Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: V5LmCGBi9wIxEHaqr7xcxpT3hrC2t5IfapEEmIfNROs=
Subject key identifier: 6F:7D:A9:F8:4A:F4:E1:78:AE:D5:DD:D8:8D:6B:4B:70:EF:5B:1D:C1
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 019A71B7B24041DE0785EF170EAA4272F4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 0B57
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: xPkOBTuKMkByOfQ/LRcTOfGx0a/Kl8YD8pR15BIUkrU=)
2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b2:40:41:de:07:85:ef:17:0e:aa:42:72:f4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=6f7da9f84af4e178aed5ddd88d6b4b70ef5b1dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:de:22:11:07:36:90:6f:8a:a0:96:e1:5d:
4f:c9:18:3d:ab:81:a1:04:63:28:a6:87:29:cc:25:
19:6e:35:3a:d2:7a:02:e2:53:fe:55:f7:56:8d:0e:
68:43:90:51:da:83:08:54:b8:7c:f6:cc:dd:a7:db:
79:25:09:95:53:83:d7:cb:69:e9:33:0a:3b:c9:07:
4f:e0:6c:62:49:a6:04:0b:c8:ac:78:10:c4:75:5b:
f2:97:dd:d5:ff:97:bb:32:46:57:ea:10:e5:99:3b:
b7:12:b7:f9:91:ab:6c:fc:4f:f6:68:e4:f4:46:16:
e3:32:a7:86:83:3a:e8:b2:f7:ab:dd:46:e5:cf:e3:
9d:53:a9:f2:4e:91:59:81:ee:9b:0a:63:e4:e0:c2:
0e:45:ba:9f:54:eb:34:43:df:46:b2:8f:68:df:d1:
d7:be:f6:00:c7:81:47:53:82:64:6c:90:db:05:fa:
8b:96:00:08:e0:3c:9a:e1:7b:67:d7:03:d4:5d:9c:
4c:9d:ef:74:39:55:d4:70:a8:58:36:eb:87:db:95:
7d:e6:c3:6b:c8:81:b4:98:4e:c6:ec:65:f4:d9:37:
69:be:93:09:81:c1:50:75:85:aa:83:ea:66:5a:5a:
e9:de:71:09:e2:e1:d1:72:81:a1:fc:c1:d1:d2:66:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7D:A9:F8:4A:F4:E1:78:AE:D5:DD:D8:8D:6B:4B:70:EF:5B:1D:C1
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:60:16:21:88:4c:f7:e8:95:d5:21:44:d5:23:ab:76:4c:d0:
d1:bc:15:bd:04:c4:32:77:18:2c:19:be:f6:b9:28:e2:13:55:
7c:35:ff:8d:5e:df:c8:7f:42:a1:30:94:88:43:26:8e:23:83:
39:3f:da:60:7a:ec:76:b6:dc:bd:73:07:0e:40:da:2a:e4:55:
da:eb:58:70:30:c0:97:c2:83:7c:e0:3e:3a:a6:64:cf:ff:4a:
ac:2b:9f:08:36:25:5b:5a:e3:a7:a2:b0:ba:15:97:00:ee:97:
41:da:81:44:a1:e9:ed:88:96:89:11:ba:4d:6b:35:e7:e5:85:
5c:83:62:e1:4d:1c:7a:15:9e:8f:ac:4a:ff:f3:6d:b8:d4:a4:
a9:83:28:55:eb:e8:4c:82:4e:b4:f8:f2:cb:56:77:4a:42:0a:
88:c7:5d:c9:6f:fe:ab:36:ee:6c:5c:78:ae:6c:26:eb:a3:42:
5c:a2:23:4b:a1:4c:36:14:ff:d0:1e:cf:1b:0b:23:b1:c7:3e:
f5:3e:88:fb:91:cb:3d:7d:d1:4e:cf:b8:2e:19:b4:f1:f2:92:
d9:ab:44:da:63:22:15:bf:9e:7a:3a:56:04:ef:82:86:c4:ed:
44:2a:a9:92:45:98:5c:7e:80:13:aa:6d:0b:2b:fa:77:fb:64:
68:9a:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:40 2025 by rpki-client