Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: zObe5CRzqbuuUk2Oi64bpGDzUohRQOJcVgGEULzhkmM=
Subject key identifier: 23:7B:38:9B:01:8A:0F:79:D1:8B:F8:12:DA:83:3E:5D:E7:3C:D9:77
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 019A729391873F16C09051CDB3B10D425000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (hash: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=)
2: X_5mJIe23lTGFoHxQS-RDQrkxZY.roa (hash: RzER0AmjnLXODOGy8fUMFdlmPYkcB4bwanmhBdhdXVQ=)
3: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: D0lKFj6sqbGydncSb4Wkh6FhGWRATdWemQmPmKEmg6M=)
4: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (hash: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:91:87:3f:16:c0:90:51:cd:b3:b1:0d:42:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=237b389b018a0f79d18bf812da833e5de73cd977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:05:b0:b6:cb:71:39:02:e9:d4:02:a4:f7:ba:
02:b7:63:3d:f0:ee:87:00:74:17:54:0d:16:36:e5:
08:5b:9c:1a:ec:5a:90:3a:66:41:e3:e7:3b:9c:08:
51:be:19:91:6f:36:d7:1d:8b:39:50:ea:e9:66:e0:
b0:23:2d:a3:e8:4e:49:6f:c8:c6:dd:7b:5b:5e:23:
34:c8:d6:cc:23:c9:17:63:35:77:cb:bc:ad:9d:76:
26:8d:29:4d:7e:f8:21:f8:d9:eb:11:3d:10:72:b9:
fc:b7:76:7f:9b:aa:65:60:99:a1:03:c8:75:0a:66:
7c:fe:46:a4:df:d9:a4:b1:fe:a3:54:35:54:59:60:
68:1d:77:70:ef:b8:f6:9d:df:90:57:d4:a9:7a:bc:
29:f4:31:f3:6d:6d:04:f4:9e:2b:65:37:68:a8:92:
64:29:79:b8:95:60:2e:74:3a:b0:db:3f:d7:68:4b:
0f:6c:c7:54:1c:76:57:32:da:33:77:e0:4d:68:8c:
34:54:27:bc:31:50:50:81:3a:39:18:f9:75:00:72:
31:2c:3b:55:a0:e0:42:b7:35:5c:48:4b:ec:ed:c6:
42:89:ad:e9:d6:8a:80:08:a8:73:af:12:21:fb:3c:
5f:c7:bb:2d:25:b6:88:49:9e:e6:eb:0f:ba:22:7e:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7B:38:9B:01:8A:0F:79:D1:8B:F8:12:DA:83:3E:5D:E7:3C:D9:77
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:06:ff:47:d3:79:66:67:f7:11:e2:2d:f8:4f:ff:d4:2c:f3:
5c:59:a0:45:15:05:9f:58:a3:70:39:97:3f:91:58:e8:9c:1e:
0a:c6:d8:e5:cf:bc:30:52:a9:75:5d:bf:27:23:09:99:77:23:
ba:aa:a0:20:05:e9:bd:10:98:7c:2b:ea:8e:9b:ea:7b:5a:a1:
bd:fc:f2:e6:43:b0:85:82:d7:a2:43:fe:77:ef:da:16:55:2c:
e9:73:8a:0d:69:7e:28:94:dd:67:7c:6a:31:45:df:d8:73:cf:
f7:91:4c:d4:7c:98:01:54:c3:80:4d:d0:c4:8e:9b:86:fc:0a:
40:cd:78:d3:48:9e:7f:32:f2:96:52:a8:3c:42:f4:5c:d3:10:
91:05:79:f9:fc:66:a6:71:5d:6b:63:46:d8:28:27:a9:aa:f1:
b6:d0:53:5d:10:5c:76:cb:62:34:e3:5b:5f:7c:e7:b9:44:12:
c0:32:88:8b:9d:3f:1b:99:78:c5:45:de:c5:3b:1b:11:cb:4a:
38:85:d5:e2:d8:77:68:9d:0b:2b:03:dd:9e:0b:45:f9:ce:41:
f8:f7:70:d0:7a:3b:30:ae:48:02:7b:ca:3a:81:3f:96:1c:d4:
81:12:58:31:d6:c1:41:b2:4a:e3:ce:c0:15:30:65:a3:c4:d6:
54:e8:79:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:28 2025 by rpki-client