Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
File: YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft (raw, json)
Hash identifier: Ij3y+LIiSYCG8KZmoU1eeIaM8opsFJYp5dyuvaRIyuw=
Subject key identifier: FA:8D:D1:D1:90:92:65:65:C7:49:01:10:6F:5D:D4:22:B9:0E:68:40
Authority key identifier: 62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC
Certificate issuer: /CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
Certificate serial: 019A725C688ED96ADCF64D1F361EE3F157C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
Manifest number: 015E
Signing time: Tue 11 Nov 2025 10:00:49 +0000
Manifest this update: Tue 11 Nov 2025 10:00:49 +0000
Manifest next update: Wed 12 Nov 2025 10:00:49 +0000
Files and hashes: 1: 8eOcRvtFv6WKmWJsvFtCeh3bQOI.roa (hash: Fc0MHvgeimy08EQvI9R5qWeNLdRQwq1sSVsHXK/MAtQ=)
2: YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl (hash: F7lrWzy01I1R40GsURq4miG4XmLmlYYgdn1C/WE0tV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:68:8e:d9:6a:dc:f6:4d:1f:36:1e:e3:f1:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
Validity
Not Before: Nov 11 10:00:49 2025 GMT
Not After : Nov 12 10:00:49 2025 GMT
Subject: CN=fa8dd1d190926565c74901106f5dd422b90e6840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:2f:26:2b:93:8f:09:00:48:ce:1a:5d:47:
47:5c:be:ba:69:e6:b6:46:f8:ea:e6:cd:e8:4d:9f:
7d:1e:df:36:5c:34:a8:69:ee:86:6b:61:dd:ec:fa:
90:70:1e:43:26:c5:b8:a1:14:a6:61:68:e5:98:9b:
5a:ca:5a:9d:7a:58:a4:87:a3:96:4a:ff:e6:79:b9:
50:16:17:a5:f7:2b:4f:c2:87:c4:d9:a3:74:79:61:
55:72:0c:55:ca:74:ec:75:2a:54:aa:74:14:ed:1c:
34:9c:07:37:c2:ea:4d:78:a3:ba:db:12:19:6a:62:
dd:6d:b3:d8:f3:71:03:5a:b9:36:8a:10:8c:98:07:
0e:63:8a:f5:a5:50:2a:d0:41:75:0a:92:4d:ff:05:
45:96:1e:43:74:08:ca:d9:b0:3f:70:49:28:a9:e6:
2d:ed:e9:fc:e4:c9:d0:f6:d6:fc:f7:c1:bc:ed:98:
8c:3c:ec:14:fa:99:e5:2b:34:db:ec:29:1c:86:e7:
2e:67:48:ee:1a:38:39:b8:01:fe:55:98:e8:6b:de:
c9:cb:c6:20:66:6a:a6:69:bf:c8:a5:db:ba:95:dd:
02:fb:6a:31:68:49:20:8f:83:56:ad:c6:f6:60:b4:
4c:e5:0f:c7:68:94:f5:b9:88:9d:6f:fc:74:b0:bc:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8D:D1:D1:90:92:65:65:C7:49:01:10:6F:5D:D4:22:B9:0E:68:40
X509v3 Authority Key Identifier:
keyid:62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:df:86:c7:a4:de:06:d5:81:85:88:9b:21:f6:b9:bf:95:28:
61:a5:29:67:55:98:20:e9:20:34:4c:14:d3:7b:44:cd:b2:13:
55:e1:63:b4:ca:29:87:6c:d7:9c:27:42:8b:f7:bd:88:87:f0:
c3:d6:29:28:df:d6:7b:ee:1b:ca:a5:d4:b7:f1:e9:2a:5f:f0:
a8:f4:08:67:21:66:29:20:8f:8b:c7:5d:de:30:2b:e9:b9:f4:
40:65:39:8b:79:39:c0:34:79:94:08:73:aa:00:f3:2d:df:e2:
1b:67:cb:04:63:6c:00:83:9c:b2:18:b6:89:c3:90:ba:de:18:
82:1f:eb:0c:73:c3:4c:ba:71:7b:22:bf:54:a3:67:29:81:f4:
87:a9:37:69:c1:3e:29:b2:81:65:fd:0b:89:a3:fc:c3:4b:d5:
3b:3a:41:1b:e5:66:6f:0d:43:b5:83:19:65:02:25:b1:cb:54:
54:66:60:02:1d:a4:84:a8:e3:79:c8:ae:97:44:ea:92:ed:f5:
d7:63:8c:e9:5b:f1:99:c1:d1:4e:9c:5e:75:7f:25:98:fd:c5:
d2:44:ca:28:02:54:82:8c:1f:a9:65:c5:63:25:90:c0:ca:a7:
80:29:62:43:1f:eb:6f:bd:39:b1:82:e2:dd:21:bc:63:82:bd:
58:49:47:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:11 2025 by rpki-client