Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: LRPsJj5eqrPjtTrEv2QAbM4iBMYr54okDANMAyVZiuA=
Subject key identifier: 4F:93:C4:F5:06:C2:C0:37:A1:D5:27:0C:16:6E:47:DB:8E:DD:34:3A
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 019A71B7D740EEC17B9666AAB23B8E39863F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 0114
Signing time: Tue 11 Nov 2025 07:01:04 +0000
Manifest this update: Tue 11 Nov 2025 07:01:04 +0000
Manifest next update: Wed 12 Nov 2025 07:01:04 +0000
Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: 12z0h+LAlKNi0WM/wXZ/kt57AU8pnOqLRBRs2RY9224=)
2: ef5i4gFsUjQtA9jIFWXZmLBsI5w.roa (hash: nHPFZXhPCy6Yr/I1NdWh8sLmeUGTngr7MiMVHJxQNuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d7:40:ee:c1:7b:96:66:aa:b2:3b:8e:39:86:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Nov 11 07:01:04 2025 GMT
Not After : Nov 12 07:01:04 2025 GMT
Subject: CN=4f93c4f506c2c037a1d5270c166e47db8edd343a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:fd:89:92:82:ac:86:db:8e:64:36:94:52:
a1:87:3c:97:6a:6d:62:ac:f8:bd:b9:26:ec:cf:54:
a6:f2:d2:6e:8f:21:57:95:7b:2b:35:ab:99:b3:0c:
a7:3a:eb:c0:15:a3:17:7d:e6:52:03:f0:87:13:c0:
53:fa:b0:7b:0b:99:3a:14:37:40:37:09:9f:fd:8f:
81:84:24:c1:02:b0:b8:4f:51:c6:35:67:be:55:59:
75:bf:7a:c9:63:d3:ba:cf:f2:2b:d0:7c:32:99:c4:
4f:d9:f9:37:fa:99:a1:c2:6d:69:a9:20:d1:6c:ba:
ea:fd:8b:68:5a:b8:cd:f0:b5:85:78:76:3e:24:52:
0e:13:78:25:ec:59:d2:68:95:cb:ab:16:f3:3d:e6:
0b:6f:a2:95:06:7a:43:79:9b:4b:dc:d5:fc:55:d1:
14:a7:23:4d:a3:b4:b0:ef:91:01:93:31:2e:a1:5c:
24:23:32:89:65:48:77:75:1d:a3:31:64:d4:a4:98:
c5:08:29:b9:36:0d:a9:b5:2d:b3:56:fa:24:a6:cd:
f2:7c:17:d2:4e:40:dc:83:d2:c1:6b:8e:e2:ae:34:
e8:19:18:be:e0:39:61:e9:de:cd:08:d5:d5:ad:86:
8c:a3:4b:06:6f:a6:ee:e9:ce:19:85:02:34:20:42:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:93:C4:F5:06:C2:C0:37:A1:D5:27:0C:16:6E:47:DB:8E:DD:34:3A
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:44:88:57:35:4c:b6:9d:ae:6e:54:a1:ad:b8:c3:20:40:54:
17:89:24:50:cd:b5:8e:0b:c1:1b:1c:0b:42:6d:23:a7:97:a9:
4b:02:ac:df:4e:3d:0b:7f:68:9b:78:db:39:51:f6:d3:8b:d7:
e8:15:26:ba:db:ef:6d:32:cc:3c:c2:9e:d8:dc:92:7d:e1:61:
4e:ff:22:f0:c9:bd:da:3e:ca:b0:83:30:db:1e:67:e5:52:ff:
dd:a9:06:8d:8b:3d:6d:aa:5b:de:c4:16:0b:89:e6:a6:ba:14:
41:cf:52:5a:3c:d1:87:6d:65:32:4d:52:ad:0b:eb:6a:94:94:
16:db:b3:b2:5b:0e:d8:3e:09:93:a9:0a:13:65:55:75:8f:fb:
cb:49:bf:8b:9c:cf:60:ec:f6:e6:34:5f:c0:a1:fa:15:4e:11:
55:3a:48:4a:c4:c2:53:fa:20:aa:17:79:3f:14:58:9f:49:c5:
d1:98:e0:c7:65:c2:e0:3a:87:47:75:0c:8d:3a:e9:ea:bf:d8:
0f:1b:3b:ae:5b:f7:19:c0:2b:55:0f:fb:62:ed:0c:68:99:3d:
b8:db:b4:10:4c:1e:2f:72:44:30:a9:f3:76:59:b7:7e:0d:a6:
82:8c:d1:16:f2:a1:2b:ba:a1:ce:93:4f:aa:d2:23:25:15:66:
fc:1f:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:57 2025 by rpki-client