Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: eSb4a6MvXRfOyJlEm7cjDpYG9YKIcMmSKOc/r4kKSsg=
Subject key identifier: FB:B2:8D:B4:0C:59:3F:7A:45:62:94:D9:1E:57:AB:04:C2:B6:94:39
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 0199FBEA7E10C00116DF89D2549409915042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: D7
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: kyT96a3hHaMLt9hCr+lwuaaOy4QoNBBJ/ia5ilUapFQ=)
2: ef5i4gFsUjQtA9jIFWXZmLBsI5w.roa (hash: nHPFZXhPCy6Yr/I1NdWh8sLmeUGTngr7MiMVHJxQNuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7e:10:c0:01:16:df:89:d2:54:94:09:91:50:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=fbb28db40c593f7a456294d91e57ab04c2b69439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:2b:93:72:2c:39:32:fb:38:ae:8f:3b:70:
d1:19:f2:80:b3:19:e5:2c:4d:f0:2f:0c:5e:c7:9e:
12:f5:50:62:8e:2b:dd:91:df:ea:d1:6b:0b:77:64:
c3:48:72:29:a9:a9:1e:0b:82:6c:4e:08:20:c5:60:
e1:7a:72:97:56:f8:3b:bb:e7:95:db:b3:24:c4:03:
1d:04:22:af:6d:67:d7:f8:47:d0:52:95:e1:18:88:
cd:1c:4a:96:53:fa:1b:8e:c6:17:1b:7c:36:e9:30:
b3:17:10:16:ec:5c:3d:93:0a:8d:97:0d:cd:30:b3:
85:e3:2b:dd:12:45:ac:31:30:79:00:99:11:d9:52:
1b:f0:7f:fe:94:c9:7c:32:54:84:20:ad:75:c7:1a:
f0:15:31:e9:e0:bf:08:72:8b:bf:3c:b1:d1:7e:0f:
db:84:cf:ca:95:39:d3:f7:33:87:32:87:00:24:35:
40:1b:8a:ce:60:4b:2e:27:ec:b1:75:4b:5c:7e:12:
fa:cd:99:3a:ac:88:6b:5b:ec:54:ed:f7:02:0b:d3:
d5:fc:56:52:61:5b:9a:28:14:94:36:0e:c6:14:89:
fe:ff:5a:21:b2:d0:9e:a8:6c:6a:6f:d8:46:c1:75:
45:e2:3e:a6:a1:90:25:8e:18:4d:74:d6:d8:21:36:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B2:8D:B4:0C:59:3F:7A:45:62:94:D9:1E:57:AB:04:C2:B6:94:39
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:86:1b:91:47:c5:87:20:0b:bb:49:fc:ac:57:46:0b:ad:aa:
c7:da:83:6a:07:90:29:98:4d:5c:e5:5a:60:13:66:5e:87:af:
ab:cf:2f:e0:f4:01:d9:07:0f:0c:63:b7:62:40:f6:e3:f8:30:
64:a7:52:b9:70:36:a3:ad:22:68:78:45:56:4a:d0:9e:2d:e5:
6b:c4:99:92:32:1e:3e:5d:f3:c2:56:02:e4:da:7c:f9:8f:d6:
44:85:f2:67:74:a4:9e:f6:4b:72:e6:7d:ac:58:3f:2b:d0:05:
a3:cf:db:0d:ec:0a:92:56:59:41:99:bb:ee:11:42:21:14:08:
e1:22:96:0b:a2:7e:00:50:be:d9:84:ea:b7:5b:0e:25:21:f0:
b9:10:a2:ad:37:22:13:46:4b:2e:4a:12:5f:a0:b2:aa:a0:96:
74:50:59:4c:21:a7:5c:ec:fe:63:a1:95:5b:d2:8f:11:ca:9b:
42:47:8e:a8:75:31:d1:08:20:b3:53:e9:88:9f:cc:01:3e:92:
9e:83:7b:3a:f4:c3:29:7f:b0:f3:a4:90:6c:7b:8f:18:2c:7d:
6a:80:aa:de:e9:ca:6a:9f:21:02:ff:f4:67:27:07:97:3f:07:
9b:f1:b2:b6:0c:a7:7f:19:4d:2e:77:6d:e1:26:da:0e:67:e4:
8a:73:54:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:29 2025 by rpki-client