Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: TJewdhWH5JJk+Q9GD9nXbyxTeM1XNyyz+PRMx67HMhg=
Subject key identifier: BF:6E:76:40:6F:41:E8:0E:75:BB:D1:52:44:EB:4A:9C:A7:0D:7A:79
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 019A71B84F04FA7E506EF0485532AF80491A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: 02F1
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: BS/Bw5alKT7m5U1LnOmjps54nGDDXfn3wOqURvoSB/U=)
2: wK5U0OA4so9Bb6LaTOAhvYcrZbw.roa (hash: i3F3Ec/aHEk6lLvyEsCOnZPx8LpXq7mO54DzXI/2qs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4f:04:fa:7e:50:6e:f0:48:55:32:af:80:49:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=bf6e76406f41e80e75bbd15244eb4a9ca70d7a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:86:5c:94:1c:20:03:8a:af:38:10:0c:60:
b9:4f:58:21:0d:97:85:c2:83:e8:44:1c:e8:dc:db:
ae:61:3f:fe:e7:0c:3a:2b:c9:fd:19:3d:e5:9b:f1:
e4:c5:bf:2f:23:0f:34:a9:86:86:36:04:40:d6:c8:
9a:14:10:72:39:41:dd:ea:36:7a:68:dc:0e:fa:3c:
46:1a:1e:c5:7d:fe:e2:d8:94:75:01:40:36:9b:27:
e0:08:4a:0f:74:19:fa:64:94:d9:44:ad:89:56:80:
e1:0e:78:60:b1:2f:e2:a6:5e:dd:5f:eb:d9:bd:6c:
6a:82:12:cf:cc:9a:cf:dd:a8:c5:33:b9:d4:4a:44:
ae:38:88:57:dd:ce:85:b1:44:4f:d0:96:1f:fb:3a:
88:f5:a2:f6:28:fb:26:ca:3f:19:40:4d:48:92:c1:
ca:94:75:3e:13:23:0d:71:9b:27:8f:f6:21:18:35:
4a:d2:1a:0d:39:e5:f3:19:37:45:85:be:aa:48:94:
d2:8a:11:2b:79:22:9d:b6:a3:2a:54:8b:08:b1:87:
6f:e9:ba:ec:cd:13:b6:ff:eb:30:55:6e:66:93:90:
5f:69:43:2c:59:22:58:95:ba:bd:7f:24:95:3c:9e:
85:ba:3e:e6:ec:97:c4:04:ae:9a:31:95:98:33:8d:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6E:76:40:6F:41:E8:0E:75:BB:D1:52:44:EB:4A:9C:A7:0D:7A:79
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3d:ac:9d:a5:5b:0e:b5:fd:71:bb:c1:86:54:ea:b7:4c:b2:
b7:cd:30:87:a9:cf:77:b1:8d:47:ea:ba:8e:f6:96:bd:81:ed:
d5:78:36:99:6b:d6:1c:7a:5c:3f:5b:85:7c:5d:70:21:11:13:
52:b4:84:4b:3b:7e:93:84:ec:79:3f:15:b6:47:a2:ab:19:75:
59:a7:f6:c6:64:c8:c9:32:6b:a6:62:80:04:c9:b7:67:5c:e3:
f8:be:b4:bb:d1:72:cf:c4:c3:e2:0f:fc:2a:11:c4:8f:42:ed:
97:15:97:00:8b:ac:46:80:13:80:5d:b0:45:b8:73:a5:43:1e:
d7:95:95:1e:13:24:d4:fa:04:6c:fe:32:79:83:2e:f3:28:71:
ba:f0:41:85:f4:27:b3:3c:9f:8b:d2:fe:b6:b4:0b:83:e0:f8:
62:f4:7b:c3:a6:ae:96:d2:3a:c4:73:66:f5:30:29:97:a2:2f:
94:15:90:90:32:28:61:3a:52:ea:61:51:e1:13:6b:6e:88:77:
5a:d2:81:28:f5:e6:99:53:bc:6f:ee:6b:d1:07:ec:b5:35:6b:
f4:dc:dc:d9:6a:8f:b6:17:17:99:9d:0d:1e:63:13:f4:00:76:
83:ff:db:c2:67:d8:34:03:8c:4b:69:67:ba:19:c5:b6:98:d5:
0d:1f:58:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:12 2025 by rpki-client