Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File: YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier: nfwdjTn3Prj2+UnUK39EusHWDVVjTFDMCvcQrIIOAY0=
Subject key identifier: 1B:C0:C6:E5:6F:70:D7:F8:40:83:77:0C:94:58:2D:AA:8B:01:6F:C6
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019A53E409BFFC7150222FF7BD2796977B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number: 12C3
Signing time: Wed 05 Nov 2025 12:00:44 +0000
Manifest this update: Wed 05 Nov 2025 12:00:44 +0000
Manifest next update: Thu 06 Nov 2025 12:00:44 +0000
Files and hashes: 1: AbbCpXYiPra6RxhQTvg6tXGKv2M.roa (hash: FNfTwP/KDnV+ro4Bwjh1vRofBv3ZvkWsRE+40NBNKuk=)
2: FGboOzE5w8Avx6zvXiGJurlcXzU.roa (hash: ME54k9XxSNDAp5P0H67LsrOuZ6Ebe7/DSYtgtZypMoY=)
3: Wbf3TpGPW6_mWaG66XxtMUTmb5k.roa (hash: Kx6Oc/JjYSTEsN+RCZ0T24iZupA82iqVacFfzuICYqY=)
4: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: oLjDTm9NfMeWaFtY2853rWTdFYerEvn90KCIHDG5cRo=)
5: hqDxB-Ir5z3Y_G6a9rOSto5ZH88.roa (hash: 2802mZRHrPPS6iUejTLOubgUc+cQnwe3PYotooKVAJk=)
6: od5OSHsrRHxJrICxzwVu43I_RWY.roa (hash: EQRBns0cqYxWGEdIIr3QIm5kW2CuUKF+BPL8pSHvs8Q=)
7: p03EoH5XFva0OIfQnxqffNm4ZvE.roa (hash: Wew8is0Ow617QiWMc1vuUJjZYXt68/dM84EY8eQITFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:09:bf:fc:71:50:22:2f:f7:bd:27:96:97:7b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Nov 5 12:00:44 2025 GMT
Not After : Nov 6 12:00:44 2025 GMT
Subject: CN=1bc0c6e56f70d7f84083770c94582daa8b016fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:e1:15:c1:3e:2e:48:e6:f2:38:b5:51:60:
ee:fc:8c:16:29:67:ed:d3:a7:c3:bc:b3:8b:b9:9d:
d5:0e:bd:a8:13:97:fd:f9:19:06:e9:a6:0c:c2:18:
b6:f9:4e:95:d2:b0:0f:4e:37:29:d6:e5:c0:61:64:
71:fe:11:ec:b0:5d:35:59:c0:a1:08:29:6e:6e:45:
10:ad:30:4d:22:4b:8d:09:67:c6:2f:91:5a:d5:ef:
1f:00:fe:2d:32:36:7f:61:8c:5e:51:7c:f2:52:14:
72:58:fc:4d:20:93:6a:2b:43:27:ef:80:3f:45:e3:
9b:22:d4:5e:9a:02:16:25:ad:ce:db:b5:96:3e:2f:
d9:f4:5c:ad:a0:9b:fd:b1:30:41:46:4a:42:85:b3:
1b:99:bf:de:a4:2d:73:c4:50:5a:2f:ac:33:17:b5:
0a:42:8b:31:94:0a:f5:49:b5:ba:50:4e:31:21:ef:
e7:85:89:fe:bf:74:db:9f:d5:3b:cc:85:84:15:ea:
fc:20:b9:b1:bb:57:c3:8f:9d:07:db:43:d9:56:81:
d4:2d:02:eb:85:ed:a4:d0:4c:56:2b:c1:6d:2c:3a:
24:dd:5b:76:bd:69:2d:b7:b5:b8:68:49:f1:a4:ad:
17:78:e2:0c:27:c1:cb:47:3b:8c:86:c5:18:11:bc:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C0:C6:E5:6F:70:D7:F8:40:83:77:0C:94:58:2D:AA:8B:01:6F:C6
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:90:ac:c2:2c:c6:c3:e2:d3:64:f6:96:f9:f3:f2:ef:32:16:
b4:d1:e5:10:70:20:2d:0f:39:f2:cd:df:e0:01:21:e4:42:ac:
68:58:17:56:e3:73:7f:69:1a:28:7f:74:41:67:21:4c:58:46:
f4:a5:e1:93:fa:d2:14:b4:6e:fe:2a:82:c6:51:4f:7e:f6:52:
30:5c:9b:3e:2d:b1:ef:dc:e6:ce:ac:ce:c9:79:da:04:2b:ea:
02:da:a8:ce:63:37:d3:a9:4d:78:31:23:bb:1c:34:09:98:b8:
68:a0:f8:fb:6c:7b:07:4b:79:a7:41:39:e5:cb:6f:cf:5a:1d:
27:25:96:e2:70:79:86:97:34:a9:ca:7e:b6:35:e3:7b:1d:59:
59:48:0d:0a:a9:42:56:89:fd:65:32:c7:07:ef:0b:0e:74:23:
7d:00:de:d8:82:d3:b9:7d:34:34:ec:44:aa:f1:49:03:bc:3d:
3e:4d:f7:a9:27:c0:1b:3a:02:63:ec:f6:13:ce:d2:90:c9:7b:
83:87:7e:16:bc:4d:b3:cc:ed:f3:1e:c8:e9:5b:0c:74:50:2b:
80:b9:97:f2:37:56:35:5f:ec:3e:80:4d:79:1a:37:c6:b7:b3:
14:f6:4b:50:23:94:b2:1b:13:ff:cd:8c:d4:c1:91:7f:b3:0a:
40:87:50:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:00:00 2025 by rpki-client