Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: svulyiXnloHheIHS0EP86/2tUtpRgsjQJ7cXMigagd0=
Subject key identifier: 3C:A3:CC:05:08:78:0E:89:13:37:28:92:39:77:75:35:A5:D5:EA:59
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 019A71B78F70426DA0D44E0B500443E0BC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:00:46 +0000
Manifest this update: Tue 11 Nov 2025 07:00:46 +0000
Manifest next update: Wed 12 Nov 2025 07:00:46 +0000
Files and hashes: 1: CdAs9uXPdWzwOsn5f3_VQNLvlMY.roa (hash: z23dSOm4EWMwCPY/rIYDaKhlW5ucCmgZPFZkayJaxA8=)
2: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: h0UQB94jloI1vFxvFnUBDNX3mFwMOtD5OGBAuPVpayk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8f:70:42:6d:a0:d4:4e:0b:50:04:43:e0:bc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Nov 11 07:00:46 2025 GMT
Not After : Nov 12 07:00:46 2025 GMT
Subject: CN=3ca3cc0508780e891337289239777535a5d5ea59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:af:9b:76:2c:5e:ba:42:f9:d8:30:9a:04:
84:62:ac:ef:91:dc:7d:2c:b4:79:76:91:65:8a:b4:
8d:e9:64:01:39:e6:46:0d:07:11:24:9c:04:ee:0d:
29:7b:96:bd:71:03:12:5c:e7:33:f6:d0:3a:87:20:
b6:e7:89:ce:49:8f:59:8b:88:de:7d:83:61:1f:2c:
e9:da:3b:9f:ef:8f:83:59:7c:35:02:ad:b3:3f:96:
40:24:ee:b3:0b:06:64:d9:93:91:06:2d:1d:fd:e4:
b9:d9:62:5a:0f:cc:04:f1:db:55:5d:dd:23:62:32:
ec:9c:dd:b1:15:a0:c4:98:da:26:98:1d:a0:04:6a:
26:7a:31:27:64:78:2c:6b:4c:a9:d5:93:89:e4:d1:
72:b2:62:eb:a8:a3:85:18:6e:27:19:fc:d9:94:32:
6d:60:03:67:fb:3f:3e:b5:6c:15:4f:4f:cc:3f:df:
fc:75:a2:36:29:a3:4b:5c:13:b8:9c:96:4b:89:e8:
61:9b:b9:5f:0f:7e:37:cd:a7:c9:95:1b:0b:04:6b:
33:82:3c:d3:ea:28:b1:90:5c:bf:b9:49:7e:4d:43:
cb:b4:20:fd:75:d9:fa:6e:b1:d6:40:54:6a:db:7c:
a4:7c:1f:8c:3b:22:e3:92:ef:bb:cc:19:ce:d7:72:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A3:CC:05:08:78:0E:89:13:37:28:92:39:77:75:35:A5:D5:EA:59
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2a:5e:c1:35:ef:75:a6:90:bb:db:15:d7:c1:7c:b9:9b:aa:
ba:b4:23:a4:c4:6a:1b:3f:a5:1c:c3:fd:21:cb:4c:83:10:4f:
32:a6:4b:e1:d1:c7:8d:90:88:75:47:2f:d6:b8:f2:c0:a3:10:
86:47:7f:9f:a4:b6:d0:1b:9a:cc:dd:b7:39:d1:fb:d8:ee:45:
06:0d:49:a2:96:80:6a:23:90:53:a7:f1:cb:68:17:50:87:f7:
ca:a8:c8:80:5a:34:49:25:bb:13:a0:53:ac:ca:ac:ec:8c:63:
e1:89:a9:e8:0b:c5:b7:4f:e9:15:97:3d:d4:fa:71:3f:29:7c:
85:b9:3d:c0:11:d5:40:8e:6b:85:3b:67:70:ea:f1:ed:06:48:
82:d9:2d:1e:a3:4d:a0:04:2b:34:81:e7:db:8c:94:38:1a:07:
03:88:76:8b:99:6e:fb:1d:f3:03:5e:ae:6f:c5:3f:1d:44:30:
b8:de:9f:51:39:13:11:ff:7b:3b:27:b2:fe:49:87:25:38:6f:
e1:1e:c0:a1:81:40:3c:6a:e5:0b:a9:fa:0e:0c:03:22:62:9a:
1b:10:e3:d3:d7:df:de:78:82:af:0c:78:cd:e1:77:d6:39:ce:
ea:7f:46:28:e7:68:70:2b:ba:cd:12:b8:2d:ff:ff:99:b0:b1:
b9:bf:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:36 2025 by rpki-client