Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: n5Z2IBw/ij7NYbWIj337CKjuj4l/5KgWNatBjiY8ptk=
Subject key identifier: 07:DC:0C:BD:DF:9D:A0:2E:62:E5:1E:86:16:7A:7B:B0:E2:92:11:EC
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019A5150AF69B2D6355F5E5A7C4011A90804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 00:00:33 +0000
Manifest this update: Wed 05 Nov 2025 00:00:33 +0000
Manifest next update: Thu 06 Nov 2025 00:00:33 +0000
Files and hashes: 1: IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa (hash: b/cViJlJxKUPbwFvpzqTCCVlNXv5JOZkWmVOeYB/zSc=)
2: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: JQ6L6PuG8vKL1KoMiY01LPSDOtYRPHfGCUvP11Xmat4=)
3: t987O0pDHzvcsP9c7cARqX9qeU4.roa (hash: hXKjhjrksvE7FwT6RC0bILWOybHNXPXiwbfxF18ramw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:af:69:b2:d6:35:5f:5e:5a:7c:40:11:a9:08:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Nov 5 00:00:33 2025 GMT
Not After : Nov 6 00:00:33 2025 GMT
Subject: CN=07dc0cbddf9da02e62e51e86167a7bb0e29211ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:46:2d:60:e7:62:02:57:dc:b2:76:f5:30:
8b:7c:8a:cb:87:ac:62:3f:12:4c:f3:49:92:8a:a7:
ff:a9:7c:8c:01:60:93:fb:57:3f:f6:b5:80:f4:37:
ad:6b:ae:0d:ee:a2:df:f8:cb:91:db:7f:58:a3:11:
0b:8f:95:b9:7e:67:41:8d:b1:59:9d:0f:ea:a3:2f:
57:c9:46:f9:ff:eb:59:7b:f6:d0:22:cf:95:f2:88:
1c:52:be:3d:24:c9:8e:7e:b1:a0:d4:6e:d1:09:5b:
16:ec:f9:20:bd:98:04:27:65:6d:e1:83:65:f9:b5:
2c:a3:8c:5b:d0:ba:10:df:d5:98:fd:07:a8:c3:e8:
29:14:51:3b:7d:f9:5f:c6:5d:49:98:e8:f5:1a:31:
cd:44:c4:e9:eb:88:b7:8c:a0:74:62:df:7f:85:d4:
4f:29:b6:13:51:dc:5b:7a:a3:6a:cf:a6:31:0e:cb:
18:12:e0:6e:c6:20:f9:1f:d5:6a:42:7e:e4:49:5b:
11:91:e1:a2:aa:7b:e6:d7:e8:56:59:56:80:6e:33:
db:36:08:ec:ac:a4:eb:a2:1c:9b:fe:56:7b:a4:c9:
9d:7a:26:26:88:85:3f:e7:8f:6c:9d:6a:dd:3c:c3:
f0:29:ca:95:a6:3b:92:d7:93:de:6c:61:c6:ed:90:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DC:0C:BD:DF:9D:A0:2E:62:E5:1E:86:16:7A:7B:B0:E2:92:11:EC
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0e:2c:47:d0:93:ff:70:cb:b6:98:19:4f:d7:c7:b0:0f:de:
b5:05:3f:47:ac:9b:42:cb:ac:a8:a1:da:a3:bf:5a:25:98:e6:
79:60:69:d7:f8:02:2e:84:2d:f0:44:93:83:e5:db:3f:82:47:
27:72:cd:e2:2a:fd:9c:55:16:07:a4:42:b0:68:c5:03:a5:bd:
0e:e0:c6:3c:d4:38:3c:63:c9:ee:4c:ea:c4:7d:7c:47:32:3c:
21:fa:7e:81:59:cc:e7:c5:2a:cd:1f:51:1c:cd:0e:be:d9:3a:
fe:e3:33:f0:93:57:db:12:33:f5:71:77:d8:3f:16:9b:7d:18:
25:4e:c5:fa:39:fb:95:3b:6e:8c:ac:6f:9c:d9:c1:88:3b:2c:
91:fe:09:70:86:ab:98:61:93:c7:dc:ad:4d:6a:09:41:d3:6a:
0d:b2:41:1e:79:70:82:be:63:21:01:b7:11:3b:ec:98:1d:8c:
9d:c7:49:c1:bc:10:1e:4c:e0:7d:3a:b0:75:80:a1:0a:20:bf:
a5:94:fc:9f:82:57:2d:00:f5:89:82:22:21:15:4c:6b:12:27:
69:3a:c4:ac:fd:76:9e:de:df:70:f1:95:d9:54:e7:bf:c8:0a:
93:fd:d5:ce:2a:18:33:47:3e:75:82:32:b1:b5:5d:e4:a8:4b:
73:12:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:40:15 2025 by rpki-client