Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
File: Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft (raw, json)
Hash identifier: hWuZfTmFvh95Gdhe+NsOptz/pS1aR7v4ebYyzKm2fWs=
Subject key identifier: E1:00:38:81:09:AA:8B:FC:8C:FA:9E:A0:62:C9:F2:AB:D9:3F:56:D7
Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Certificate issuer: /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Certificate serial: 019A729354E6C26E83178EBD7DBB14E8D0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: BLUnMEvzOCDdig3vAOJNkanKcVQ.roa (hash: FOxz1hyJdKlYisYef78m6hR6cwVT1BQH7/wecUVrCqc=)
2: Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl (hash: Spi99Vx6DSC6fCgpBEc6WdPX4TmJI9lO4VJaGJW+Y3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:54:e6:c2:6e:83:17:8e:bd:7d:bb:14:e8:d0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=e100388109aa8bfc8cfa9ea062c9f2abd93f56d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:25:82:fe:7f:ee:bc:e0:24:79:a8:70:df:
ea:db:61:aa:5b:75:58:b7:c5:90:16:ce:56:7e:72:
30:0a:34:5c:f9:18:e1:6b:3b:64:32:96:bd:f4:93:
af:d5:ab:fb:76:b0:50:d4:6a:da:5b:4f:54:c4:60:
b3:1b:f7:91:65:97:ef:54:1e:0c:e0:0c:f0:d3:c6:
9b:a3:80:ff:38:bc:c3:79:42:ab:df:5a:17:4c:c6:
1e:97:e4:c8:bd:2a:c0:64:9b:04:0c:d0:f7:00:a8:
0d:cb:19:65:9d:fe:f9:1c:41:6a:08:c1:5e:79:3a:
30:8a:54:a2:76:67:98:89:14:c4:84:92:88:f7:71:
d7:3f:c0:0d:86:60:26:20:c3:d0:1f:ec:93:a7:f2:
01:f5:e0:5b:79:93:ec:6a:4c:78:55:89:50:cf:7f:
69:19:a6:48:1c:ce:7d:53:eb:c8:0a:27:41:3b:f7:
83:a8:e5:07:12:51:fe:76:68:51:b7:70:16:59:bb:
b7:65:75:da:32:e3:fb:f2:f8:35:7c:6b:18:c4:41:
cf:7f:18:b3:a4:94:c4:86:0c:b7:58:b9:9d:e7:ed:
fe:4a:1b:8b:0b:a5:4c:8a:52:02:77:c0:c4:9c:24:
4f:c7:40:3f:1d:b6:dd:18:97:cb:84:85:82:17:22:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:38:81:09:AA:8B:FC:8C:FA:9E:A0:62:C9:F2:AB:D9:3F:56:D7
X509v3 Authority Key Identifier:
keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:97:33:96:01:9d:a2:4c:f6:3b:e7:48:f3:bb:ba:d2:2b:2f:
0f:e3:eb:da:9a:2d:a4:0c:45:a0:73:b0:14:f6:6b:aa:a8:02:
1a:58:ce:98:35:fa:d4:f2:5d:f4:93:23:6e:6e:21:93:b2:d7:
84:48:af:fc:9d:c8:4a:2f:09:bd:83:2b:fe:85:23:6b:48:bf:
fb:3d:e5:03:d1:ec:58:46:bb:56:25:cb:c4:7a:cd:56:77:d2:
18:10:fa:b0:74:23:95:c0:cf:f3:2d:88:b1:fc:2d:5c:d5:22:
14:a3:46:2d:95:50:7e:40:0b:c9:db:87:f8:f7:81:75:fe:ca:
91:35:03:fa:aa:a8:8d:e3:e2:ae:16:14:c7:7d:51:15:c8:d8:
cb:ee:35:39:5a:9b:40:77:b1:bb:ed:a7:7e:81:a8:3f:c3:35:
9d:8e:3a:80:89:e7:79:bb:1a:4d:d0:40:f5:bd:98:4e:ec:7f:
6d:f5:21:2f:98:d8:b4:5a:6e:16:9b:5c:70:df:a7:79:dc:89:
74:f7:68:71:0e:1b:d7:a0:68:68:e6:d2:c7:85:e0:f1:b0:2c:
87:e6:7f:64:0d:29:f0:af:07:66:a7:36:09:1b:d9:eb:e3:2c:
ba:e6:12:30:57:0b:19:4e:f9:59:29:8c:d9:7a:7f:e1:8b:43:
b9:53:e9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:22 2025 by rpki-client