Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
File: YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json)
Hash identifier: fIGBVVxOsoOQiv6wENj2KO9Zw6MPMM7QMVUjonZfUuY=
Subject key identifier: 46:58:28:B2:A7:A6:20:D5:AB:6A:64:55:09:5E:97:8E:E1:4A:97:B3
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Certificate issuer: /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial: 0199FCFD306C9354D863C0DBDC7DDB461DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
Manifest number: 068D
Signing time: Sun 19 Oct 2025 15:01:15 +0000
Manifest this update: Sun 19 Oct 2025 15:01:15 +0000
Manifest next update: Mon 20 Oct 2025 15:01:15 +0000
Files and hashes: 1: 86GrooClUl71gkQpid-FncZdZKU.roa (hash: zCT8Hn2EfMRZJ+CRruBga86mHz3WUzz8AipAIgNPJEo=)
2: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: gnRz7T+IzcjRqHaQSP5UbfoaOGGqlvJLmsq8o16uTNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:30:6c:93:54:d8:63:c0:db:dc:7d:db:46:1d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
Validity
Not Before: Oct 19 15:01:15 2025 GMT
Not After : Oct 20 15:01:15 2025 GMT
Subject: CN=465828b2a7a620d5ab6a6455095e978ee14a97b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:c9:b2:5c:f2:c3:a5:1c:a8:b1:94:ae:4b:
e3:bc:6c:94:4d:9d:36:ad:d6:46:79:08:53:98:c0:
6e:62:b5:79:62:7b:39:25:e2:0b:da:f0:40:2f:17:
ec:33:8b:80:f5:40:04:ee:c0:24:40:c7:6e:4d:36:
0d:10:b5:84:5c:da:f2:bb:ec:35:c8:7c:fc:64:bc:
00:64:d8:38:4e:e4:47:25:45:7b:cc:35:5b:ab:e8:
0f:ac:48:48:b5:41:c7:85:05:e5:65:d1:fb:68:8b:
e2:a6:28:cd:ed:56:f3:c7:4d:1c:75:a4:19:6e:7c:
d5:d7:ff:e6:e6:ef:1b:a0:7c:b6:2f:ba:db:b4:17:
7f:11:2f:a7:c5:af:5d:40:85:2e:37:08:f3:ed:ec:
4c:01:8f:41:8e:4a:23:15:cd:23:f8:67:61:57:1b:
8d:95:d3:6f:b1:7a:aa:7b:14:a8:0c:46:be:41:b0:
08:43:25:24:95:83:c2:fd:7f:87:55:ee:4b:a4:1b:
a8:5d:46:ad:2d:70:64:85:03:e1:f4:5d:e1:f4:ca:
19:1d:85:d1:c5:47:10:a0:c2:68:14:41:4c:52:18:
9f:c6:9c:ee:c3:f3:53:56:8f:44:b7:38:d0:fb:f5:
f1:84:63:80:dc:72:dd:7f:6b:6f:b6:2d:8a:86:da:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:58:28:B2:A7:A6:20:D5:AB:6A:64:55:09:5E:97:8E:E1:4A:97:B3
X509v3 Authority Key Identifier:
keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:51:e5:bc:04:54:76:4b:44:19:6e:36:33:8d:db:28:24:ec:
99:cc:1a:96:7f:ec:5d:d7:94:23:65:3b:ba:30:d6:e6:9f:df:
92:83:93:6a:79:f3:42:32:56:8d:95:ca:e2:f0:1e:db:58:e6:
2c:4b:95:c6:4e:f7:05:0f:1a:f0:ab:dd:46:4b:f6:4f:cf:b2:
de:20:43:bb:df:e1:d1:e5:5c:99:f5:22:cb:b5:47:32:e2:4e:
ab:24:de:e8:33:61:54:13:73:5c:c8:26:0f:6e:ab:bd:1b:0c:
45:d3:f1:20:b8:ea:5b:8a:19:9d:c3:a8:3c:48:0e:76:92:79:
5c:e0:cc:fb:60:5a:a8:da:18:43:98:8c:5f:ba:d7:81:07:1c:
25:c1:8a:4d:5e:53:7d:e1:92:fc:72:c6:75:66:c1:3b:00:9b:
00:cc:44:0e:29:fb:c4:06:bb:fa:81:1c:3c:86:3f:d8:0d:f9:
a1:06:c9:5e:8c:55:54:0e:23:99:19:64:2a:26:ae:ee:77:ff:
0f:e2:bb:06:f8:b2:2c:68:69:78:64:a8:24:fe:12:4f:bf:33:
d6:4d:41:08:db:4c:d3:0f:d9:09:b4:cc:56:59:7a:7a:cf:e2:
8e:4c:d3:8b:97:d5:c1:64:1b:20:26:48:de:68:2e:62:f2:7a:
d5:3c:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:04 2025 by rpki-client