Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File: Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier: Rnnz/vg9QydtGWz5JeULSCEoqPTeVQh8w7RwP8mmyr4=
Subject key identifier: D4:09:0D:72:FC:84:2C:87:71:0D:6F:3D:70:4E:30:96:0E:A2:F7:83
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer: /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial: 019A7225D1DB2A30921F259BA618DBDDF164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number: 1287
Signing time: Tue 11 Nov 2025 09:01:12 +0000
Manifest this update: Tue 11 Nov 2025 09:01:12 +0000
Manifest next update: Wed 12 Nov 2025 09:01:12 +0000
Files and hashes: 1: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: YxZ3kdc58Ko2sa2oew5BtMYsfYTVGjzgoTnwvzQ6kmg=)
2: diGFBknLdwh-HCGfBtKOS8e6uJM.roa (hash: cB3gm8p9TxqmEEhTV6yxgTgaXbm1raO7jRrFe5J7IiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d1:db:2a:30:92:1f:25:9b:a6:18:db:dd:f1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
Validity
Not Before: Nov 11 09:01:12 2025 GMT
Not After : Nov 12 09:01:12 2025 GMT
Subject: CN=d4090d72fc842c87710d6f3d704e30960ea2f783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:c1:34:85:3a:f4:b6:6c:b6:36:3d:2f:0b:
ff:0e:4b:c0:00:b1:f7:69:f4:98:99:37:c3:d8:6d:
c1:ea:41:40:b0:40:7a:ed:18:44:8e:55:fc:4c:d7:
4d:88:83:00:d9:ec:0f:7f:56:13:1b:fb:3b:e7:56:
21:19:11:d5:71:d2:d1:d4:d9:91:53:cd:52:80:5d:
8f:8d:96:aa:f8:ae:2a:f0:02:9f:80:9b:5d:44:1e:
03:45:6e:73:ab:20:aa:a6:65:5a:17:2e:f9:96:9b:
01:e0:92:7a:dd:d0:66:5f:89:20:ee:cf:ce:7b:7c:
de:79:c6:fe:17:3c:ef:b8:79:d5:f1:97:4c:db:4f:
a0:00:03:8c:d0:c5:bc:1c:62:25:d9:08:25:88:dd:
25:1f:65:7d:00:eb:5f:52:0c:94:7b:24:91:e8:57:
77:5b:d5:47:24:3e:b5:5c:ef:5f:89:68:66:8d:20:
83:99:de:48:42:65:64:b0:31:79:8c:a4:86:3a:b5:
c0:88:9c:f2:35:f3:b0:e1:6f:64:9e:38:a4:79:cc:
5f:ac:eb:42:0a:58:53:c6:cf:ed:fb:eb:e4:89:02:
98:18:63:6e:15:32:08:1f:71:ae:fa:f1:12:b0:b5:
c5:86:8a:69:13:0f:4e:9e:b9:bd:ef:e6:af:01:16:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:09:0D:72:FC:84:2C:87:71:0D:6F:3D:70:4E:30:96:0E:A2:F7:83
X509v3 Authority Key Identifier:
keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f7:ba:0a:dd:1d:4d:20:0d:e5:de:ee:ec:d6:2a:67:01:55:
69:98:7f:f3:10:de:df:8b:f2:c7:9f:96:84:b0:6c:e8:22:f7:
f3:7f:94:4e:19:91:f7:af:78:06:f5:7d:a6:47:ab:52:6a:8b:
4f:8f:bb:59:1f:42:ea:d0:90:a1:d6:2f:fe:f3:1e:e9:d8:3b:
02:7b:45:19:38:8c:dd:f3:8b:97:47:80:b9:3f:cb:96:51:86:
93:c0:fb:96:46:01:5d:a8:2c:c2:03:9b:71:23:f5:83:d2:b4:
b0:12:b3:a6:87:7c:09:9f:06:9e:7d:92:5f:4c:9a:af:1c:59:
e4:ca:41:ea:ca:c7:09:7b:dc:6b:2a:99:fe:b3:79:9a:67:5d:
51:63:1f:9b:52:77:79:0f:e3:dc:2e:bd:66:80:3f:9b:72:82:
89:3e:6b:46:c9:d5:b2:87:6e:67:08:8a:13:78:6d:f8:66:5e:
1d:76:b6:60:71:76:8c:b0:6c:77:4b:5b:ca:2a:8e:09:5a:f1:
f7:e2:84:fd:18:a8:7f:09:60:cb:20:a8:6d:11:9e:c0:86:4a:
4d:f4:c9:0c:12:6d:1a:11:24:68:44:da:81:f0:dd:17:af:29:
db:2e:5c:fc:c5:9f:b7:8b:4f:15:94:51:61:3a:14:3c:5f:09:
1f:83:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:09 2025 by rpki-client