Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File: YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier: LaZdYLGrlV4hSFaCnwmo1QbIshqbCBQ8B1/UQr8zA78=
Subject key identifier: 32:6D:AF:F7:0B:FA:AC:0B:6E:A6:EA:94:80:AD:BD:04:4D:87:F4:A1
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 019A5150441A9BD3A464DA2C84A189D25AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number: 0617
Signing time: Wed 05 Nov 2025 00:00:05 +0000
Manifest this update: Wed 05 Nov 2025 00:00:05 +0000
Manifest next update: Thu 06 Nov 2025 00:00:05 +0000
Files and hashes: 1: 5B2v-t9G6c4XLHchTlmKyr_cKIc.roa (hash: TNnzqom3GkwHYObP+jkKUQTCGEpJ+jMjRi9PWCmkNiY=)
2: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: b94u1xJm1KvM4txknStQ5t+mGCjrniQg0WbZ1FRLkK8=)
3: ZVHsY6ZkuvPvVgJnwVYAlKRfxu4.roa (hash: 5El1EqcO/tfZoHxTGK3Q7453jTBDE3FBJF97kpTWkjY=)
4: zEzHWCJriZKeuyYdBpl4VovFYcI.roa (hash: EKtQ2jHsCQ+lmT20oOt4vBuFgcYh84fbdOE/3vv/6ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:44:1a:9b:d3:a4:64:da:2c:84:a1:89:d2:5a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Nov 5 00:00:05 2025 GMT
Not After : Nov 6 00:00:05 2025 GMT
Subject: CN=326daff70bfaac0b6ea6ea9480adbd044d87f4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:9a:97:a2:e7:54:52:68:94:11:d2:e3:6a:
74:6a:02:9d:c7:47:df:bd:bd:ac:8a:73:f2:cb:56:
8f:70:fa:4e:3a:6c:a5:42:ec:81:00:78:b5:5d:05:
d4:82:95:d3:54:1a:36:22:61:40:4b:a3:34:78:12:
99:8f:10:2e:92:81:18:c4:98:78:34:1d:2e:32:24:
05:48:94:a2:9e:bf:0e:d3:eb:0a:0c:be:7d:a7:f1:
08:3f:d7:a0:74:c4:81:79:74:ed:71:59:6f:95:6f:
9e:3a:89:1b:15:d7:a2:0d:9b:0f:4b:76:f7:90:47:
dc:71:46:33:c7:de:74:e5:e9:ca:4b:df:ca:4c:58:
c3:a4:e3:f2:27:46:86:22:1b:96:56:f0:4c:40:aa:
c2:13:d1:e0:12:52:10:42:e0:6d:56:80:ee:79:9f:
e5:94:b5:d8:5b:49:7b:ba:a4:c5:18:ef:e0:b2:32:
94:55:0e:3d:fe:0b:89:f0:ab:de:f5:aa:a2:69:18:
c5:1d:15:9f:43:2c:02:d7:9c:bf:3e:3f:e6:91:df:
c6:36:4a:21:f6:34:32:9b:45:3c:b5:b6:05:54:f6:
24:32:b6:bb:eb:c0:0a:34:f3:23:1a:2e:29:e7:f0:
2b:e3:dd:fe:f7:ff:dc:16:aa:f7:45:e5:f1:c7:1f:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:AF:F7:0B:FA:AC:0B:6E:A6:EA:94:80:AD:BD:04:4D:87:F4:A1
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5b:de:c2:b6:06:8d:93:b0:e2:ca:03:b5:db:93:a9:60:9b:
b5:a3:d8:f6:0f:99:ab:bb:11:c3:e6:98:cc:40:8d:23:f3:ff:
56:d6:2b:4a:31:b9:7b:df:2d:06:fa:cf:2b:25:a2:2d:ce:70:
14:99:5b:e4:73:97:7f:e1:5f:70:69:f0:5f:d2:0d:55:ca:53:
36:c5:0f:12:5e:9e:e7:d1:4b:97:e8:5d:01:0c:63:69:c1:35:
33:eb:2e:3d:93:3c:74:ca:89:e6:bf:7c:2e:2f:e0:52:16:b6:
b9:c3:d1:fe:e1:e3:10:ed:e7:fa:b3:2c:21:e7:2e:7d:ab:18:
ce:62:d2:58:ec:e5:8b:fc:28:e4:20:2e:34:cc:45:20:eb:d4:
50:91:dd:79:90:ba:53:ec:93:db:03:16:f7:af:7c:50:d1:e6:
cb:57:7a:b5:7e:58:12:e6:f1:63:59:f4:54:05:7f:af:76:f1:
81:36:d1:0b:e1:41:c5:d9:a9:ad:17:7e:2a:ab:e3:16:81:91:
88:af:a8:7d:75:15:b2:3e:1b:c2:3c:cd:3e:56:ef:b6:8d:b3:
f4:ea:d4:72:48:87:e2:27:c2:11:1a:bf:31:dc:79:38:a1:a6:
cc:83:4f:3a:ba:0e:fc:84:f8:a7:83:91:9c:a2:da:5c:60:c7:
ac:8f:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:49 2025 by rpki-client