Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier: +w7sy8MIcj619jAp2owLRw6floJMWUhDRux2+9np2vk=
Subject key identifier: 8F:61:50:C5:4D:26:3D:DA:F1:94:66:DA:89:77:8A:D2:B5:35:1E:9A
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 019A733852122110746C4252A1B7EE49106C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 14:01:02 +0000
Manifest this update: Tue 11 Nov 2025 14:01:02 +0000
Manifest next update: Wed 12 Nov 2025 14:01:02 +0000
Files and hashes: 1: 8gQzPchz9vCwdjVN_ZBPueH3G6Y.roa (hash: Z7w2/N0mbKOYhB3ua7HBgoWG65DoIXePIy8hWS+i+vg=)
2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: i8iNVh7ggpfasisZOH7mQ0MyDPQRIYZsq/ztmYS3+lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:52:12:21:10:74:6c:42:52:a1:b7:ee:49:10:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Nov 11 14:01:02 2025 GMT
Not After : Nov 12 14:01:02 2025 GMT
Subject: CN=8f6150c54d263ddaf19466da89778ad2b5351e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:95:1e:b9:a7:a6:ef:9a:3f:b3:0c:8b:93:
cf:6c:c4:b4:29:77:97:ed:58:19:f6:e6:f7:d0:ed:
f3:b4:21:90:d4:51:85:0e:72:bc:7b:54:7b:03:c7:
c2:77:d9:48:e6:9b:7d:e2:22:ab:f5:e8:38:b9:9c:
b3:2e:a7:25:a9:cf:69:47:4d:e0:fa:d2:93:57:a9:
a2:dc:e6:6a:db:35:60:fc:90:9f:d1:5b:2b:30:a6:
26:e7:aa:dc:ae:43:de:71:b3:08:e5:88:f2:13:3c:
b0:08:fe:31:5e:40:f2:6b:05:62:4c:cf:f9:08:4f:
b3:3b:21:47:1d:2a:c1:c2:dd:60:2c:74:c7:10:69:
a7:2c:9d:d0:fb:7c:e3:7f:85:cb:ee:7e:aa:0d:0a:
ed:4a:f3:77:57:8b:e0:13:21:60:6c:6a:fd:7f:d2:
62:d6:c6:74:df:d0:81:7b:3b:e8:19:b2:54:63:41:
d7:07:ee:52:f1:0e:0c:30:49:1e:3b:82:9d:42:7d:
7f:8d:9a:53:b2:e3:c5:2e:35:55:d6:da:79:73:74:
36:8a:87:a8:a2:f7:1c:35:b7:b5:3b:d4:fe:31:31:
96:b5:d1:2e:fc:22:02:fc:d1:2b:ff:7e:1c:b1:25:
69:2a:77:b3:84:bb:a1:43:76:ae:ef:f7:28:a4:8e:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:61:50:C5:4D:26:3D:DA:F1:94:66:DA:89:77:8A:D2:B5:35:1E:9A
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:35:c7:d8:90:08:3c:3b:e6:f6:d0:dd:87:54:9c:01:48:4a:
93:da:11:40:f2:5e:6e:38:ef:10:26:d2:f2:b0:b6:f5:7b:04:
70:72:58:77:be:f9:8b:83:34:22:5c:03:66:ae:1d:31:45:bd:
df:92:b3:05:b6:c8:b5:7a:93:a2:d6:6e:7d:c0:33:92:7d:30:
d3:ae:b2:9a:74:8e:23:27:47:60:8b:ea:ed:be:a0:44:60:43:
c5:34:24:89:c6:36:28:4a:fa:84:52:78:ca:a8:94:77:be:e7:
9c:71:72:5d:f7:7e:28:1e:82:7a:2d:38:e5:e3:9c:46:92:0e:
16:43:d6:29:8c:a1:3a:99:42:bf:fa:75:b2:1a:d4:69:50:e5:
53:b3:53:30:cd:9c:db:2a:82:28:52:c6:99:c8:8c:fd:f7:cb:
0e:c7:57:c7:26:12:03:f3:26:fd:b2:fc:95:f8:e4:10:8e:d1:
bc:1b:2f:2d:b2:ec:af:ca:dc:87:40:fd:51:aa:dd:25:c0:89:
8e:d9:56:b7:a2:ea:fc:c1:68:25:64:57:4e:d2:7c:4a:d4:1c:
65:a2:42:06:a9:19:0f:3d:6e:2b:bb:b7:f2:88:6f:4c:2b:39:
05:64:52:77:62:e0:2d:ab:77:7c:d7:99:41:43:f8:ae:c3:3f:
14:92:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:15 2025 by rpki-client