Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: YTUCT8cL3VeYOoV6b81lU8BBGPnV+tDoW++iN50RqTs=
Subject key identifier: C4:3F:28:4D:67:CC:1D:80:37:29:63:4A:34:01:80:53:F6:A6:60:91
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 019A4C6149B1ACE431DA68BE4C0D2CF05862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 1172
Signing time: Tue 04 Nov 2025 01:00:35 +0000
Manifest this update: Tue 04 Nov 2025 01:00:35 +0000
Manifest next update: Wed 05 Nov 2025 01:00:35 +0000
Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: KfJ87qTEfgeKiw4SMA90xolYeV48Z0fOGYBPppzGyYo=)
2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=)
3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:49:b1:ac:e4:31:da:68:be:4c:0d:2c:f0:58:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Nov 4 01:00:35 2025 GMT
Not After : Nov 5 01:00:35 2025 GMT
Subject: CN=c43f284d67cc1d803729634a34018053f6a66091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:e2:48:08:1d:88:bb:94:e0:ce:0a:91:00:
0e:f7:4f:8e:e5:de:2a:8a:e4:29:78:e5:3d:98:4e:
aa:31:ea:54:3e:d4:47:94:bc:1c:03:cf:27:cd:d1:
45:79:11:73:48:79:23:e0:5b:29:07:8c:cd:c5:b8:
e4:bd:c4:95:78:21:62:5b:ba:17:fc:91:b4:59:02:
6f:c0:e8:fe:b3:56:f6:7d:50:2e:fc:b7:e9:85:9e:
91:86:55:5c:f2:59:db:2b:42:6a:ba:6f:a1:6a:d4:
c0:e5:dd:c9:0b:4b:aa:37:72:67:2b:b9:c1:b3:37:
1e:73:a4:27:47:0b:78:c2:45:50:92:93:10:37:19:
f5:ec:a0:b3:54:52:6c:88:1e:cb:39:fc:d2:b9:3c:
f4:11:24:8d:65:11:94:16:86:b9:b0:5b:c4:d7:9f:
ce:b9:7a:3d:64:8b:ce:01:dd:25:56:0b:ac:b3:c3:
3e:a1:de:61:57:6b:f1:d1:d5:3f:b5:70:ab:3b:49:
27:1f:a3:c2:21:b2:c8:6f:4a:a9:9f:f0:40:88:c5:
8e:58:50:73:2b:b3:1c:91:49:40:7a:74:90:37:8f:
aa:c1:f1:af:57:01:e3:83:47:6e:ef:e2:c5:7d:50:
41:bd:cd:54:66:26:18:b3:8b:d0:37:3a:22:b0:48:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3F:28:4D:67:CC:1D:80:37:29:63:4A:34:01:80:53:F6:A6:60:91
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:06:d0:8e:f4:9f:58:6f:5b:a4:bf:6d:8e:20:3b:5a:4c:16:
02:e5:ad:a3:c4:9b:b1:1c:bd:a0:2e:a5:c9:bd:b2:8e:25:0f:
0d:54:cb:31:6c:3d:4b:d4:bc:20:93:0b:7f:2c:18:71:8e:e7:
3f:00:2f:78:23:4d:b4:ca:7b:b8:97:38:d6:c5:dd:6e:39:a2:
d6:dd:93:b0:21:f6:03:7f:f8:e2:21:23:2f:05:24:83:d4:f3:
e7:ff:0c:d1:5d:e7:3d:da:78:80:f8:1b:51:61:45:53:a7:29:
c6:b5:b7:a0:4b:e4:49:60:51:42:44:46:c4:2b:40:93:18:c3:
f8:3d:75:4f:ea:a8:3f:29:b7:20:4f:73:c7:7a:85:ee:44:4b:
af:30:e9:d3:39:40:d0:87:ec:3b:8a:76:8d:84:6c:0a:f3:b8:
c6:c7:a1:6a:e3:11:44:4b:5e:fc:9a:de:3e:c9:c0:d0:cb:6e:
04:be:99:d1:87:ce:b8:80:e2:86:b2:e1:05:fa:1d:0c:bb:f4:
f9:e6:d5:2c:15:d7:9b:ab:f6:35:f4:7b:78:e5:0b:f2:46:bb:
c4:99:92:03:9b:69:f4:c9:73:1c:75:3c:e8:7a:1a:03:25:f8:
83:85:ba:0e:b4:3f:51:4a:f8:10:84:57:1a:f2:5c:14:52:d5:
e3:f1:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:02:01 2025 by rpki-client