Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier: lHUyrVbdbu7oRlII8L6gk9wNAtBkIYQM0y/BnId9v8w=
Subject key identifier: CC:6B:9A:57:07:E0:35:44:DC:53:0B:DD:9C:84:68:4A:0D:04:79:98
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019A1D2C66B3401E6594D5C58FB890C679C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number: 174D
Signing time: Sat 25 Oct 2025 21:00:40 +0000
Manifest this update: Sat 25 Oct 2025 21:00:40 +0000
Manifest next update: Sun 26 Oct 2025 21:00:40 +0000
Files and hashes: 1: BH4JiNSau-Drbx1LaCjE1x1v30A.roa (hash: TbmERc+CgiPXJOmSpqLjpiM3C2RIrXoRaOqYGrV/7rc=)
2: J2m2ISQHz5hJjKyZkS2pJF0KRqI.roa (hash: 6G3IQ5SdI2eYbxPznkHPeUYzIj1Gq0tlz/lJz4R+v2c=)
3: SFLP_O5gMZR0WsCuXHR4ZdOSZPk.roa (hash: UbOmDq06cZHsS8VjamPq3g5BfVIGBovzKg8WrS5EEIE=)
4: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: mtJLoZ5loUT2ihr6UlJw0lsUQ9wQ0Nxy8DjfNYLHw1E=)
5: bePIOwHo2yd_SzOvruKwF9356uc.roa (hash: AE/WNLdQCiM+hKgplC+GUSqytNFuyhj+98knbmTnMvA=)
6: fj1r2eQRURbfHzLqz1r8LUH9mVA.roa (hash: RTFZ5yGadIatm8cDgVUSamVjEv2odxS8PZJ1SetFXHU=)
7: fo6XvxSOTmhFArIWsIgE447XkhA.roa (hash: SZc980voofGZ82uEz4sev4EijzVTNOSOoK+3QgYr0Ak=)
8: v3x5iNNrmiatDTviLrTJBlnNTao.roa (hash: y4jZmJDEPRDwVYIDs+oTsrk+QPXd/ySPMMJZ/R51xOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:66:b3:40:1e:65:94:d5:c5:8f:b8:90:c6:79:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Oct 25 21:00:40 2025 GMT
Not After : Oct 26 21:00:40 2025 GMT
Subject: CN=cc6b9a5707e03544dc530bdd9c84684a0d047998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:4e:84:af:a8:69:40:15:86:4b:66:f5:a1:
99:61:50:77:9a:2a:30:8b:23:8a:28:ba:39:26:ee:
6d:43:13:3a:ab:d7:a9:2a:b7:33:89:41:1f:cb:8f:
70:45:23:2d:97:d7:4c:ab:0c:37:24:f5:6c:d2:5c:
fb:46:3c:ee:9f:a7:e4:58:5e:c3:5a:5a:fd:15:4c:
63:c7:4a:be:04:67:3a:c3:87:16:18:f4:90:9f:7e:
ba:ca:4f:31:96:76:15:74:60:75:59:ee:01:8f:c7:
90:17:4c:c8:14:f3:7d:c8:e0:be:42:cf:af:e4:de:
d0:da:f8:f4:22:9d:cf:7d:18:f2:b5:2d:7f:94:f5:
67:45:db:4e:ea:72:ec:1c:4c:97:fc:d7:2c:62:1b:
50:65:85:34:4b:27:11:fc:ee:78:5b:02:20:05:63:
57:73:26:dd:9b:60:83:98:1b:61:4e:25:72:3c:a4:
28:12:12:a5:52:d8:7b:23:ff:0a:f5:97:5f:cd:20:
f4:d8:ec:23:6a:d4:d0:eb:90:d3:97:05:9f:17:a2:
e8:00:53:1f:4a:e2:f6:2a:65:55:13:35:15:36:4d:
4a:8c:a8:8e:fc:3f:a3:36:08:1e:1f:6f:c5:64:d9:
03:bc:07:42:f3:42:28:6a:a0:7f:0f:ab:15:ca:85:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6B:9A:57:07:E0:35:44:DC:53:0B:DD:9C:84:68:4A:0D:04:79:98
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:49:a7:d0:cb:56:57:c3:be:e8:39:3a:96:aa:41:fa:15:3e:
de:ab:38:d6:ab:2c:50:21:82:ee:7a:27:ce:3a:bc:6d:16:87:
67:4a:7b:1b:5a:b6:db:6e:55:e6:40:e0:0e:ad:68:80:f5:99:
9f:31:e7:eb:05:52:9c:b4:8c:ab:fc:ae:6c:64:62:6b:45:3f:
bb:e3:64:e7:11:94:10:30:4b:55:70:db:68:e2:f8:77:5f:b8:
08:bd:23:29:c7:22:f7:36:32:88:f1:78:38:8b:c3:6f:47:c3:
14:1a:3c:9b:43:5a:3b:a7:a1:8a:37:dc:b4:89:05:0a:26:3c:
33:b0:89:e8:7d:c2:bb:f1:22:a5:ba:a6:de:0a:90:80:80:c9:
77:ba:a2:97:41:b5:4d:ed:fd:28:5b:25:80:17:b8:1f:08:cb:
5c:ef:69:2a:82:50:0d:1c:e5:7e:de:c6:e3:b6:18:e0:98:8e:
4b:24:56:72:1b:be:58:33:2b:38:0b:b7:2c:63:c0:97:22:84:
3b:2d:f4:f3:30:03:78:b3:a3:4d:4a:50:73:fe:5d:87:ad:eb:
48:32:82:7d:5c:8b:90:da:10:c0:ed:25:fa:0d:99:a9:00:a9:
17:9d:f9:e1:72:05:02:2b:16:4f:bf:5d:c5:36:e5:bb:53:31:
66:28:84:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:36:29 2025 by rpki-client