Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json)
Hash identifier: rNwZaoefpt1i79iBJzJMWGTD51NjBwR6RYmYouPg1JY=
Subject key identifier: C4:13:0F:2F:8D:F3:54:2F:6B:4E:F3:F1:50:16:85:50:07:2C:E4:1D
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 019A2AB18C0B508801846462BD1E8895B0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 12:01:09 +0000
Manifest this update: Tue 28 Oct 2025 12:01:09 +0000
Manifest next update: Wed 29 Oct 2025 12:01:09 +0000
Files and hashes: 1: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: 725qo3qP4kWyAH8UK0dqhvPk9O0vxzz4vtwdF8NcwP0=)
2: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (hash: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=)
3: uiXugz_zdUbpxMkNc0xXlcVLf8Q.roa (hash: v6GaXjJ/81kT64ynxaO/yyZsUsxo0QcrAwLzz7FnW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:8c:0b:50:88:01:84:64:62:bd:1e:88:95:b0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Oct 28 12:01:09 2025 GMT
Not After : Oct 29 12:01:09 2025 GMT
Subject: CN=c4130f2f8df3542f6b4ef3f150168550072ce41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:5e:ea:ef:9d:0e:da:a1:5d:54:07:28:c6:
3a:2e:30:ad:53:c8:f6:ca:06:f4:31:9d:82:e8:3f:
d8:93:06:01:76:fe:01:95:c8:ab:ee:b1:49:85:3f:
36:ce:cd:28:35:71:ba:65:ce:ac:0a:0d:30:49:81:
5d:e4:68:ab:16:2f:b2:0d:e4:df:a0:3c:8a:f3:16:
e0:42:85:5a:5e:17:e0:f4:14:88:8b:23:6f:fb:d2:
dc:dc:47:59:4a:b9:d4:4c:d7:34:94:39:14:d4:6a:
dc:d7:75:ce:56:03:c0:b8:8c:34:49:f0:53:0c:c1:
16:16:f2:b6:62:71:f4:d9:9c:9a:31:c4:29:e4:c4:
87:dc:0e:0b:ca:ad:8d:bd:45:9b:f0:14:cf:b9:4a:
f4:b8:f6:41:a4:1c:3b:c0:22:ca:b9:db:ff:c0:aa:
14:ab:73:71:a6:dc:38:c5:60:e1:44:3e:65:88:9a:
25:22:03:cb:a0:e7:a3:a9:9f:61:5c:d2:66:63:12:
76:55:5e:fd:a4:dd:2e:69:49:18:7a:33:63:85:0b:
70:99:bd:4a:78:c2:b9:56:66:fe:49:5c:39:56:74:
59:44:80:1c:3d:e0:10:93:6c:3b:07:2b:02:57:60:
dc:2e:97:a8:be:df:da:ac:c4:80:0e:71:9f:0b:f6:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:0F:2F:8D:F3:54:2F:6B:4E:F3:F1:50:16:85:50:07:2C:E4:1D
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:47:79:0e:03:18:57:d4:ad:7e:76:b4:a1:21:0e:5b:b6:4d:
f8:dd:1c:c6:be:68:72:cd:9d:c1:cb:6a:11:b6:09:fd:d8:37:
13:93:15:5d:8c:2f:4b:06:ec:0f:e6:2b:11:9f:18:fd:26:80:
60:78:10:4b:6b:bb:1b:0e:91:9c:b0:fd:de:ea:6b:10:78:e4:
4f:1e:da:ab:5a:9c:2b:8c:7c:9e:dd:b4:89:cc:97:a6:f1:7c:
71:1a:90:e8:fd:49:82:9b:12:b8:db:a2:32:84:8c:ce:69:10:
1e:01:aa:1c:70:3b:98:5d:e4:ab:88:88:15:e7:ab:55:e9:70:
ed:39:9f:bb:b7:0f:85:f8:b3:8a:96:43:67:18:eb:d7:f8:a8:
4b:b2:71:64:e7:a2:ec:05:10:ba:c0:0e:58:b2:6d:47:20:04:
5c:4c:58:74:af:f2:02:38:ca:cc:47:3f:bd:f5:07:d7:91:1e:
d7:83:3b:f1:21:c8:b1:eb:c0:66:e7:aa:34:64:aa:16:6b:ca:
f8:c6:20:f3:b0:7c:63:b8:e9:b8:df:30:e2:0f:95:90:0e:75:
ad:9f:61:30:4c:c7:a8:ed:8a:e6:e2:87:f4:10:77:63:41:32:
4c:f3:e1:00:17:3f:df:2d:4b:72:be:80:44:14:d1:3f:e9:c2:
46:17:1c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:46:49 2025 by rpki-client