Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: AykcmdgW2Q4Xv9Y5HspFj88gxbcF+hNq70YHeSNdo+s=
Subject key identifier: AD:E0:B3:31:1A:6A:6A:34:8C:AB:CC:4B:52:51:91:58:40:36:93:0C
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 019A71EEBBF6FBBECBE19671B4858C655D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: H9hgqyuXWrezQ8MNk2fB+ePZXLBQYhTiLXN1bw3/4BU=)
2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bb:f6:fb:be:cb:e1:96:71:b4:85:8c:65:5d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=ade0b3311a6a6a348cabcc4b525191584036930c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:26:14:f1:2b:be:96:37:b3:67:e6:cb:63:
27:bb:d1:36:77:bf:bd:a5:8b:29:9f:7b:b7:d9:f1:
d3:4a:21:42:f9:ee:57:0e:15:81:7d:2f:2e:b9:2c:
c5:8d:61:2e:18:65:7b:7a:69:90:e1:fa:1c:34:c2:
e2:0b:c4:5c:75:d6:6c:77:21:68:18:7b:74:56:5a:
af:9b:5d:2f:ce:9f:9d:77:6c:20:ea:a5:a4:55:a0:
51:a3:6f:3e:08:f9:c8:94:bc:bd:c3:30:00:a8:43:
6a:02:6d:71:9c:f8:a4:9b:da:2f:60:41:58:dc:f6:
27:99:3b:f4:29:8b:d4:31:86:b9:13:f4:d3:1b:7c:
f6:fb:08:70:0c:36:c6:bd:32:a4:47:29:c3:92:5c:
ab:74:ed:6f:a4:7a:89:b8:25:76:e3:80:f7:28:fa:
51:bd:5d:a4:66:66:f1:0d:2f:20:98:aa:b4:9c:ad:
da:35:c8:e1:9f:26:ab:20:20:f8:3e:ee:0e:ac:bb:
a9:db:af:34:b2:49:8d:10:94:8f:3b:7c:79:ff:e3:
7c:25:b2:09:f5:a7:60:50:4a:29:67:ba:e2:4d:af:
b2:1a:d9:05:45:d0:39:a9:d5:71:c1:28:08:f4:cc:
cc:b6:0d:4a:b2:ca:ae:2b:42:58:2c:dd:ec:72:d8:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E0:B3:31:1A:6A:6A:34:8C:AB:CC:4B:52:51:91:58:40:36:93:0C
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e9:a2:89:a9:84:50:61:99:ed:1a:26:18:74:63:b4:23:54:
bc:2e:67:df:9f:04:c4:ae:34:28:e0:d8:19:48:4d:db:78:6e:
68:47:e2:92:0e:52:7d:d1:5b:4d:14:14:ff:0a:b4:25:c2:eb:
36:cb:9d:4b:21:73:88:9c:77:61:fd:68:61:1a:cd:a7:0f:5b:
1e:6b:17:ac:73:18:f5:37:fc:ed:eb:58:c9:e8:2d:5b:4d:71:
70:1d:54:8d:bc:1c:9e:c0:d7:98:0c:c8:26:6a:da:20:35:91:
d7:d4:6f:b5:da:70:01:55:2b:da:3a:40:f9:fb:1e:fd:84:e2:
d6:56:6e:88:bb:19:76:8c:f2:ec:93:42:db:69:0a:88:c0:91:
d6:52:40:98:66:33:e2:0f:e8:71:d2:c5:6c:f6:4e:c6:17:14:
76:c3:92:ab:3b:f3:08:5f:01:ab:86:dd:fe:e4:bf:99:19:63:
37:3f:05:9b:bf:1b:cf:8f:3c:63:be:8c:cd:a1:3f:7c:9c:56:
fc:31:1d:12:9d:5f:ef:b4:78:3c:5e:85:2d:4c:c3:67:42:db:
c2:c1:15:79:99:33:a5:05:df:fa:2a:32:af:c2:82:ae:3d:ed:
1c:41:cb:6e:4b:19:61:ff:ca:fa:15:1f:5f:16:df:7b:a3:76:
68:ac:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:12 2025 by rpki-client