Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File: Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier: 84TEZYmeRF7iLTCzN2zNg7lox9Ai0UkuJ4OGJfmtpMY=
Subject key identifier: C1:5C:CE:D2:0C:18:5C:C9:E8:E2:A7:AB:64:85:95:22:9E:28:42:61
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 019A7112F22E7CB727113727FF6294AE53A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 04:00:58 +0000
Manifest this update: Tue 11 Nov 2025 04:00:58 +0000
Manifest next update: Wed 12 Nov 2025 04:00:58 +0000
Files and hashes: 1: 7B14ZplVrco99CgQhNCv1xGbSkc.roa (hash: OmdwbZQIFrQFIJiZl5h04SvPsC9q6wGpd1O2lXSQCno=)
2: LzDfCHnh-gQic1q8B97Z8hE9unw.roa (hash: EAWHNP1UdFQrQzEQHh3mZm/pis0sCcxZgq07Vmvm4qM=)
3: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: is1XHVwhB5acNYvaslMNZTQTCw1YzZ3a9KG2Ol2Wyn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f2:2e:7c:b7:27:11:37:27:ff:62:94:ae:53:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Nov 11 04:00:58 2025 GMT
Not After : Nov 12 04:00:58 2025 GMT
Subject: CN=c15cced20c185cc9e8e2a7ab648595229e284261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:ff:d9:fc:5e:39:7e:c8:bd:3b:75:14:13:
51:4e:d8:e9:3c:5f:c3:e0:c6:c5:8a:0b:47:ee:fb:
59:11:6d:b2:5e:b7:6c:1b:f8:5c:a6:6d:f1:55:4f:
2f:15:8a:51:b8:eb:ed:ea:05:ef:a7:85:6c:66:e6:
6f:fb:32:f3:e0:c4:e3:fb:a2:d7:8f:dd:8e:e1:30:
93:48:7a:bc:dc:ee:4f:af:a9:16:a9:8e:f8:57:8b:
9f:67:17:fa:9e:6a:1c:5e:f5:49:34:e2:48:e7:3c:
29:78:e5:2d:a4:72:db:7d:cf:57:8e:c8:22:1d:7d:
36:93:8d:28:88:d9:dd:6f:e5:83:28:80:3a:7c:e0:
9a:40:eb:be:9a:07:9e:d8:23:5a:f3:07:a7:de:18:
3b:4f:ee:00:8a:9d:ae:0b:3d:29:e4:5c:f7:85:5f:
0f:17:31:11:32:69:a8:45:32:c2:bf:60:4a:4a:eb:
a7:f4:9d:aa:00:c2:4b:72:93:eb:2f:3c:39:ea:3d:
c7:60:41:4f:72:a8:c7:9a:09:d1:01:ae:6a:c5:84:
b4:d0:46:d1:10:4e:8e:94:96:76:4f:75:8c:70:e6:
32:45:f8:c6:0b:17:53:73:9b:b6:35:f7:69:c2:a2:
b2:05:56:44:10:4b:08:ab:12:30:db:6a:04:82:0e:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5C:CE:D2:0C:18:5C:C9:E8:E2:A7:AB:64:85:95:22:9E:28:42:61
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ea:e1:7c:10:a5:93:7d:11:2d:f4:86:96:22:c3:9f:14:d6:
6b:30:28:19:c7:ac:3f:cd:ed:fd:b4:57:02:09:16:26:96:4e:
09:25:b8:8e:71:23:33:fe:e8:5b:7c:17:0b:fa:ce:d0:e6:66:
ca:8f:77:ea:ef:11:b9:4f:2b:20:5f:b6:d3:91:53:d9:9c:2e:
11:c4:a6:3d:65:75:64:df:fd:f7:ed:ed:07:03:10:ef:b3:4f:
13:d2:e2:48:b7:c5:da:00:4a:43:97:73:d6:8a:ab:6e:a0:74:
fb:72:02:74:e7:3a:76:70:9a:07:db:3a:e9:04:96:32:b5:d8:
96:54:20:e9:2f:7d:f7:a3:1d:90:f8:45:94:7b:7f:1f:d2:dd:
2c:9d:1c:90:5d:ad:62:d7:c8:14:f9:48:09:0f:5e:1b:c1:08:
6d:c9:28:f9:7e:c0:82:49:8c:ea:59:74:cc:00:0f:53:fa:1e:
b0:01:b1:bf:15:03:63:30:bf:91:e5:86:95:b9:bf:dd:3f:6d:
6e:3e:1b:10:49:7c:ba:be:52:c8:aa:08:32:2b:5e:1b:9a:d1:
04:77:95:62:74:a0:88:3c:17:4c:7c:c6:a0:aa:ea:ae:0d:65:
47:a9:a0:cb:db:1b:b7:52:97:06:12:5c:19:65:93:45:7d:88:
23:ce:3a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:13 2025 by rpki-client