Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier: yHNf/rIOid8xksvyL8AO/OI+pEg5Jcbh79aL0qkYxhw=
Subject key identifier: AB:F5:56:32:22:21:09:7C:56:2B:A5:FB:13:5C:A5:70:9D:68:DB:97
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial: 019A72CA9209961CB2616EAAD27603991DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number: 1689
Signing time: Tue 11 Nov 2025 12:01:09 +0000
Manifest this update: Tue 11 Nov 2025 12:01:09 +0000
Manifest next update: Wed 12 Nov 2025 12:01:09 +0000
Files and hashes: 1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: 7uQSiNpAFuKKGrIJU+Ak6wOecwhJw0S1AlkFFxLLxVk=)
2: gFgwOulWz8EdjBx0WPIuskEa2Xo.roa (hash: kmccz6rQP+OANRlJVswlZw+GA51smpUT7A9JAOVNjXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:92:09:96:1c:b2:61:6e:aa:d2:76:03:99:1d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Validity
Not Before: Nov 11 12:01:09 2025 GMT
Not After : Nov 12 12:01:09 2025 GMT
Subject: CN=abf556322221097c562ba5fb135ca5709d68db97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:c0:28:2e:0f:32:cf:d6:71:28:3c:67:74:
aa:53:d7:2d:f9:3a:c2:2d:8f:59:5c:a0:23:30:7f:
8a:c5:dc:04:c8:5e:54:fa:de:a0:9b:01:50:19:ac:
dd:39:28:15:f4:65:bc:44:e2:cd:89:ae:f2:41:2b:
0f:b1:02:1c:63:aa:f4:7d:7f:ec:34:a5:d0:bf:6f:
48:6f:0a:46:c7:96:da:92:12:64:76:4b:7f:ab:e6:
fb:de:35:fa:58:03:77:ce:5d:49:07:dc:cc:ed:6a:
ba:12:b8:ad:1c:08:e1:45:f5:01:a8:5f:0a:62:3e:
89:29:96:f6:72:9c:6a:21:54:aa:8f:20:1c:7c:d5:
05:42:1d:db:27:0d:08:69:e2:db:28:52:45:16:b2:
dc:a4:b9:89:fb:a6:d6:61:da:1b:90:48:17:d9:f8:
c6:cd:cd:03:d6:11:c1:6c:e9:74:71:ff:ef:61:ba:
f1:64:39:7f:76:22:88:f2:bb:06:f6:79:2d:c6:33:
0b:ee:90:1b:40:21:37:6c:7f:7a:44:a3:c1:ae:0d:
d0:68:cd:e8:2f:4d:38:e5:0d:14:f8:79:99:b8:ae:
d2:27:c7:e6:f1:1e:8f:71:1c:d8:bb:01:32:ec:58:
56:2f:69:ca:29:9b:9e:30:58:78:01:8d:96:9c:cd:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F5:56:32:22:21:09:7C:56:2B:A5:FB:13:5C:A5:70:9D:68:DB:97
X509v3 Authority Key Identifier:
keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e5:87:5f:91:c6:00:dc:71:36:e4:e0:61:09:17:b0:b9:98:
87:cc:9d:fd:30:b8:0e:1d:1a:2e:29:ac:7b:6a:9a:50:aa:68:
1b:2a:6c:8f:42:e2:bd:62:ed:a6:0c:64:67:1a:5d:16:c6:de:
b4:2c:d2:3d:a9:23:49:f2:6a:d6:bd:9e:72:c7:ec:ef:13:73:
03:bd:f4:30:b9:31:04:9e:0e:4e:38:66:d1:a3:e0:3c:ff:18:
e5:d2:ab:04:9e:1d:75:a2:c7:05:47:03:29:9d:3f:fb:98:47:
8b:37:8d:7a:4e:62:53:c2:8f:32:23:1c:df:34:36:3f:b4:f3:
86:2c:f9:bf:c2:61:b7:a3:75:cd:66:42:46:55:62:c4:e7:9e:
ff:35:0e:cb:72:21:14:ea:7f:8c:d2:4e:31:67:9b:ca:6d:46:
17:74:73:07:04:c0:6d:4e:4e:08:f8:92:2b:fe:18:7b:f0:6d:
17:5b:1f:2e:f5:00:3f:0b:da:1e:d4:fd:17:87:b5:99:aa:1d:
ce:35:31:a7:d6:32:d8:ee:62:cb:76:1f:5b:bb:f4:1b:1c:8c:
2e:f7:02:3e:75:23:52:47:50:c1:3d:b0:f8:76:d3:61:4a:bd:
2c:58:9b:3b:32:a0:fc:ab:93:49:8f:22:17:f6:80:41:9f:3b:
bd:64:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:54 2025 by rpki-client