Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
File: Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft (raw, json)
Hash identifier: CLJoCgaNTR1IkoCB8pNQ53opORr+GO74IC/jztlXuJ8=
Subject key identifier: 50:9B:51:C2:DE:10:8A:09:21:28:97:F1:C1:99:5C:55:B0:38:10:EB
Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
Certificate issuer: /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Certificate serial: 019A7149EA4E9468B8FFC180D611506DF949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
Manifest number: 0EEC
Signing time: Tue 11 Nov 2025 05:01:00 +0000
Manifest this update: Tue 11 Nov 2025 05:01:00 +0000
Manifest next update: Wed 12 Nov 2025 05:01:00 +0000
Files and hashes: 1: GymugnGNz9hZBNfCgZiljFXWNI4.roa (hash: UzztjdFS5VrTYMjssd7r9V+uU0SvLYHrn/O32cjxd5g=)
2: Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl (hash: lHTpWZkWwK1xWVt3c/xdOMZ/bfa27wmHXlPeQlh+DwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ea:4e:94:68:b8:ff:c1:80:d6:11:50:6d:f9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Validity
Not Before: Nov 11 05:01:00 2025 GMT
Not After : Nov 12 05:01:00 2025 GMT
Subject: CN=509b51c2de108a09212897f1c1995c55b03810eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:d7:6c:cc:23:a1:1b:d3:d4:d0:9d:f2:1c:
d0:44:62:1a:83:25:ba:db:3e:2e:79:c4:d7:1d:6c:
90:6f:ce:d6:72:81:ca:fa:72:cd:7f:1f:f1:36:9a:
f7:38:95:fc:38:d9:f6:50:b1:1a:b5:ee:0f:8a:1e:
97:dd:9e:48:40:82:f6:91:21:6c:d7:96:a5:97:68:
73:23:7c:67:a5:84:13:2e:e0:3f:0e:e2:20:be:27:
20:d6:b3:30:22:9f:22:80:5f:a2:d4:e2:e5:44:a6:
7a:09:24:22:20:f0:b5:cb:ef:05:36:ad:e1:7c:ea:
63:d7:12:cf:33:73:f0:cf:b3:34:0a:b4:03:50:a3:
2e:0f:af:5e:0f:4a:4f:95:ce:18:ab:bc:d7:b4:37:
06:d4:b4:d7:a3:33:06:69:5f:e6:3f:5a:35:3e:fd:
ee:89:06:79:c0:2d:76:28:ae:0e:94:0e:55:57:54:
46:5d:6f:72:20:2b:46:84:00:6a:c6:b1:15:d9:71:
ad:73:a8:dc:74:89:df:e8:16:0b:7f:72:bf:12:fa:
dc:4b:94:5a:b0:29:30:d1:ca:38:8b:d4:47:52:a9:
52:02:28:e4:22:97:df:64:5f:d3:53:14:99:12:29:
86:76:b1:e0:2d:fa:a8:de:3e:6e:7b:b2:43:71:35:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9B:51:C2:DE:10:8A:09:21:28:97:F1:C1:99:5C:55:B0:38:10:EB
X509v3 Authority Key Identifier:
keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e5:e7:81:59:71:43:da:21:3d:a6:92:56:5c:3b:e0:6b:79:
0e:d4:ea:8f:c7:4a:06:82:10:e9:43:a6:c2:ba:b8:9a:bc:98:
8c:e8:8e:14:c8:d6:83:9a:9e:cf:bb:76:0d:53:37:06:a8:fa:
b6:59:1c:de:11:46:a9:01:ec:56:34:d8:45:ae:6c:58:fd:2a:
43:ed:01:a6:5e:93:03:9b:c1:a5:dc:56:27:bc:03:ff:f7:67:
b1:78:7e:9f:b0:e1:c0:97:b4:96:d7:36:d4:8b:91:65:f2:eb:
cd:05:2a:b6:1e:ad:48:7d:fd:a0:46:6c:05:15:f9:64:52:36:
8d:d0:0d:43:13:4d:a9:cc:4b:8a:37:61:c0:67:1a:45:4e:0f:
13:9b:f4:63:e0:76:7c:12:dc:9b:48:fb:53:1c:a2:6c:2c:bf:
06:10:7b:33:5c:d0:46:37:06:1e:a1:24:58:7c:cb:55:6f:cd:
d4:4d:ba:20:4d:c4:04:3a:1e:b4:f8:de:f1:aa:b0:3b:e4:72:
9e:67:5b:e1:be:ba:8b:de:04:bd:49:59:16:34:eb:c9:73:c5:
c9:00:58:b0:f8:bc:0c:e6:40:e2:6d:99:60:04:8d:e1:89:1a:
a1:9d:05:ad:de:0c:59:ae:d0:f2:22:3a:e5:b5:a8:16:54:af:
25:6d:d1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:04 2025 by rpki-client