Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
File: YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json)
Hash identifier: +fZHJUsyy7tdBYlnqkGh1MGoQVnqeNQDPjT9Zlqfvso=
Subject key identifier: 66:F7:0D:64:A4:86:23:2C:05:09:22:B0:D5:57:EE:71:4F:26:42:61
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial: 019A71EE6D7FA9CC01EF07786465926D709E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: lOkHTKV4wL4AC+DG6Z3owq1lojdT/ifg9qhkrzcAJIc=)
2: hkDzJJYa_8AXZWHuwxhkvXYeqBU.roa (hash: jBdI40IIexbS7hFgDYQGpUFEN6SpLEVlHNlns3J1TE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6d:7f:a9:cc:01:ef:07:78:64:65:92:6d:70:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=66f70d64a486232c050922b0d557ee714f264261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a8:7a:ee:b6:ca:0f:60:b3:11:50:45:e3:e5:
1a:05:93:92:d8:ba:95:61:6d:12:e5:fe:92:6b:e6:
66:b8:a0:3f:fa:ff:4e:f3:a2:81:fd:89:47:1a:d5:
57:c7:90:5a:9d:8a:32:91:b7:bc:c8:fb:57:b2:1b:
73:62:78:ea:ec:83:b0:e5:27:9c:46:0c:bb:01:57:
bd:c0:68:0f:dc:cd:1e:27:4d:90:91:9d:1e:7c:12:
a5:36:8d:11:c4:82:c7:7b:48:61:35:bb:1a:83:aa:
ef:4f:2e:53:8b:0c:6b:92:68:03:d0:5c:42:15:2b:
c2:65:8b:92:02:a3:c7:ec:65:9b:b8:ca:15:e6:e8:
34:36:6d:fe:0a:4d:7e:87:52:50:7e:90:f9:2b:89:
0b:78:bd:1c:14:f2:2e:9d:df:c1:00:57:82:d9:98:
1c:9a:9a:fc:45:6a:ea:dc:8e:91:c4:0a:07:fe:55:
54:f6:31:be:02:a4:c7:15:73:f3:de:a2:b9:55:4d:
97:8b:ff:c2:b3:87:3d:df:7c:ca:9e:e2:27:b2:12:
48:5a:92:02:ec:d1:e8:c4:6e:ae:54:9e:3c:0a:4e:
c8:2a:e1:ce:d9:ec:6b:1e:55:a4:23:09:aa:01:66:
d7:31:f8:15:61:e6:2e:78:07:4b:52:1d:5c:0c:af:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F7:0D:64:A4:86:23:2C:05:09:22:B0:D5:57:EE:71:4F:26:42:61
X509v3 Authority Key Identifier:
keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:33:d8:59:6a:25:0e:e6:80:07:f7:00:6b:2e:35:05:82:02:
f5:95:67:f0:8c:a0:91:b7:d6:31:9a:ab:eb:41:15:42:dd:ec:
3c:50:b6:c2:75:7e:9e:6f:d7:1c:b1:84:df:db:f7:bb:77:9f:
46:9a:54:2c:25:75:2b:5a:fd:7f:6a:78:6a:4f:3f:8b:35:02:
21:4d:bf:b1:69:3b:e2:3c:89:00:87:b9:9b:e8:3f:cd:1a:6a:
dd:50:ab:f8:4d:59:0c:43:ba:d6:66:29:13:e1:60:ad:df:3b:
1d:2a:0a:ec:ce:83:10:ed:e6:73:eb:ec:1a:b2:a8:af:d7:8d:
9d:35:5a:ca:b1:0c:b3:c4:22:91:40:ce:86:6a:c1:8d:67:98:
f2:40:a7:80:d1:54:a5:5b:37:2b:7b:56:4f:3e:a3:2e:9b:3b:
a4:f3:51:32:0d:df:f6:57:65:e6:81:f3:8f:7e:e2:c7:ec:9a:
c5:3e:40:20:f3:81:15:63:be:d5:a7:01:ee:c0:4f:be:28:7a:
30:4f:6a:a0:1e:71:5e:15:0f:1d:6d:3b:c2:67:82:74:d9:88:
c5:63:02:22:f8:21:f6:cd:61:42:ea:33:ab:f5:71:a3:13:9a:
14:96:81:79:23:a9:03:df:e4:eb:fd:69:14:3a:63:bb:2f:69:
ac:ba:89:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:51 2025 by rpki-client