:c4:a7:e5:95:29:cd:1b:e6:8f:88:c2:32:
3e:49:a6:bd:6d:9e:df:da:88:92:62:95:32:2b:12:
6b:b0:c5:fa:50:ba:98:dd:89:9a:0a:df:c0:29:b7:
48:3a:07:c4:05:10:ad:6b:c4:ee:79:6b:98:fb:b1:
d0:56:6a:cc:0a:53:54:0e:71:bc:03:a6:96:61:7d:
4d:df:41:0e:e7:6b:66:7f:17:b1:52:4f:24:ba:92:
fd:75:04:53:d1:9d:c3:d7:96:85:df:76:3d:7a:cd:
13:2a:e8:37:ae:01:a9:ae:1a:c9:1e:09:76:d3:7d:
63:ea:76:f9:47:f7:6c:e9:30:eb:e6:ec:83:ec:5c:
a3:14:b3:74:e6:d0:f2:2a:c2:f4:fd:94:15:75:61:
6d:bd:79:3c:99:14:f9:3e:cd:85:2f:ea:2c:5c:40:
6b:f2:d5:e9:c9:04:77:ad:93:af:bf:34:ae:a8:28:
01:fc:3e:e4:d2:df:58:d3:74:fb:b8:41:34:a6:be:
82:4e:6a:74:a2:79:96:ea:a7:cf:f7:43:a9:0a:ed:
8b:2c:f8:de:a6:d8:3b:1e:56:f5:72:28:51:e0:29:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E0:44:33:54:E2:93:5E:1B:44:99:17:7D:3B:D8:D0:E3:9E:77:F9
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:73:7a:d5:11:27:bd:d1:8a:86:20:1f:ff:d4:03:3c:bb:94:
55:63:f3:0c:0e:84:f2:7e:1c:db:d9:ad:78:7d:f3:40:52:94:
4c:2b:c1:00:02:29:da:5f:3b:09:ca:ce:24:50:42:3a:72:13:
6e:8a:3f:81:8a:c7:d7:6c:40:7c:fe:ad:36:75:de:7e:5c:be:
74:ae:38:41:57:a8:42:bc:49:4c:2b:23:19:14:c7:12:49:2a:
a5:f8:c0:61:be:63:6d:1d:b5:37:07:bc:e6:fb:07:aa:25:d1:
aa:1d:12:f4:bc:44:76:a4:be:4e:37:18:d8:b1:88:27:38:c3:
11:fb:c8:99:7d:d5:12:30:27:e2:83:aa:cb:de:48:a2:60:97:
2a:22:f1:6a:52:09:45:64:98:f9:89:58:97:fc:8d:d3:9f:f4:
5f:a7:8e:28:79:62:2c:8d:e1:fc:9e:aa:21:b8:21:a3:dc:7b:
77:a7:b4:bd:26:68:d1:df:c6:cc:af:3b:76:9f:12:6c:20:00:
24:20:b6:33:77:c9:1b:84:8d:eb:b2:11:1c:7b:bf:6b:11:d7:
fe:75:0a:e1:60:69:48:8a:7d:8a:f2:11:9a:59:fd:cf:c4:b5:
54:e5:b9:42:60:c9:d8:98:be:2a:76:a9:33:ec:59:7d:89:e6:
5c:8f:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:58 2025 by rpki-client