Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json)
Hash identifier: 3YdNCKLxVkZcRSAdDOSUfPNKYwGaeH4pfyZKffpi0dc=
Subject key identifier: A1:25:51:1C:20:BC:31:F8:84:5E:7B:FF:B1:DE:62:2C:34:85:43:2B
Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Certificate serial: 019A71B80B0F9F44DD6706E208018BFB736D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
Manifest number: 0F79
Signing time: Tue 11 Nov 2025 07:01:18 +0000
Manifest this update: Tue 11 Nov 2025 07:01:18 +0000
Manifest next update: Wed 12 Nov 2025 07:01:18 +0000
Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=)
2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: TfF/q+SBO02gbH3fzY6rJbtFZkgk8LjOzMx/0IczXq8=)
3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0b:0f:9f:44:dd:67:06:e2:08:01:8b:fb:73:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5
Validity
Not Before: Nov 11 07:01:18 2025 GMT
Not After : Nov 12 07:01:18 2025 GMT
Subject: CN=a125511c20bc31f8845e7bffb1de622c3485432b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:a9:66:96:83:46:c7:58:d1:a6:68:bf:89:
c8:34:ed:b3:4d:80:bc:aa:4d:bf:e0:53:72:9e:87:
98:f9:9a:3c:7b:63:b2:65:5b:bd:ad:4f:59:b5:c6:
89:51:b5:48:ee:51:39:d4:f1:b7:c6:3d:0b:7a:e5:
15:be:db:eb:dd:e7:0c:a6:97:f9:e7:f1:a1:82:15:
f4:27:46:91:fc:0b:cf:e8:a6:3b:e1:9d:0c:6d:6f:
fa:77:1b:86:6c:a5:56:87:74:88:5a:57:80:52:cf:
e1:36:cc:43:5c:99:77:a4:f7:ea:fa:4c:59:87:34:
ff:43:1a:fa:0f:37:2f:6f:1b:74:cb:5f:86:a0:a3:
50:fc:a3:f3:b5:c4:91:6d:1e:0c:19:fb:88:6a:e3:
dc:58:0d:93:96:a3:2f:cb:c3:6b:3e:b2:40:ed:c9:
18:17:b9:41:48:5a:ad:b5:ea:b2:0d:00:d0:47:7a:
45:58:3d:3e:18:4d:af:c8:25:ee:0b:b5:bf:ab:44:
8b:37:b6:b6:1d:1c:83:96:60:a5:56:5f:97:ac:cf:
9d:47:bd:fb:c8:22:84:a6:ac:0e:de:08:45:86:25:
cf:cb:19:4e:33:9b:20:78:17:4b:63:1f:c9:81:2f:
7e:13:41:46:8f:89:9c:52:64:df:2a:10:f7:cc:b0:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:25:51:1C:20:BC:31:F8:84:5E:7B:FF:B1:DE:62:2C:34:85:43:2B
X509v3 Authority Key Identifier:
keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:db:3c:5f:db:87:73:88:83:e8:2e:25:86:00:9e:1b:e6:06:
4a:5c:06:3b:0a:f5:64:f3:42:e2:c6:cd:65:a8:1d:d5:d8:b2:
b6:97:23:ed:bd:e0:48:b0:c0:f0:f3:ff:74:33:51:cb:d5:31:
5c:aa:6c:ba:3f:dc:bc:73:55:d6:f1:18:7a:84:43:2f:7f:28:
15:c1:e8:c0:7c:92:d2:e0:55:d4:e9:2c:54:fd:d4:8a:b9:f6:
7b:43:c0:28:39:0b:12:df:f3:9e:c8:4a:ff:48:7b:04:7a:e3:
8a:25:42:7b:ff:98:65:cf:a8:ff:71:eb:ce:28:a0:e3:37:79:
1d:de:1d:ab:85:f9:f0:a1:0a:58:fa:3a:da:51:8f:a4:45:56:
33:5e:62:7a:22:ce:cc:b7:22:18:e0:3f:4f:1b:9c:a6:2a:b9:
01:2a:aa:e6:c3:40:3f:b2:07:f9:28:cf:91:6e:84:b2:93:58:
65:b9:ed:2a:88:0f:0b:17:a1:63:2e:ba:8d:47:67:31:2e:a2:
73:9b:2a:9c:5c:1a:36:8d:75:45:d7:a6:03:4c:04:5e:71:cc:
4d:4f:a9:a7:ee:54:0b:e2:61:30:29:85:3c:08:7c:b7:d7:c0:
03:67:62:12:60:13:f4:a2:de:63:6f:00:c9:39:95:13:6e:ab:
0c:e9:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:41 2025 by rpki-client