Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: nwl37Q0y/znVi0XtbeqNBN6wBE7rbvqvZYHb8+bp55g=
Subject key identifier: 1D:9D:59:C3:7A:AA:F6:B5:A6:21:95:68:05:E2:C8:3C:E2:99:10:B1
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 019A2A7A34529888325421072878023E63E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 168D
Signing time: Tue 28 Oct 2025 11:00:43 +0000
Manifest this update: Tue 28 Oct 2025 11:00:43 +0000
Manifest next update: Wed 29 Oct 2025 11:00:43 +0000
Files and hashes: 1: 7vWonm9bF5IcZc4b_JwarXdqm9s.roa (hash: hJURA5qklA/bOkBC37NwKVvc+QzGI8iekbBVx5yVdVA=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: xdOlf/unKty88iAXSeRSWWc15Q8ACge6h6iUNMzH3Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:34:52:98:88:32:54:21:07:28:78:02:3e:63:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Oct 28 11:00:43 2025 GMT
Not After : Oct 29 11:00:43 2025 GMT
Subject: CN=1d9d59c37aaaf6b5a621956805e2c83ce29910b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:88:36:55:b2:a1:69:b5:be:d0:80:8e:8a:
60:1e:68:27:95:a1:c5:8b:6a:4d:9e:a3:b0:f6:bb:
78:db:cd:67:0b:d7:56:75:ff:8e:25:b7:0c:a0:95:
3b:e9:d8:ed:d2:f6:c9:a7:92:0f:ec:e1:fd:02:43:
b0:f9:94:b1:7f:ec:23:27:4f:2b:a4:b0:02:c0:ce:
5a:dd:1f:03:7c:9c:b0:79:1d:b8:da:67:6c:09:01:
74:3e:e5:83:d0:6e:1a:2e:b7:c7:37:d1:62:d6:ae:
e4:15:2e:23:cc:e1:fc:a7:71:43:b7:02:3f:2c:a3:
cc:17:e4:76:ef:46:3f:d7:ce:06:66:a8:3d:35:87:
33:38:bb:d0:97:4c:91:27:b6:6d:c9:01:63:32:87:
72:da:44:d8:64:67:4f:d1:38:dc:4d:1d:ae:3d:a6:
ec:9c:26:4a:90:b6:d8:ac:8c:78:4a:40:31:fe:a1:
42:57:6e:c6:68:25:16:5d:3c:9a:fa:87:c9:4b:84:
5e:bf:a5:b9:e9:78:71:1a:ff:d3:a4:d9:e2:7b:08:
29:c6:12:be:e9:c0:74:18:65:0c:cb:67:2e:05:03:
0d:d6:41:b6:29:75:fb:ea:c4:87:b2:33:9f:54:51:
e5:7e:a3:27:a6:9b:39:84:0a:68:d0:20:1c:35:4c:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9D:59:C3:7A:AA:F6:B5:A6:21:95:68:05:E2:C8:3C:E2:99:10:B1
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a4:80:03:14:53:24:76:df:8d:e1:db:b3:78:be:1b:8f:1f:
53:db:62:74:a3:ed:ca:23:74:2a:97:b1:74:94:4e:da:f7:f5:
35:d9:54:f9:53:55:82:a4:f4:87:28:c7:9d:74:f3:fd:cd:6f:
63:1e:04:98:0a:52:21:71:45:6e:ef:fc:1b:bb:41:1a:a5:29:
c9:81:21:e5:a9:6d:26:3b:36:2b:41:79:48:4e:d9:74:1c:25:
63:f5:2e:0a:66:2d:c4:58:7b:b1:da:d0:fa:88:da:1e:2b:41:
e5:13:1c:0c:76:8e:ca:5a:b9:ba:de:a5:6c:f0:11:23:38:29:
e8:e9:0c:6c:1d:48:43:5c:d7:e6:e3:89:a9:00:d6:8d:48:56:
3d:b7:4f:e1:51:54:79:9c:6d:0c:4b:ae:f5:25:1b:44:e3:68:
67:06:5b:1f:6c:39:0c:ca:7e:95:64:17:3e:a8:4c:a5:12:c5:
60:de:cd:d2:34:85:b1:30:59:13:62:8e:d9:d9:4c:15:b5:7c:
cb:d7:2e:66:01:5c:0c:be:83:bd:f4:d4:a7:85:82:27:9e:45:
d4:a1:6e:68:b7:8c:d6:ba:fd:08:4d:7a:11:db:5a:0f:24:d2:
3c:e9:48:57:99:01:ae:c1:2c:60:16:93:ec:81:be:23:12:ca:
8b:54:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:14:22 2025 by rpki-client