Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: j8i+YpckGpEsWmJDBdG7id/rv6Cd3+/D0O0z6U18sXc=
Subject key identifier: BF:BF:5D:E2:C8:D6:D1:25:37:01:19:55:AC:3A:21:FF:12:33:59:36
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 019A0035A48C6685F50BED807DFFC69684C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 12AF
Signing time: Mon 20 Oct 2025 06:01:46 +0000
Manifest this update: Mon 20 Oct 2025 06:01:46 +0000
Manifest next update: Tue 21 Oct 2025 06:01:46 +0000
Files and hashes: 1: 63TdjH6W107on2R0OsWADBs0on8.roa (hash: Ncx3bdjsiwwzAHtwjbAlakIAyaghqw6YvVL5UElIrQk=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: 88RZaYERKzAtYzL3YY/jJzsV4plt3dswR48H2hF3qXA=)
3: fWsFtqjlg1LQ_p_q5K_2GnL8QEw.roa (hash: CoDBOpj4/7ndyh9Jvl792nll1Mc+xm7ePsUPRUs36YE=)
4: rJW6voa1Wjy_FJWB-mYHdAKiSVs.roa (hash: vjUPxR8jUNlJ30WRpjQpZExmSVG2787XG5OfBnV64ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:a4:8c:66:85:f5:0b:ed:80:7d:ff:c6:96:84:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Oct 20 06:01:46 2025 GMT
Not After : Oct 21 06:01:46 2025 GMT
Subject: CN=bfbf5de2c8d6d12537011955ac3a21ff12335936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:39:5c:bb:58:d9:01:89:59:5a:f7:91:f0:
29:4f:f9:cf:0f:ea:a6:23:7a:0d:43:2a:0b:c5:84:
21:32:df:34:ff:59:f6:b4:65:1c:ea:69:e2:85:65:
59:2f:e2:2c:e4:b7:ff:b7:19:22:eb:78:5c:9a:4c:
a9:10:3e:a0:03:d5:80:bd:1e:5e:a7:0e:84:4e:25:
d4:cb:ca:9a:e5:6e:e8:5b:7c:7c:dc:e5:38:5c:78:
f5:56:17:d9:91:8c:b0:92:5f:fa:05:a5:09:17:37:
8a:93:ed:17:ba:75:15:29:21:3e:7e:e9:fb:ef:ce:
9d:36:d8:e4:57:5c:08:12:8e:ef:97:19:e9:c8:dc:
3d:1c:87:c1:cb:27:c7:05:dc:b1:46:96:26:40:20:
56:34:be:e6:1f:54:c6:3a:0f:c1:32:06:e6:49:86:
e6:0c:7c:d6:6a:0b:07:ab:6c:2e:a4:9c:be:40:f6:
39:f8:c8:2a:cb:d1:b6:9c:84:20:9e:ff:b8:fb:2d:
73:27:86:4d:dd:2e:3e:02:6f:ff:0e:00:e7:c7:ac:
b8:3b:3d:4b:a1:69:ed:55:72:5c:ea:75:b5:4b:af:
22:81:0a:ba:92:8a:03:3d:1a:b2:89:75:74:5f:1d:
03:bf:d8:29:a7:a6:b1:76:17:dc:f1:8f:e4:a5:b7:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BF:5D:E2:C8:D6:D1:25:37:01:19:55:AC:3A:21:FF:12:33:59:36
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:79:de:25:f7:8c:b5:1c:bc:3f:2d:6e:dc:11:85:22:9b:45:
52:f7:39:76:5b:e6:96:3a:c6:77:be:97:52:35:29:34:4c:b5:
2d:74:55:fa:b5:f4:e1:c7:98:6c:35:05:74:ce:90:53:e0:01:
2f:e6:72:c6:73:ca:5c:4e:f0:f1:40:7e:31:3e:4d:a2:95:d3:
5f:43:19:48:47:19:c4:a1:e2:0a:ac:96:fa:23:d1:6d:25:b8:
c0:ae:7b:0b:ef:a9:d0:45:f0:57:87:71:6c:ea:ac:1c:7d:d8:
b6:8c:96:81:9a:b2:ff:c7:7c:75:5d:01:ae:9c:56:9f:18:21:
3b:42:2b:0e:f1:68:7c:dd:27:4c:48:06:67:45:c6:a3:dc:c0:
fa:1b:8c:29:0d:15:2e:50:11:8c:b5:2f:90:4e:38:25:c2:1f:
30:42:2f:0c:30:69:cb:4f:56:19:aa:d9:78:8a:b6:a4:1b:57:
46:86:5e:40:c8:95:57:54:c7:5d:5c:c8:e0:8c:5f:dd:92:a5:
f7:6f:88:5e:51:9d:08:65:ea:4e:c9:57:32:3b:ad:ad:c3:02:
31:c8:de:e3:4e:11:f6:19:5c:e0:74:65:5a:ff:d3:64:c8:ac:
8e:e4:a2:3e:f9:0a:76:12:78:6e:09:30:45:e1:04:d0:50:4b:
84:ad:0f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:08 2025 by rpki-client