Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
File: YVDKG6-fn2_hPYniZkRwST_mXmU.mft (raw, json)
Hash identifier: +0rRTPdA10zP4nislUzvou/WxEOcijPOAJpNKtLQBwk=
Subject key identifier: 25:04:FA:DA:F9:B7:EA:9F:94:59:C7:E3:37:0D:2B:ED:6C:6D:8A:68
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Certificate issuer: /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial: 019A71B7DAC784E661A94E918DA44FFBBE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa (hash: AOJaEckufNSu4V7SdBMyiCpYmSZ+CDZ6Okor58DXN7s=)
2: YVDKG6-fn2_hPYniZkRwST_mXmU.crl (hash: Dfh0arZjVCyeI5lhVtbvi+I1GLqGzafcGH6olomlieg=)
3: nfREQDaYK_u_RRzhJTauvf2Y8ak.roa (hash: NLnHR9EroQCyhWmQwjRMOzrKCez85XwXecl2W6KaGHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:da:c7:84:e6:61:a9:4e:91:8d:a4:4f:fb:be:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=2504fadaf9b7ea9f9459c7e3370d2bed6c6d8a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a4:16:06:43:a6:f7:35:1b:66:c4:c1:f1:cb:
d8:c1:4b:a4:84:56:2e:58:ef:34:9d:84:a2:a4:f3:
61:80:e8:c7:be:15:56:5a:80:26:cd:f0:d3:c0:c8:
c2:a0:dc:ab:b1:48:94:95:dc:fc:45:4a:a4:06:92:
cb:d6:01:69:20:01:5b:54:af:9c:c7:4e:ac:f1:09:
9d:c2:71:3c:dc:f2:c7:73:ff:47:bb:f1:22:23:5e:
79:70:b5:fe:a1:cd:30:07:bd:6b:c8:52:bb:36:47:
1e:98:d6:56:00:f5:16:7a:ca:d6:73:a6:01:11:38:
15:82:1d:62:ca:25:e5:cc:e8:75:c5:05:81:0a:f3:
69:fb:73:a3:38:27:92:22:3c:4d:0b:89:d9:47:d7:
98:ea:90:74:7d:10:b0:cd:7a:ee:4b:e3:fd:64:64:
57:21:b9:e0:9a:b9:e7:11:76:ca:80:bb:ad:e0:0f:
d5:a2:a4:6b:e7:47:ef:46:b6:0d:6a:ca:97:3b:ab:
69:fb:5d:b3:2e:3b:bc:5b:12:2d:05:7a:b5:98:6f:
3f:9b:3a:a7:09:df:9d:50:dd:43:d0:fb:9c:d2:56:
31:f3:24:37:42:e3:7b:7c:74:e2:85:31:d7:3f:c6:
37:2c:14:c1:8c:c2:5d:09:43:b8:8f:95:a0:b9:7c:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:04:FA:DA:F9:B7:EA:9F:94:59:C7:E3:37:0D:2B:ED:6C:6D:8A:68
X509v3 Authority Key Identifier:
keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f1:27:8d:c5:26:25:c0:b1:12:17:98:36:4e:e7:14:96:78:
0e:68:e2:bf:ef:5b:90:f1:c3:df:0a:e3:e7:e6:15:73:d1:48:
d2:2a:57:7c:20:c0:9b:e0:08:bd:35:7c:47:f3:70:ec:39:4f:
77:b9:90:ae:79:ed:4a:0a:c8:55:e9:a9:2a:79:f0:f8:c2:43:
b2:f1:b7:e5:2f:f0:dc:7e:e3:70:6c:d0:c1:1f:77:4a:a7:54:
92:b3:dc:4b:de:0b:b2:04:96:b6:ac:5c:84:7f:d9:99:c0:4a:
a9:c1:66:23:ad:27:ed:ab:6c:7a:46:ae:92:04:25:90:95:f5:
f8:68:20:fd:2d:b5:47:5b:0b:43:a3:12:ad:10:2d:5a:a1:5f:
c0:ca:ce:1e:ec:24:18:c2:02:0b:0e:b2:ce:ce:9c:50:ee:cb:
c5:92:c7:9c:51:aa:43:5e:6b:bb:58:f3:af:2b:cd:77:e4:5a:
47:cd:40:4c:70:10:c9:a3:e7:42:96:51:99:0d:f4:c4:c0:19:
ca:44:69:d1:f1:30:ec:f2:9d:83:eb:99:03:95:99:07:58:80:
38:16:41:35:e8:f5:43:c7:17:4b:78:5b:49:e1:0a:82:5c:80:
ee:bc:b1:4f:47:cc:d0:f8:b3:4b:f1:48:8f:f2:9d:8b:0e:cd:
52:7b:fe:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:09 2025 by rpki-client