Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
File: Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft (raw, json)
Hash identifier: eqQAfqUmAX+yKmUR3vqUhozl6sfuJmT6thjoqsqaZck=
Subject key identifier: D6:C6:B1:BC:DF:35:FB:51:03:4F:23:82:E1:30:4A:2F:E0:FC:C1:D9
Authority key identifier: 62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01
Certificate issuer: /CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01
Certificate serial: 019A714A2B671AD64D3E457B55732D806C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
Manifest number: AC
Signing time: Tue 11 Nov 2025 05:01:17 +0000
Manifest this update: Tue 11 Nov 2025 05:01:17 +0000
Manifest next update: Wed 12 Nov 2025 05:01:17 +0000
Files and hashes: 1: Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl (hash: DUOA4tSWWePyGtPCmZ8rt6LaOljfDNifHAfzXhxL/yU=)
2: ipcATIgjas4T7BZfo-TD2nEX73w.roa (hash: ZBUqGgdfAWnUdQLDLJSVqqEZc8Zkflrw7OQeA+w/zN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2b:67:1a:d6:4d:3e:45:7b:55:73:2d:80:6c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01
Validity
Not Before: Nov 11 05:01:17 2025 GMT
Not After : Nov 12 05:01:17 2025 GMT
Subject: CN=d6c6b1bcdf35fb51034f2382e1304a2fe0fcc1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1d:81:81:6e:72:32:c9:87:ca:8d:41:70:66:
17:19:0d:ac:c3:11:3d:dc:33:fb:c0:d2:15:ff:57:
e4:c6:f9:b2:f6:5c:e5:1e:32:41:6a:31:73:3b:aa:
18:d6:88:8e:38:ea:fe:e3:25:93:2f:43:be:47:06:
a7:d2:56:57:29:69:02:7d:35:b1:c9:8c:e9:48:e1:
be:ae:e1:ff:57:8c:58:a4:2e:b6:fb:ad:fc:f0:d1:
bd:b9:39:60:c9:70:7f:25:82:61:ec:86:5b:63:93:
b0:f0:2a:53:5e:d9:2a:31:ba:8b:6f:b9:b9:35:1a:
86:57:5c:ab:b1:1a:57:aa:7b:50:85:5a:24:07:07:
28:ea:70:37:42:97:9d:46:28:f0:49:7e:14:39:c6:
ba:91:27:15:c8:f5:fb:4e:61:ce:d3:3b:47:a9:99:
b9:31:d0:5e:d4:fd:39:08:cc:0e:77:b1:d4:d4:8b:
21:bb:ba:1a:53:98:1d:5f:b9:ec:9e:cc:da:a8:03:
8e:86:ac:42:fc:64:1a:35:86:de:3a:6a:7d:63:31:
f5:5b:71:5f:a0:bc:87:9f:57:53:b6:83:53:d8:69:
fc:84:c0:93:b2:5c:e8:5d:9d:32:3d:9d:86:09:5b:
60:8a:a0:78:f7:6d:1a:fc:15:8f:05:f6:ee:e2:ac:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C6:B1:BC:DF:35:FB:51:03:4F:23:82:E1:30:4A:2F:E0:FC:C1:D9
X509v3 Authority Key Identifier:
keyid:62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bd:c9:fd:48:eb:90:fa:17:07:e5:c7:7e:1c:41:90:52:2d:
a5:d2:7d:d6:d2:10:49:ed:1d:d0:29:44:72:8f:1d:31:b2:59:
07:37:16:60:93:b0:7a:c2:7c:34:dd:8c:72:83:66:c2:c2:2a:
88:09:5a:7d:9f:74:ea:e0:06:f9:ae:2a:53:1b:cf:3e:ee:1a:
c1:34:be:3a:89:b6:b5:01:32:62:e7:34:22:78:36:e7:43:6f:
77:68:33:46:c4:63:d8:b6:b0:ee:88:e9:7f:a3:d4:e7:0c:43:
cc:4f:ae:f7:f4:6e:2e:ac:20:e5:19:55:79:3e:d0:19:ea:f0:
e3:6a:ce:c5:6b:b9:b4:c9:da:c2:82:33:4f:e0:50:db:63:30:
87:d7:a6:27:f6:d1:e9:d4:37:0a:de:80:e2:0e:71:33:51:ff:
68:cb:24:4e:ee:dd:d8:73:ed:bc:3a:48:a0:77:1d:50:c0:fa:
b2:39:8e:b3:b6:fc:4e:88:ad:75:ef:57:38:bb:06:c7:72:e7:
d2:34:cf:4f:cb:c8:7e:ed:07:1d:36:9b:b7:9c:00:a9:a5:7e:
d6:25:83:3a:63:9c:0e:8f:6a:73:0d:c7:83:96:40:0f:01:a5:
6a:d0:ab:17:20:ee:c5:0c:e5:7e:68:30:5a:a4:09:bb:db:c2:
2e:ae:1f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:30 2025 by rpki-client