Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File: YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier: K1XyVa0MwGaVpu2x6sxULjZTXevi6EGaYm8cskSp6LA=
Subject key identifier: AE:BC:A5:47:69:25:32:0F:01:28:E3:F3:2E:62:6E:21:E3:94:21:54
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer: /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial: 019A71B88EADF552414B3A295587F270B902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number: 045A
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: Q0gUuxATATDf6JEQ9fzt1u3IZsc.roa (hash: 3y/S39XmNPx0DoVA3l0EHWQrU4S+Z88s+G6ph2XRAwc=)
2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: kCoJ4oXrgj0knG9oCNsPg3cC9oV/7v9M8ZZ9PIzDxkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8e:ad:f5:52:41:4b:3a:29:55:87:f2:70:b9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=aebca5476925320f0128e3f32e626e21e3942154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:98:e6:26:32:e3:40:c5:c3:75:d1:c9:f8:
8b:87:b4:b5:00:53:64:7b:2e:a5:20:ab:4c:03:ca:
25:8b:ce:0d:94:2a:ae:b3:98:90:df:86:c8:b8:3c:
49:83:05:2a:6c:a6:13:71:bb:bc:0b:2f:21:31:6f:
50:c2:6b:e0:a1:27:05:b4:4a:b1:0c:c6:14:b1:79:
ef:b1:da:71:c1:d5:8a:f8:36:9f:85:3d:7d:b5:d5:
84:6c:87:a9:3c:7e:78:48:3e:32:5b:5c:51:83:1a:
2f:34:18:5c:66:4c:d4:15:e6:85:4f:9e:1f:7b:7b:
13:bf:76:27:53:bb:1d:64:b9:ff:10:12:21:6f:e8:
bb:03:23:47:7c:df:1b:1e:ba:bf:d6:93:d4:08:d5:
9e:02:4c:8e:70:a1:44:e5:1a:9f:68:38:59:23:2c:
55:c7:74:ba:5d:d5:1f:25:6c:27:81:aa:cd:48:dd:
e5:65:bc:48:5e:9b:ad:37:38:13:19:29:b7:e3:64:
82:1a:7d:1b:0b:e4:13:3e:d6:09:52:bd:14:8b:58:
e6:ae:be:d6:79:6b:6a:5f:d4:a6:c5:18:f2:3a:f3:
9f:03:bb:5d:af:21:3a:d3:1e:25:49:fe:65:f5:99:
87:1b:9e:8b:77:5d:b1:5a:59:79:01:d6:22:fe:e1:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:A5:47:69:25:32:0F:01:28:E3:F3:2E:62:6E:21:E3:94:21:54
X509v3 Authority Key Identifier:
keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b6:34:6f:13:d8:72:41:7c:f2:3b:7f:a5:0f:85:31:cd:7e:
5e:a6:81:7a:38:1a:08:14:4d:0d:3e:b5:83:33:4d:ab:03:31:
c2:ef:06:90:5a:76:05:c8:7f:78:98:33:14:97:21:14:93:ef:
6f:11:e9:35:9d:53:5a:cd:4f:d8:62:58:ba:dc:71:2b:95:07:
bc:23:d3:68:dd:64:73:b4:49:12:1f:d1:df:72:e1:85:22:92:
98:96:3e:43:8a:4c:f6:7c:78:e7:aa:ac:4d:b0:49:69:0c:f5:
ec:f8:59:53:93:37:02:ac:a8:c4:fc:78:df:50:89:58:9b:1a:
50:e9:98:13:a6:74:f5:b5:b5:3c:8e:b9:ae:ac:76:20:c2:59:
d2:e2:c4:30:84:2d:b7:b6:4a:8b:9d:5d:f2:95:ef:26:ef:c7:
04:3f:c6:a6:b9:d0:a4:2f:a8:65:e4:95:ea:97:1f:e6:21:62:
92:d1:b3:24:88:dd:f7:f4:7a:d7:b1:9e:2f:9a:13:48:ca:80:
af:d7:d4:4c:6d:9e:02:67:d3:a2:3d:e9:de:2f:46:1a:3c:05:
9f:fd:7e:80:7e:b1:37:cb:07:11:f0:c6:5d:52:7b:28:65:5c:
5b:49:00:bc:d6:e4:89:aa:05:b2:3b:b1:37:01:4c:4f:f2:c4:
12:88:1d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:33 2025 by rpki-client