Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json)
Hash identifier: YMSn6JXSMtWKRNHVLVDnC5Z/eljNJR5qxBqic3ZqCfs=
Subject key identifier: D2:D9:4A:92:01:D0:C0:9F:0F:8A:81:37:85:5F:25:A8:38:A7:4D:88
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial: 019A718089A57563574822579766B299595C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
Manifest number: 71
Signing time: Tue 11 Nov 2025 06:00:40 +0000
Manifest this update: Tue 11 Nov 2025 06:00:40 +0000
Manifest next update: Wed 12 Nov 2025 06:00:40 +0000
Files and hashes: 1: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: H2GhrdBNNfncoDH30Nh3V5KykY/Pl3+yyU9IRrADGIo=)
2: bcgwm0IXZl2cgnOU43vtGxwCk5s.roa (hash: pOqSUBN1yoYOlROah8VVMTjUQwi9pDp8K4UguM3751U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:89:a5:75:63:57:48:22:57:97:66:b2:99:59:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Validity
Not Before: Nov 11 06:00:40 2025 GMT
Not After : Nov 12 06:00:40 2025 GMT
Subject: CN=d2d94a9201d0c09f0f8a8137855f25a838a74d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:2d:57:8a:11:17:96:36:46:db:60:8c:77:
82:43:1f:f8:41:be:99:40:cf:83:30:ec:79:1b:45:
ca:f3:49:ca:c3:52:b3:aa:c3:1f:78:76:73:c4:18:
2f:3e:8d:c8:ea:42:41:6e:db:ec:33:1c:d2:21:1c:
3a:e0:88:85:85:11:61:c2:72:8d:ba:7e:6a:d3:69:
9b:71:ae:89:67:95:59:2a:bb:d8:a3:ce:eb:01:f0:
54:f5:55:ba:61:bf:6a:71:ba:0e:20:f2:29:e7:e8:
31:db:dd:e7:b8:1e:77:c9:4e:22:bc:94:b8:23:88:
79:05:d8:7c:de:fb:46:25:de:ec:43:13:e7:6c:7e:
4b:45:76:af:28:5b:b6:de:ae:f6:7d:68:5a:de:23:
da:12:af:43:97:9d:55:ee:7c:f9:44:e1:ee:e2:ac:
b1:3e:d6:8c:a5:59:f6:c7:91:a4:15:b4:7d:b6:73:
74:db:53:00:6d:df:eb:11:03:39:ce:91:c7:de:86:
21:cb:b9:63:88:cf:eb:05:20:d9:98:92:15:71:82:
62:d0:1f:c3:79:61:93:cd:2d:56:cf:4a:7f:2c:fe:
b0:1c:c4:7b:86:e7:d2:01:49:27:25:db:90:bb:9c:
93:13:2a:38:b1:14:ae:06:11:e3:82:bb:f7:50:2e:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D9:4A:92:01:D0:C0:9F:0F:8A:81:37:85:5F:25:A8:38:A7:4D:88
X509v3 Authority Key Identifier:
keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fa:12:a1:ce:79:0a:33:08:4b:31:72:a8:d3:81:ff:91:d5:
7d:e7:44:d9:a4:5d:e9:e6:09:25:06:12:44:0f:56:31:4f:98:
da:42:58:4b:e9:71:84:ed:c4:57:45:4c:8e:29:fa:c8:c8:7b:
d0:17:1c:0e:0b:b7:52:06:a5:f6:07:a0:c9:4f:1f:89:c6:25:
5f:c8:f8:f0:d6:8f:ae:1f:12:78:73:d2:13:3c:57:41:f4:24:
a4:e6:f9:2e:87:44:bc:9d:1d:24:1f:2d:72:31:70:e3:33:52:
25:b8:28:57:28:f3:0d:ae:24:d3:8a:e5:e7:35:4c:61:e7:6d:
0c:da:3d:80:c3:c0:04:dd:6f:42:d3:9f:77:8d:07:f7:86:28:
4a:49:08:9d:95:f9:d6:c0:da:d5:ff:8a:2d:a5:86:08:71:6f:
1f:28:cb:d0:93:bf:ed:25:02:29:3d:d1:49:6e:db:eb:71:9a:
9b:b9:0c:2f:9d:4e:71:f5:ae:8b:b4:7f:59:ea:c4:91:a4:e6:
cb:8d:ff:00:b0:8c:09:cd:92:c2:94:88:1f:a4:16:fd:a3:e4:
fb:05:c9:90:4f:dd:3e:7b:18:ef:d3:a0:a3:09:04:2c:a8:3d:
c7:18:47:b3:c6:24:b6:e5:1a:48:d8:da:d5:73:ee:61:e0:94:
3c:dd:a1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:09 2025 by rpki-client