Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
File: YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json)
Hash identifier: I7lejmhZWWPGRFSax7T+TFAStp6eopV+oBJ2+QfogA8=
Subject key identifier: 9B:9C:EF:5B:8B:30:E4:C2:63:01:D5:3A:0D:E1:EB:6E:1A:CC:72:94
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial: 019A70A581D6BF992640230366F293299F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
Manifest number: 0B80
Signing time: Tue 11 Nov 2025 02:01:26 +0000
Manifest this update: Tue 11 Nov 2025 02:01:26 +0000
Manifest next update: Wed 12 Nov 2025 02:01:26 +0000
Files and hashes: 1: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: bY4ZGD9TfuX5VUmldz3GYeMddiqBtCV1ThX/Wxg00y8=)
2: jYlgI_qcApYE3RAZAnK4EbiyzdM.roa (hash: xXRxHK1q9xpKOQP7dBVRrylt76oRLGOFXjW/2uY1+iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:81:d6:bf:99:26:40:23:03:66:f2:93:29:9f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
Validity
Not Before: Nov 11 02:01:26 2025 GMT
Not After : Nov 12 02:01:26 2025 GMT
Subject: CN=9b9cef5b8b30e4c26301d53a0de1eb6e1acc7294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:c4:24:0b:1b:09:fa:bd:78:83:cd:70:f7:
61:93:05:ca:c5:d7:a7:b6:a6:b9:af:69:c5:d8:b7:
6f:9b:7a:25:4f:3c:e9:81:25:74:9e:77:dc:a0:b4:
6b:31:22:b0:8e:f3:8a:f8:23:ea:74:83:c1:d1:bc:
fd:b8:93:11:74:7f:cd:39:a4:c5:74:58:d2:0b:5c:
fb:17:26:7a:a3:6c:b5:5b:1c:3e:53:4e:30:56:4d:
8e:53:26:7e:98:e5:45:2e:cf:fe:9b:4b:aa:34:8a:
21:0c:e4:42:b4:85:db:c5:7a:ed:eb:21:46:a7:95:
89:3f:d2:50:38:1a:d0:28:0e:35:b3:d3:aa:07:68:
7e:5f:b1:16:c3:26:ca:f3:9a:9b:05:f2:fa:5b:77:
ed:6b:70:a2:5d:20:79:80:bc:cc:2f:5a:01:f2:ff:
4e:cb:f8:6f:ba:ed:db:06:c7:9a:fb:91:52:64:e0:
fd:5c:1a:c4:c6:2c:ed:36:1a:b7:5c:67:ee:7c:d7:
98:9d:ea:9f:56:42:5c:8e:63:0c:5e:28:fb:db:c2:
6c:59:ec:50:1a:4a:c0:86:4e:df:7e:56:1c:c2:c3:
17:d4:9f:7e:e5:fe:c1:04:a5:4e:5b:21:fc:f9:64:
3f:37:66:c1:d2:7d:70:82:0a:07:23:49:b0:8c:7b:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9C:EF:5B:8B:30:E4:C2:63:01:D5:3A:0D:E1:EB:6E:1A:CC:72:94
X509v3 Authority Key Identifier:
keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c1:1c:7b:a1:38:02:9f:bc:a7:2a:d0:b3:40:54:62:0c:02:
a2:47:b4:33:5b:3e:6e:bb:ff:8f:74:3f:29:f8:5e:10:99:19:
d0:8d:e7:0c:87:97:2b:8e:24:d9:0e:a0:94:e9:68:bb:6e:30:
c3:18:aa:8a:12:4a:f0:21:b6:5e:3b:bf:fa:1d:b5:21:c7:38:
ee:8c:1e:fb:e6:84:d1:25:20:f1:ca:77:85:10:fa:50:83:da:
04:93:0c:5d:27:04:c7:32:6c:d5:68:07:04:67:b2:33:ed:37:
88:38:5d:26:0b:a5:12:c9:56:be:c0:42:4d:7a:50:e2:c4:f0:
46:c2:ec:2c:d8:0a:55:80:62:44:67:22:5e:29:57:cc:a6:cd:
a0:29:78:a3:82:a2:66:53:bd:3a:65:88:65:e3:ae:03:86:1c:
81:f6:db:11:ad:a5:f3:72:f5:0c:99:b3:bc:1f:5f:87:08:8c:
a6:a5:2c:08:d3:b2:ec:7f:2b:71:5d:8e:7b:6a:19:09:26:3f:
9f:36:84:f9:94:b3:76:fd:94:05:4d:87:63:4d:49:1e:3d:3d:
03:45:4b:75:ac:f3:62:e5:64:10:25:64:37:f8:09:75:34:44:
e9:01:2f:76:ab:eb:d1:f1:60:48:f2:8a:8e:51:90:ae:38:e8:
3f:a7:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:15 2025 by rpki-client