Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json)
Hash identifier: bGQBcMiZtK0W3jhDyI1AORuWNO5ZKp1uAqbHOu6vs2U=
Subject key identifier: BA:04:14:98:1A:1F:84:AA:EE:1A:DF:FC:1E:4D:D1:60:DF:1E:30:21
Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858
Certificate serial: 019A7225C35F73EFAA53587A535E1C581CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
Manifest number: 030A
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: l90TdRWQrQCIDDX6wDd7rndgVZYmAZKP8jfSmuNVvwU=)
2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c3:5f:73:ef:aa:53:58:7a:53:5e:1c:58:1c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=ba0414981a1f84aaee1adffc1e4dd160df1e3021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:12:a0:e2:99:16:cf:85:f6:16:62:50:f3:
fe:95:82:76:b1:ec:1d:77:4e:48:4d:a6:2a:de:95:
bc:e3:18:4e:99:ca:5d:3d:f2:23:c8:57:1e:e4:a9:
a2:b3:84:be:3a:0d:3c:47:91:cb:2d:68:76:df:73:
cd:8b:c2:9a:f0:75:f3:b3:35:b8:56:19:9e:08:70:
53:54:67:73:77:25:c3:47:c7:c7:2e:61:70:97:b0:
10:15:2d:77:72:4f:10:63:16:0d:0c:18:75:9d:86:
20:86:1b:3c:25:3f:87:b2:b5:d3:4e:48:c8:cd:7d:
a5:3d:ba:c0:06:27:df:f5:3b:b2:3e:48:03:5a:df:
39:ee:7a:d3:6c:bd:62:2e:5b:db:83:3b:47:30:6f:
25:b4:31:26:b2:92:7a:1a:fc:7d:0f:b1:85:3c:22:
6d:92:79:4d:d5:19:76:6f:36:a8:a5:03:33:6b:64:
0c:c1:c6:2f:3f:39:8e:5d:30:f6:9e:1e:23:6c:e3:
d7:02:13:4a:44:82:4b:14:52:2e:eb:58:ef:39:45:
75:43:05:4f:15:2d:01:c6:43:95:91:b6:c7:e1:f1:
05:35:b6:5a:68:4d:fc:51:9e:e5:70:7b:97:86:85:
3e:3d:a3:0d:4f:3a:06:c5:a9:48:c6:e8:eb:79:3a:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:04:14:98:1A:1F:84:AA:EE:1A:DF:FC:1E:4D:D1:60:DF:1E:30:21
X509v3 Authority Key Identifier:
keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a1:83:5b:d8:18:45:95:67:20:96:47:c4:12:01:49:e1:16:
9a:81:ac:f6:96:ad:8f:fc:77:68:0c:65:c0:1f:00:1e:32:c4:
a9:a0:5e:55:41:be:9b:74:4d:89:26:3e:85:f7:7d:0a:be:da:
f9:2c:f5:2a:0c:bd:eb:5b:93:33:4a:fb:50:35:06:6d:74:6d:
29:1e:85:a2:d3:f0:36:40:49:61:5a:10:3c:f5:e4:bd:d3:cd:
04:3d:e3:e9:cd:fd:5a:f8:9c:93:c5:18:54:f3:10:d7:e4:a3:
36:05:f5:bf:a1:56:71:45:1a:8e:be:68:f6:39:35:fc:e9:cb:
a1:c0:c9:07:88:44:a2:ae:5d:3b:ea:e5:6f:9e:70:b8:17:cf:
1d:ce:2f:ca:58:27:6b:ea:d7:dc:a2:80:53:05:45:93:0f:52:
bc:30:94:a8:dd:00:30:e6:d1:fe:11:da:eb:eb:ca:ba:92:91:
59:4c:0a:df:3c:7f:f0:2f:80:b2:9e:82:d1:29:b7:72:3b:f7:
22:be:63:42:50:ab:de:4c:38:17:46:87:45:a8:f3:3b:2f:4d:
4b:29:f3:a4:ad:f5:4e:c5:52:67:3b:9a:34:a7:6f:9e:f7:f1:
18:16:3e:74:d1:55:09:3d:92:20:71:bc:a4:0f:af:28:86:5c:
02:45:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:15 2025 by rpki-client