Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
File: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft (raw, json)
Hash identifier: Cfwr3Ek0IuF4T5MakFxGv9p10pq5xCTVzMolVeDU2/c=
Subject key identifier: C1:68:C3:37:88:12:16:43:51:AB:FE:A5:62:33:69:38:08:82:F4:B9
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Certificate issuer: /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial: 019A078095333F09AFFB677A0ED8E8AEED12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
Manifest number: 0E90
Signing time: Tue 21 Oct 2025 16:00:58 +0000
Manifest this update: Tue 21 Oct 2025 16:00:58 +0000
Manifest next update: Wed 22 Oct 2025 16:00:58 +0000
Files and hashes: 1: 1-ACv8TAdNs0gbWjdydU8sE6LRqI.roa (hash: sldQ+jkEkh3NjeBRI9Vm42AYV7O+YARRotzm3PLAwyo=)
2: LfLqxUaT3QrnBmzzsTl49po0YNQ.roa (hash: L0cl7tw/Ws1r/mR8qiaEzUND2tiL5WY6XNQQ0gamYcs=)
3: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl (hash: 3Lok8kI6yNKXB2X8R7z8auIQ2yQ0iru49dJUz0Zhrfw=)
4: zVuCymN8JrRk9IcWOjdOd2y5_r8.roa (hash: 0in95Q1f0yHm24tHTyK5WD1k8nyUtT+dnuohH7HB7vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:80:95:33:3f:09:af:fb:67:7a:0e:d8:e8:ae:ed:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Validity
Not Before: Oct 21 16:00:58 2025 GMT
Not After : Oct 22 16:00:58 2025 GMT
Subject: CN=c168c3378812164351abfea5623369380882f4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:16:ca:45:b6:13:9c:7c:92:b1:39:a1:ce:
f8:e2:d8:73:ed:13:04:d6:73:96:aa:b7:fc:6d:0d:
89:7c:a1:08:98:7b:ec:86:ea:14:18:f0:a8:3d:6f:
f4:b9:37:8e:d0:9f:a1:97:28:de:8b:98:0d:bd:98:
92:53:5f:db:eb:ff:61:bd:94:fe:14:12:59:14:81:
ad:e4:9e:2e:fe:fb:61:bd:f5:08:c2:c4:5d:a6:3b:
d2:70:0a:7e:48:50:17:0b:bc:1e:dd:e6:a9:ef:7a:
49:6f:53:b6:75:a2:8d:0b:19:2c:38:1c:13:37:dc:
bc:8b:6e:15:28:fc:1b:4d:5a:2f:3b:4b:9f:97:c7:
52:5a:46:ef:07:2b:4a:00:70:23:f5:3b:3f:7f:6d:
b0:d7:c2:fd:98:e6:45:a7:a7:06:4b:97:70:69:fa:
cc:2a:3d:10:ea:62:00:62:ca:8f:62:6f:d9:57:2f:
5e:ce:84:7e:b8:13:0d:46:1b:ce:91:de:82:43:86:
81:53:46:5a:d2:06:2a:b6:a9:65:28:18:47:51:59:
a1:f4:ce:b4:5a:43:37:f3:94:e4:97:36:9e:d9:ec:
85:04:f2:78:a6:65:19:fc:2e:2f:c4:0d:2b:e5:16:
3f:d6:cc:8d:a9:59:c3:ff:c1:3c:85:90:a5:1d:ad:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:C3:37:88:12:16:43:51:AB:FE:A5:62:33:69:38:08:82:F4:B9
X509v3 Authority Key Identifier:
keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:92:f9:08:8d:c3:84:c5:9f:cc:10:79:0a:c3:85:10:f3:2f:
00:f5:28:15:ee:a7:23:97:9a:38:1d:bc:ea:e9:e6:c5:69:7b:
c8:35:be:08:cc:5f:fa:c2:39:7c:1e:65:d3:a1:42:db:2a:17:
ff:6b:a5:3f:4d:f1:22:1e:23:81:4c:55:19:ad:9b:fd:93:50:
47:d9:d9:22:ca:cd:0f:fe:36:99:cf:ee:a1:3f:03:62:93:d6:
6e:5a:14:12:26:56:57:44:18:1e:d9:9f:95:e3:3b:79:30:e3:
49:b5:56:c4:a1:f6:f9:29:87:71:68:a3:3f:40:f9:e4:f2:68:
7f:75:73:a9:93:f3:54:a4:b2:d6:5d:cb:5e:40:98:d1:79:d7:
e8:cd:69:f1:68:f0:48:f5:5d:20:21:05:72:d7:6b:75:90:31:
b2:e8:52:62:76:03:c9:cb:5c:46:ab:e1:26:1c:7e:59:55:9a:
d6:83:23:63:d5:4a:4c:e0:63:15:a0:31:4c:42:67:37:c2:5d:
69:0f:2c:e5:b3:1b:46:59:64:11:37:5d:a5:87:75:a6:95:fa:
44:03:cb:5a:ee:6f:06:12:80:c3:89:f0:5d:3c:77:e4:3d:91:
1b:e6:3a:c6:d6:19:da:5b:ac:1f:22:63:fc:2d:40:4a:aa:51:
7d:b7:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 20:55:36 2025 by rpki-client