Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File: YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier: vV4Rf7b1sscmoM2WDchjRdbClsNuk9/mXq7bvi4WULE=
Subject key identifier: 1B:F7:DA:DB:8C:1B:BA:C2:0A:93:74:D4:7B:56:45:5A:C4:AE:04:15
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 019A533EA700AFC3A875B3D5A0C37C79613B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number: 0618
Signing time: Wed 05 Nov 2025 09:00:05 +0000
Manifest this update: Wed 05 Nov 2025 09:00:05 +0000
Manifest next update: Thu 06 Nov 2025 09:00:05 +0000
Files and hashes: 1: 5B2v-t9G6c4XLHchTlmKyr_cKIc.roa (hash: TNnzqom3GkwHYObP+jkKUQTCGEpJ+jMjRi9PWCmkNiY=)
2: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: O6n/xHCyhUBci7rNJpxaS7gdvXIau+0E/FrrCVZ4dYs=)
3: ZVHsY6ZkuvPvVgJnwVYAlKRfxu4.roa (hash: 5El1EqcO/tfZoHxTGK3Q7453jTBDE3FBJF97kpTWkjY=)
4: zEzHWCJriZKeuyYdBpl4VovFYcI.roa (hash: EKtQ2jHsCQ+lmT20oOt4vBuFgcYh84fbdOE/3vv/6ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:a7:00:af:c3:a8:75:b3:d5:a0:c3:7c:79:61:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Nov 5 09:00:05 2025 GMT
Not After : Nov 6 09:00:05 2025 GMT
Subject: CN=1bf7dadb8c1bbac20a9374d47b56455ac4ae0415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:87:8c:b6:e3:4f:61:f2:7e:2e:91:60:f2:
30:01:db:f6:5a:6b:21:27:e6:f7:f3:ac:8b:e6:1d:
c0:ad:59:ce:aa:9f:ed:cb:4a:c9:76:d1:65:25:70:
26:61:e2:9d:e0:7e:23:e4:45:f5:f7:0e:46:8d:06:
d6:87:21:7c:49:fb:0a:ef:f3:2f:64:f6:81:59:21:
14:95:bd:58:1b:eb:94:ef:0c:22:ca:da:36:2b:99:
f8:e1:e2:bd:07:3f:c8:82:35:ea:d1:cb:ab:85:f1:
46:dc:e7:49:18:a3:52:4d:69:d5:7d:33:32:39:a6:
35:4e:98:06:de:23:3b:b0:ee:41:a1:1f:e7:24:22:
90:5b:db:a6:b2:87:b3:ed:b6:b5:3e:af:3d:60:57:
64:f2:85:4d:25:bb:f6:d9:f0:f8:00:de:eb:a5:c7:
35:17:21:59:e3:85:59:99:ce:ee:56:40:ae:4d:8d:
9a:52:9f:30:2c:6f:64:74:1d:5f:1d:28:cb:5e:ef:
01:8b:a6:fc:3c:59:66:89:ae:b3:27:5e:17:23:ca:
b6:b7:b8:24:0f:6f:60:46:af:3a:d8:92:83:32:aa:
1f:44:db:a3:eb:e9:9f:d4:4d:21:91:5c:07:b0:f8:
01:cf:36:9d:36:57:8c:90:f2:61:a8:d5:5d:52:b9:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F7:DA:DB:8C:1B:BA:C2:0A:93:74:D4:7B:56:45:5A:C4:AE:04:15
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:00:7b:6d:d0:55:02:ec:99:18:ae:6b:b7:91:25:d0:23:c6:
c2:98:c9:0f:ce:5b:9c:89:96:4b:01:b8:cf:95:fb:49:4a:ab:
f7:a7:b1:c3:11:10:f2:58:57:1b:0c:5b:3c:c5:6d:e2:02:a6:
23:f7:1e:19:19:08:4f:0c:b5:c9:9e:40:b6:74:e8:6e:b3:fe:
b8:8c:25:19:5b:98:6c:24:71:fd:dc:bc:8a:a6:95:c1:6e:31:
47:aa:c1:b5:68:ac:9e:41:43:6c:36:8e:f7:7c:d3:a7:77:ab:
22:47:42:8f:33:a6:5b:6f:40:87:86:7c:ea:f6:39:b7:87:98:
0f:28:75:3c:f7:d2:48:fc:65:85:ec:de:83:4a:5d:c3:bb:e0:
e3:e2:f0:e3:aa:a9:a8:82:bb:af:6b:5d:3c:18:e1:88:0d:66:
db:65:a2:59:e9:0b:3c:e5:bb:3e:e1:bd:c8:94:af:15:30:d3:
63:a5:14:fa:f1:b8:d3:f2:8d:c4:73:93:5f:39:79:44:ea:8a:
e1:c0:d1:23:82:a7:db:0f:50:79:fd:c0:f9:00:63:d6:95:34:
af:4f:f6:32:67:12:48:b9:34:c2:a5:f3:95:89:72:2e:70:5c:
11:6a:f2:46:29:3c:9a:8d:e0:40:07:5f:d0:03:36:d1:d5:45:
2d:3c:62:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:09:59 2025 by rpki-client