Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier: BRqJKOutNI8uaLD4AqEUrsRE07JhbT6H1kn5gs0VCD0=
Subject key identifier: 94:DA:27:DB:C4:54:34:20:C7:88:19:5E:22:5B:F9:37:16:DD:2E:1B
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 019A71B7B711C317C957D39779E6234C62DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number: 0B44
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: SiWRZkKpgde5atWHqH4e8qB6Tgc.roa (hash: iSQoSjNloOyOq1kG8c4T/IKGd9ldR/sWYpzULfuNsNw=)
2: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: JfDC69jWKai+udyrCCF0dr29htiw/O12cQs6XwmDc5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b7:11:c3:17:c9:57:d3:97:79:e6:23:4c:62:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=94da27dbc4543420c788195e225bf93716dd2e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:42:27:62:90:5f:00:70:6f:4b:28:4f:9f:
56:3b:69:f1:0e:6f:a3:33:5a:91:55:df:09:16:0f:
4b:3d:8e:d6:bb:01:6c:13:ac:87:6e:69:09:c0:02:
61:18:40:5f:32:21:4d:09:4c:31:51:f5:89:b7:27:
36:32:74:fd:1f:84:4a:d6:c0:dd:67:63:5e:1d:e9:
e0:7b:69:dd:21:7a:bc:88:db:5e:e2:c6:3e:f5:73:
16:0f:3e:64:a0:79:6b:6a:fe:c7:3e:12:2b:97:27:
ff:e7:9e:1e:db:6b:1b:e9:01:0d:67:5e:da:b5:3a:
83:ec:4e:f4:b6:70:41:b6:46:ed:2e:eb:2e:52:9e:
a9:a2:b8:9b:ed:1a:45:8c:e0:d5:80:21:a3:7a:10:
1b:f1:18:d0:62:66:d0:d2:91:15:d8:7e:f7:be:dc:
89:ad:ff:ad:0c:a1:f1:bb:32:fa:be:20:94:df:a4:
4f:60:4c:32:4f:0e:76:33:41:7d:82:48:7b:de:42:
bd:80:fd:01:51:23:e6:28:88:9e:b6:8e:8e:fc:e6:
11:1a:38:1a:78:7d:6b:41:42:f4:df:fa:f1:53:95:
75:7b:a7:cd:43:87:71:90:55:63:13:06:39:2c:6b:
a2:be:04:87:f4:25:b6:37:06:9d:fe:9b:03:f3:a1:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DA:27:DB:C4:54:34:20:C7:88:19:5E:22:5B:F9:37:16:DD:2E:1B
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a2:69:a6:e8:1d:43:16:b0:80:85:b3:f7:85:f6:bb:09:f5:
f6:37:ab:d4:3a:2c:02:de:70:19:a3:19:75:75:9d:c1:95:e2:
14:c9:fc:2c:26:35:25:4e:5b:fc:5d:c4:7e:ac:a4:01:0c:1a:
b2:9d:b2:bf:ed:0a:05:6d:55:05:99:a1:cb:a0:20:76:3e:5b:
1a:0f:5d:d1:88:5d:db:ab:f2:5e:90:a3:b5:36:08:f2:c7:65:
b5:11:5b:69:8a:60:33:95:3b:c7:65:78:5c:05:f6:da:a2:77:
03:6c:62:39:e4:d9:a1:54:42:02:76:f9:35:aa:3c:46:d4:5d:
04:76:36:c1:0e:d0:b3:97:7a:62:58:f5:e9:36:21:39:1a:07:
17:a0:7c:d2:34:5d:dc:1b:96:56:9a:9e:25:2e:cf:f6:92:eb:
e1:eb:2c:5d:2d:4c:31:b2:ad:95:5c:bc:77:8e:16:a9:3c:ea:
5a:3c:e1:48:cb:df:0f:2c:cf:53:19:69:db:a0:b1:8d:50:0f:
47:48:c0:77:f7:93:66:bc:d8:30:98:e7:c7:56:5c:a6:52:a3:
c0:34:f9:df:ae:fe:15:af:78:24:9c:ec:f4:8a:37:bf:2e:c0:
ea:8d:16:e2:d1:c2:8c:15:5c:d1:41:c9:8b:a8:6b:1b:fd:c9:
cc:63:51:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:07 2025 by rpki-client