Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
File: YvSxR6sO_r8-RubeqYXXUYd8u04.mft (raw, json)
Hash identifier: aMRy5vnA2esR4bC3kBr+5xOMAUsv2+g15vgJskfzawQ=
Subject key identifier: BD:91:02:86:34:27:A6:00:BF:C4:F4:B6:E6:E8:47:66:DF:EB:B2:79
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Certificate issuer: /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial: 019A71EE81AF593B8C518FFEF3200EA2237A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: B254PCc3PRUmXT9tMIpAl8XNBm8.roa (hash: DpvsWvC8Sgiw0PT2yPQOf/12fRPoJTcquOU/HLYaUhc=)
2: YvSxR6sO_r8-RubeqYXXUYd8u04.crl (hash: hpAjCZ4LWatDejTHduQwb4NSrltuyj4dNk4kLWCBZFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:81:af:59:3b:8c:51:8f:fe:f3:20:0e:a2:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=bd9102863427a600bfc4f4b6e6e84766dfebb279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:04:12:c4:65:7b:0c:ad:fc:28:50:64:ac:
0c:59:42:2a:dd:7a:7d:55:63:eb:71:7b:e3:8b:7b:
44:7b:ee:8b:7e:d9:ef:95:06:71:a2:d9:56:03:34:
dc:d8:c7:af:9a:7f:a2:7b:fe:3a:08:07:00:ca:72:
1a:77:8a:5b:39:ad:26:07:36:68:6f:be:02:f0:f2:
eb:00:30:42:64:51:2f:05:22:10:0f:fa:e5:da:0c:
29:4b:a3:38:09:9b:87:a8:55:01:00:59:48:57:ee:
3e:3e:91:ec:c1:53:8a:95:6a:ce:4a:70:63:7f:c7:
a8:c0:8b:c9:b6:c0:64:ba:93:26:65:ff:8c:3f:58:
fb:ff:f4:9f:c2:d0:67:e9:de:da:78:20:51:ac:f2:
ae:14:de:ee:ec:6d:cb:ab:83:26:36:d7:95:ee:a7:
8e:a2:92:24:e9:7d:a3:9b:d9:44:6e:a2:3e:0b:1a:
d7:d8:08:b6:69:f2:6c:ae:84:0d:8f:49:9b:b3:95:
8f:fa:01:28:0b:3c:86:d6:53:f4:86:54:06:20:be:
0c:63:28:63:e6:ce:ff:dc:65:b3:45:05:ca:9c:a3:
8d:9e:c5:65:6e:75:6e:36:05:32:b4:10:6b:8f:99:
d6:87:e1:16:8b:89:bb:e9:2a:44:dd:7a:5a:29:7a:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:91:02:86:34:27:A6:00:BF:C4:F4:B6:E6:E8:47:66:DF:EB:B2:79
X509v3 Authority Key Identifier:
keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e7:0b:02:6a:16:b9:78:a2:90:18:c8:19:82:82:a5:01:ba:
49:bc:c5:fb:20:1b:b3:ad:d1:e2:91:5f:b8:01:bc:e7:d9:94:
b4:67:ce:09:9d:f2:c5:36:ac:0a:58:2c:3a:8b:11:1b:fa:ff:
0f:46:55:cc:6d:14:14:d3:6e:ab:a5:41:a7:b5:7f:e5:a1:0a:
83:b0:e0:cb:d2:51:9b:9c:b6:47:3b:36:9b:19:57:bc:95:b1:
0e:90:37:5a:fc:95:fb:93:7d:30:6a:1b:1e:9f:f4:ee:8d:d5:
3a:91:3f:cb:f3:98:b4:7e:d0:dd:3f:b3:12:9c:e7:2d:2a:09:
2d:d8:b3:93:bb:2f:cc:eb:f9:f9:3d:71:0f:7f:4f:e7:7d:b9:
dd:06:ad:c8:6e:13:c6:08:b0:1a:61:82:09:82:fd:b8:3e:e6:
a3:cf:27:40:bf:e6:73:79:0a:6b:3d:fa:02:b7:b4:ad:30:c8:
e6:f7:f8:48:73:dd:ca:6e:8d:13:20:a5:a7:41:0f:54:c8:cb:
83:a2:39:25:52:93:c5:98:84:a7:d4:0f:cb:3d:93:de:fb:fd:
02:cf:be:04:fa:51:16:2a:b0:31:09:cd:9f:10:35:95:a1:93:
1c:9e:d2:85:72:ff:1f:98:52:e2:b6:87:1f:ed:2a:53:0e:a0:
eb:8e:b3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:29 2025 by rpki-client