Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
File: YE6Z8sS9AZ63cxUmRSbdauHWK00.mft (raw, json)
Hash identifier: cD9BTfXFNL5BJWHvR8XAuxhQou0BFrqdHOMJoR3t5t4=
Subject key identifier: 0B:BD:0E:47:AD:54:21:8C:98:30:3D:0D:A7:DE:BF:E4:F6:B6:70:21
Authority key identifier: 60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
Certificate issuer: /CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d
Certificate serial: 019A71B83C4C951FBCAB74C9A6ECA1A53C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: 5z3VvkRy-ZxRlwDulpmyqBpJyjo.roa (hash: T1LPS9QQuOzTlUB1i+/0lZXM72ThKtsE6hI3w4YjKAE=)
2: YE6Z8sS9AZ63cxUmRSbdauHWK00.crl (hash: NY+2RNHduRMyCKaYGhGWrHs9oUGZqbG1qYb+ikvlxHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3c:4c:95:1f:bc:ab:74:c9:a6:ec:a1:a5:3c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=0bbd0e47ad54218c98303d0da7debfe4f6b67021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:3b:63:eb:0d:5a:a7:51:15:24:fd:d8:d7:
5c:ac:fd:b8:42:cf:99:88:0a:59:be:0b:e8:d5:55:
74:b8:85:d5:47:d0:02:44:5d:a7:70:a4:0c:9d:b1:
73:4a:97:20:3f:8d:ec:5d:1f:92:5c:7c:92:35:5f:
d3:5c:0d:08:82:3d:00:cc:3e:c0:8e:3d:d4:72:7e:
4e:11:8d:a7:f0:5b:d9:59:0a:fd:a9:5f:51:9d:ee:
eb:fa:cf:d6:bb:ea:45:40:c2:2c:46:73:84:5a:ad:
e3:d5:20:0d:55:cf:2a:f5:0d:72:99:e0:c2:9c:de:
7c:d2:3c:95:d5:ae:41:15:fd:0b:74:fb:d7:db:65:
bd:88:f4:f8:dd:28:ff:d2:e4:7f:4d:60:7b:6a:8b:
f4:39:41:8a:3a:f8:cc:09:45:f3:01:e5:fa:f8:15:
d2:b4:7d:91:48:2c:da:57:60:f8:d7:81:60:9b:a6:
a6:26:bc:42:c3:4c:36:83:77:d2:a0:80:34:2d:a3:
50:ee:a9:0d:fb:b1:33:a9:84:a8:8e:09:4b:9e:cf:
cf:3c:2e:d8:95:2c:2a:a3:f6:64:7d:7e:29:94:20:
b6:62:44:fa:df:ea:97:18:81:a1:88:a2:b2:0e:ae:
1a:07:f8:27:bd:0c:ee:c6:bb:41:af:7f:83:83:2f:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BD:0E:47:AD:54:21:8C:98:30:3D:0D:A7:DE:BF:E4:F6:B6:70:21
X509v3 Authority Key Identifier:
keyid:60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b1:21:d7:37:83:56:c8:87:03:89:d2:a2:48:64:29:86:8c:
02:f6:67:e0:f7:f3:38:92:a2:f6:4c:98:3a:1e:72:26:56:5c:
62:0d:19:71:c5:9b:74:46:42:d7:6d:3b:db:6a:45:cc:17:07:
ba:a1:6b:05:2f:b5:82:ad:b3:06:2c:00:cb:f2:01:d5:a9:2d:
45:21:a2:61:c8:91:14:fb:f6:08:82:25:0d:1a:40:4a:fd:41:
81:5c:53:d1:dd:5e:60:ad:47:e4:15:7e:84:bf:71:e1:7b:df:
42:fc:e4:9b:a7:df:e8:b2:d2:e6:b0:30:bf:9c:e3:28:e7:aa:
3f:0d:a3:fc:33:73:c2:80:2a:0d:a6:87:ce:68:5e:a2:a2:4d:
82:f8:50:ca:f7:3e:88:c0:cb:b6:28:e0:91:51:a4:21:66:43:
06:9c:b6:9b:fb:4d:df:e1:97:08:35:b4:dc:e8:68:b3:fe:1d:
0b:9b:90:51:80:df:3b:4b:1b:c6:ef:af:be:ef:7d:30:83:e8:
c2:97:1b:1d:ca:f9:be:ad:69:34:d5:7c:83:e3:a1:03:cd:c7:
b5:9a:f9:1a:70:d2:9b:72:e4:30:c5:ee:2c:72:55:7c:b6:30:
f3:49:fe:e3:e2:95:9e:15:2a:ca:e6:fa:67:85:76:8c:99:9d:
8a:01:aa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:32 2025 by rpki-client