Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: A9sKTLOo7VP2iIdcubhFYFnqtUtK5qp17evd0ivOKMU=
Subject key identifier: 18:88:55:F0:C4:ED:68:25:36:57:C9:DE:6E:FB:4F:13:00:1D:38:5C
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019A0FA7BBCC870938590F0F94FDA25649C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 0EE3
Signing time: Thu 23 Oct 2025 06:00:42 +0000
Manifest this update: Thu 23 Oct 2025 06:00:42 +0000
Manifest next update: Fri 24 Oct 2025 06:00:42 +0000
Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=)
2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: 2fT0zr/yISX9quP/Wf+5DcvTAg513/WdVFAcrTBaP78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:a7:bb:cc:87:09:38:59:0f:0f:94:fd:a2:56:49:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Oct 23 06:00:42 2025 GMT
Not After : Oct 24 06:00:42 2025 GMT
Subject: CN=188855f0c4ed68253657c9de6efb4f13001d385c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:7f:10:c6:7f:7b:0f:88:cd:3f:6b:0d:6a:
54:68:51:98:2e:56:e6:6f:38:24:fc:ad:1d:b1:0f:
47:ac:3b:50:44:49:0f:7c:86:d2:5e:a1:89:67:87:
72:81:24:90:1a:7b:53:36:dd:0d:74:77:fb:e2:31:
93:dc:30:f7:ee:a1:eb:d6:dc:0b:96:85:03:48:f8:
78:68:a7:09:6e:db:f2:83:0c:5e:8e:d7:17:1e:84:
5c:0a:a5:c2:c0:dc:94:2d:4e:8f:c0:e0:90:e7:9c:
92:a1:02:02:04:1a:da:f5:d0:aa:31:bf:1e:98:04:
f9:84:9f:43:14:47:5f:af:3c:62:65:4c:c7:65:3e:
98:ec:d9:d1:c3:b9:5e:30:04:36:9a:61:3c:53:eb:
de:78:53:ea:71:ef:35:47:10:d9:bc:d9:10:1e:6e:
d0:72:f4:40:96:30:bc:cc:c4:91:e2:47:b0:a8:85:
49:ae:d6:d6:81:dd:fe:28:a0:be:ce:75:b7:20:37:
6a:e7:83:65:b5:81:d9:87:b1:09:3d:f8:7e:6b:ae:
bd:01:fe:be:05:b9:ab:a2:ae:e5:2e:0d:e7:79:36:
54:82:b6:2e:c5:68:af:96:d8:e6:a8:e2:14:5c:d4:
fd:18:fd:aa:2f:f4:1d:29:6e:bd:77:21:d5:c1:3d:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:55:F0:C4:ED:68:25:36:57:C9:DE:6E:FB:4F:13:00:1D:38:5C
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d8:1b:df:ad:40:a6:b0:a8:c7:73:90:37:e1:b3:58:4d:1b:
76:b4:32:9d:39:37:68:0d:06:01:8f:15:86:af:3d:08:e0:a3:
97:06:a5:eb:a2:c5:03:6b:30:09:d7:b9:a1:b5:68:08:6f:6f:
bc:fd:e9:ae:b4:09:a7:39:a6:fd:dc:bf:61:9f:ba:f7:29:15:
f7:99:d3:d1:9a:00:9b:fe:e9:0c:ba:a0:e7:0d:13:4a:fc:c5:
58:45:92:b1:52:80:12:79:ea:80:99:4b:fc:d6:c1:80:77:d5:
82:ec:b9:b8:d3:27:ac:71:c9:c5:ab:d8:1c:bc:13:37:d3:1c:
2f:dd:fe:7f:ff:22:c2:fc:6c:65:3a:61:3d:dd:29:7d:71:b6:
d4:33:9e:e8:80:8a:20:7c:bb:6a:a6:dc:40:b9:f2:04:44:a8:
0e:fa:7a:fc:cd:7b:58:e4:6f:a6:e7:62:8e:3e:94:1b:50:35:
76:8c:db:5c:6d:0e:c4:a0:4e:00:82:1d:09:21:07:a5:ca:c8:
02:69:21:21:01:f8:81:32:e1:27:8c:ae:95:9a:63:80:2d:34:
68:be:88:60:6e:d9:1e:9f:05:e9:36:21:51:71:61:cd:70:60:
af:33:17:42:86:86:e5:24:2d:04:40:98:07:f8:dc:24:08:1a:
1a:c7:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 11:26:31 2025 by rpki-client