Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: 07+q2/UopasurZDyCpatLuy1uWzFd0DlhjDEViEhR3A=
Subject key identifier: E6:70:55:C6:96:BE:DD:24:00:26:7D:64:EF:02:32:C8:3F:78:75:B4
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 019A71B8C5F882A1FE9B346F653639E90145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 1615
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: nD5rwJVFBgk2Fp+wq+JmLYfjAlQQlxp7zOap/3ySvRw=)
2: cEfVPR5BCH6wIIt0Scz-CewioBQ.roa (hash: uAMhXs6DpT0RTpQCmLK6tpFYd7c3BBCguRMW7ETBwj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c5:f8:82:a1:fe:9b:34:6f:65:36:39:e9:01:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=e67055c696bedd2400267d64ef0232c83f7875b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:a4:57:95:fc:24:ac:93:c6:22:97:29:98:
a6:aa:e8:31:8e:4f:b8:63:fc:57:61:fa:0b:a8:12:
49:5a:c2:ae:0f:75:d4:2c:d1:37:1f:05:ec:91:b6:
be:a7:d9:cc:ea:05:50:b2:d3:81:94:76:56:ab:d9:
6d:81:75:4b:6e:42:f5:ee:a6:a4:60:4a:bb:a0:87:
cf:fc:d5:5c:45:02:83:4e:f7:bf:77:7d:b6:ce:b0:
70:74:d4:04:81:45:df:60:1b:75:88:4e:34:a4:bc:
87:d8:56:34:d0:bb:40:d6:45:de:6a:34:6f:79:6b:
b3:42:aa:48:7f:81:1b:93:07:e6:46:62:64:d2:9a:
88:9b:54:6e:17:b9:b1:94:4b:f1:6a:ed:04:a7:9e:
de:12:bb:f4:86:bd:6d:43:02:9f:e6:81:f0:1e:7e:
e0:0a:e8:02:e3:81:2c:7b:5f:4b:e5:3b:7e:c6:97:
2e:d2:9d:bd:50:cb:78:02:1e:cc:22:de:fa:90:d6:
56:02:61:7d:67:fb:9e:98:cc:fb:a5:0d:29:91:a0:
55:55:1e:02:e9:6c:89:33:ce:59:f1:73:44:ab:c6:
49:0a:01:17:73:e8:de:e3:93:ad:0d:cf:f5:6a:cb:
9d:bb:3b:e3:22:c6:80:49:b6:0d:56:ee:fc:45:37:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:70:55:C6:96:BE:DD:24:00:26:7D:64:EF:02:32:C8:3F:78:75:B4
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:15:df:0b:fc:2b:40:89:dc:16:c2:82:04:9b:04:69:cd:8f:
1a:00:b8:1e:2f:9b:16:f9:34:d6:99:c3:0c:91:b3:63:58:49:
dd:e9:48:04:f4:31:22:e9:c2:61:da:49:eb:4e:e3:a8:b9:27:
07:a5:5a:e7:f9:58:ce:dd:1a:d0:c7:eb:b4:be:0b:7e:50:88:
1b:e8:7c:9b:6e:69:6e:e7:4b:a2:89:41:c5:55:f2:83:88:40:
54:82:5e:17:a3:75:56:92:f5:ec:e5:9c:99:3c:02:cd:07:0e:
3f:27:5e:a1:36:ea:ef:11:bf:79:97:99:fd:13:7d:75:c4:a3:
91:83:7e:a1:58:44:9d:9d:1f:7c:98:73:64:2e:fe:e8:2e:2d:
2a:f1:7e:07:8b:7e:a7:ae:3c:b6:6f:54:55:b8:2d:4b:8d:ec:
34:5b:7f:58:eb:27:d8:e0:e8:98:56:90:d4:5f:47:ea:ef:76:
7b:40:4f:d4:7c:20:e5:c1:d2:4b:da:69:ce:2a:a5:f1:90:4d:
0c:d7:06:aa:b7:f4:0d:44:81:70:35:7c:a7:2e:81:62:2f:37:
5f:fa:b0:4a:64:ca:26:4a:08:e0:c6:01:4c:96:c3:90:b1:ee:
7c:92:21:b9:84:95:73:f1:ad:84:9e:80:07:d0:39:03:56:27:
f0:0a:dc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:55 2025 by rpki-client