Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: HM0rmkbBIn5/irtHdO+Z0VkwKlHCf/XPs6tbHuvxVyI=
Subject key identifier: E4:DB:34:53:25:A4:7B:30:66:1B:3D:5A:EE:C2:8D:CE:68:CE:16:52
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 019A4EF50303492AAEFC20EB5970CEEDD957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 0F94
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: ShDykw6msGUOkM+aOmZp5XYFHi+qdaFfDtQYKp1V3GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:03:03:49:2a:ae:fc:20:eb:59:70:ce:ed:d9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=e4db345325a47b30661b3d5aeec28dce68ce1652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:66:41:ab:1d:04:fc:ae:eb:7b:ec:8e:55:
01:68:5c:7b:df:61:84:b1:72:9d:07:02:fc:4a:86:
af:d2:af:1d:66:55:42:3f:71:be:dc:0d:00:1c:c0:
0e:f8:77:18:5f:89:b7:35:97:ea:97:7b:5e:32:d0:
df:a3:37:b4:d9:5c:12:64:a5:77:06:90:0f:66:b9:
c3:bc:de:04:70:f1:7d:aa:39:e9:10:89:4f:91:c3:
f3:02:aa:d1:29:18:23:7c:e0:d9:b7:b5:71:e7:2d:
30:d6:14:92:37:e8:28:d0:34:ea:77:c7:96:d5:1f:
9b:46:3c:cc:07:ad:7f:94:a3:32:aa:a4:7a:c0:3f:
9e:5a:40:ef:de:19:4d:51:b9:8c:a7:64:1a:88:46:
99:33:c5:2d:44:ea:e4:02:0f:c5:90:ae:e4:80:17:
f5:aa:b3:ac:a5:3a:7e:d0:85:3e:ce:6b:b7:5d:d8:
a2:09:62:53:1f:b0:d9:41:cb:68:98:2b:12:a1:a9:
4a:ea:18:e3:09:88:f7:0f:18:1e:70:90:0a:79:1b:
8d:f8:21:58:ff:3e:82:a9:a9:d6:21:00:db:46:4e:
a4:8c:d8:39:a8:93:d4:29:f2:d7:29:54:20:e3:d8:
52:35:e1:01:67:2b:55:19:0d:59:75:a3:ce:0d:b7:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DB:34:53:25:A4:7B:30:66:1B:3D:5A:EE:C2:8D:CE:68:CE:16:52
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f0:27:8e:76:c9:dd:c1:0f:d7:db:42:14:fb:e8:2d:17:95:
88:27:69:4b:2d:2b:68:81:80:d3:5b:73:96:2d:b4:eb:cb:70:
03:7b:a4:e8:7b:5b:fe:ef:80:c8:19:25:77:76:31:66:3b:6c:
d9:37:ed:80:3f:57:63:3a:9e:01:b6:a5:a7:f7:95:36:5e:a6:
4f:d7:b2:38:02:60:5b:3d:c8:04:69:c4:02:c7:a9:99:d5:78:
92:6a:c6:a9:b0:c9:a6:33:b2:da:92:a5:b4:31:8b:66:a2:98:
93:ef:1c:be:93:49:e2:fe:f7:a9:8d:c7:f1:d3:9f:a6:a2:a2:
15:91:98:1d:db:09:00:ec:b7:05:8c:ae:fd:51:0c:e4:62:30:
f3:a7:00:e3:ab:b8:18:60:cb:f8:fa:63:2e:77:95:3c:e6:0e:
fc:10:c9:c8:15:97:30:94:0c:9d:15:67:09:e1:38:94:41:66:
ae:3c:f2:f1:dc:7f:39:8b:e2:a1:08:aa:fb:dd:8a:ff:2e:2b:
bb:d0:48:a6:6a:11:37:ad:97:24:52:05:f4:34:c0:d8:b2:9b:
61:8c:b3:6b:ff:aa:11:3b:64:40:00:65:a9:2e:f8:ba:cb:73:
e5:57:68:06:89:5b:e9:78:f9:6f:cb:57:83:24:95:2a:ff:8b:
07:e9:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:11 2025 by rpki-client