Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
File: YG03z4fxLyqy3vMTgMOGuCbBnWU.mft (raw, json)
Hash identifier: UjQwFOQGUXqhBwPXyKsUfqZ9eK1y7jonvvX+ksLlDFU=
Subject key identifier: 99:40:3C:D4:A5:84:B1:E6:E3:AD:A4:21:49:60:71:08:69:E2:4D:6C
Authority key identifier: 60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
Certificate issuer: /CN=606d37cf87f12f2ab2def31380c386b826c19d65
Certificate serial: 019A72262D40605D4762705F80F55913A9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: YG03z4fxLyqy3vMTgMOGuCbBnWU.crl (hash: iDZArpMwWJjoXKKSLN2Bp4nQAFGhQUiKh9+3UlQKFTo=)
2: nLsyVuehs4jeCS4JRJE2VO5aV5I.roa (hash: ypIKdtNC4Ic9Sqbxvpei64KUmu5yr6lYiqShQ2+fMBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2d:40:60:5d:47:62:70:5f:80:f5:59:13:a9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606d37cf87f12f2ab2def31380c386b826c19d65
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=99403cd4a584b1e6e3ada4214960710869e24d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:91:ef:8a:07:d2:26:f2:97:eb:b1:bc:b8:2e:
92:b6:d6:4b:d6:e9:ea:0c:8f:ec:17:e6:c4:2c:db:
4b:64:31:4d:59:3d:ea:d8:b5:e6:73:d0:aa:5c:80:
e8:0b:69:d9:f3:3c:0b:80:7d:36:af:0a:e0:ce:c3:
50:10:2d:f4:7e:25:80:8f:10:15:40:9e:f7:65:7a:
97:47:c2:9f:b2:02:54:b2:d0:57:5b:be:74:3d:1a:
df:9e:bd:9f:d1:0c:7a:f4:3f:2a:49:45:ec:98:e2:
38:fc:cb:3c:7a:13:19:27:20:66:c8:83:ab:39:90:
b2:be:97:ce:3d:26:65:22:77:f8:e1:2c:aa:d1:4c:
ee:db:45:03:de:32:eb:0a:f1:ba:9a:00:55:63:61:
42:cc:c3:c0:c2:0f:11:5a:f0:7d:7a:77:b6:34:a2:
f5:af:05:79:45:ac:23:de:b9:9f:cf:c1:fa:ee:9a:
37:ca:fc:6f:54:e1:08:16:c8:bd:ff:9b:64:89:ab:
ea:a8:6c:af:cd:c3:34:2e:87:0f:7d:46:ae:1f:c1:
5c:40:1d:61:6f:e4:66:fc:c7:13:ed:7d:b6:55:b0:
32:89:16:00:ac:ea:10:71:41:e4:da:34:44:b9:7b:
68:33:e2:d8:a8:3b:29:b4:36:b8:e0:81:ff:3e:d1:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:40:3C:D4:A5:84:B1:E6:E3:AD:A4:21:49:60:71:08:69:E2:4D:6C
X509v3 Authority Key Identifier:
keyid:60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7a:df:2b:27:19:59:c8:d1:2d:79:d7:0e:74:40:e7:d4:95:
4f:70:f5:52:ce:93:23:7f:f1:00:74:ba:6e:a4:f8:e1:65:50:
7a:f4:a7:4d:f2:54:f9:66:66:5f:70:6b:3b:42:a0:f5:a3:cc:
50:4a:0a:fd:15:64:c7:8d:06:e7:7a:27:c5:e4:af:5e:80:55:
87:59:43:97:a9:61:44:98:2d:c1:54:92:18:27:f2:76:85:70:
b1:47:e2:b5:f4:6d:5f:ed:97:93:d5:54:02:1b:ad:43:2d:45:
be:d6:08:d8:b0:de:bf:0c:b7:35:bf:83:2d:e3:95:72:1c:d2:
f7:5a:41:45:ad:6f:14:c0:a3:35:d3:09:d8:cd:00:95:8d:72:
5a:e4:c1:f7:38:f9:c9:9f:f5:e7:61:f5:ad:4e:12:48:4a:b1:
85:59:75:65:e9:d2:0b:f3:fb:6c:3d:da:76:3b:93:ed:4e:36:
40:9d:0e:eb:4a:eb:4e:04:74:ac:fa:01:bc:54:54:71:9b:c5:
17:b6:18:07:ac:5b:a0:07:11:ad:0f:90:f2:05:70:a1:24:49:
7d:48:d5:92:b5:3f:0d:0c:95:5a:1c:a8:ac:38:8a:47:4b:cf:
99:a5:9b:e3:bb:cf:75:70:f7:54:7a:b7:38:e1:48:18:04:97:
cd:2e:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:42 2025 by rpki-client