Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
File: YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json)
Hash identifier: WqPWvF72lXSywBTS2rKYfRvSPRSVJTySzWBjSMW4EyA=
Subject key identifier: F9:58:89:B7:11:6C:05:2E:69:61:22:DA:ED:7F:CB:0A:41:B2:B3:F0
Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
Certificate issuer: /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Certificate serial: 019A72CA927B93C040E6E3C8139947C43079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
Manifest number: 0594
Signing time: Tue 11 Nov 2025 12:01:09 +0000
Manifest this update: Tue 11 Nov 2025 12:01:09 +0000
Manifest next update: Wed 12 Nov 2025 12:01:09 +0000
Files and hashes: 1: FYyJuOlatGIlA61s4f07XUGlkGY.roa (hash: Py+5NmYVZfVm5rbvNCZVmCmJkN1lML6LlEnI73AYMuo=)
2: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: fGg91qUnUn97BwxUqvHjIuin/aEgVlDxs6gHrXvMthU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:92:7b:93:c0:40:e6:e3:c8:13:99:47:c4:30:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Validity
Not Before: Nov 11 12:01:09 2025 GMT
Not After : Nov 12 12:01:09 2025 GMT
Subject: CN=f95889b7116c052e696122daed7fcb0a41b2b3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:0f:29:a6:d7:8c:a3:3a:bd:e4:ed:cd:cd:
0b:74:08:69:03:98:8d:04:e9:57:09:3a:33:d8:4a:
20:37:fb:96:9e:3a:1b:dd:ce:f7:19:04:bc:1f:80:
b1:29:18:88:96:3d:7b:2a:c8:71:03:f6:8d:c0:c8:
76:9d:d7:59:4e:c3:3e:18:a8:f0:fe:47:3e:f9:f7:
55:e0:ad:a7:2c:21:fd:09:96:7e:8c:19:61:11:cc:
1e:2c:7c:f6:e3:7f:2b:16:ba:78:96:1a:e8:2e:6a:
a5:f9:ad:7d:66:06:24:b3:f3:66:32:5f:8a:f9:04:
39:8f:33:8b:82:a8:1b:01:5f:48:4e:00:7e:09:48:
08:cc:07:e0:d0:ba:01:62:2e:3d:a8:64:e1:90:75:
0a:ed:0c:8e:03:a6:6a:aa:e1:4c:2d:f8:5b:65:c2:
03:93:9c:e1:6e:b3:4e:83:33:f5:9f:76:c8:8d:9d:
d2:f9:b8:7a:82:ee:5c:4f:a4:81:c6:03:03:3d:2e:
52:46:ff:b8:45:1a:18:8b:0b:ea:cb:e8:07:dd:c6:
c1:d4:78:d8:b7:6f:dd:52:de:07:08:71:72:a4:01:
2c:04:11:b6:02:32:ad:28:11:4c:6e:63:8e:68:95:
c9:91:a7:7c:48:f8:34:4c:eb:48:a6:ed:6a:08:64:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:89:B7:11:6C:05:2E:69:61:22:DA:ED:7F:CB:0A:41:B2:B3:F0
X509v3 Authority Key Identifier:
keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:3a:2a:b5:ed:e3:8e:09:b9:13:8b:f3:71:32:89:d1:80:f2:
e5:89:26:55:5a:de:de:52:03:f6:c8:1c:09:92:37:2e:d2:74:
6f:e5:25:f5:f9:bf:2c:12:3f:95:3a:c2:6f:a0:4a:2c:60:2f:
2c:14:da:e4:ca:db:65:75:68:d4:b8:ff:91:09:9c:27:e9:39:
04:cb:4e:ff:d9:24:25:17:8c:c0:76:19:44:7a:50:2e:21:17:
33:4b:f5:60:0c:73:04:ee:11:b5:d1:da:e9:8d:42:dc:8d:12:
93:df:07:b5:0d:47:98:1c:05:75:1f:ed:dc:73:3c:47:1d:29:
eb:43:0f:f3:38:d8:d7:8c:2f:99:a7:3b:02:80:15:1f:33:d2:
62:0a:90:7d:87:ea:24:9e:4e:f6:2d:37:57:23:27:a2:81:4d:
75:9a:c1:b3:0e:4e:07:86:6e:9a:36:3c:fe:e9:ab:5e:98:65:
e3:4a:34:79:ae:34:83:b0:48:ee:d2:00:b4:ef:5f:a7:07:61:
6b:3a:b6:9e:bf:3f:ea:1b:a5:cd:84:bf:fc:a5:5f:fe:17:c3:
0a:0a:18:fa:8c:ee:b8:5f:17:cd:eb:7f:07:b9:99:c9:70:b8:
32:eb:1a:2d:ca:56:7b:1f:d9:e0:0f:75:1c:b9:03:40:d7:ad:
4b:db:03:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:57 2025 by rpki-client