Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier: d8S3afCA27idm0b0ubd9NftuPfWVBoSLXp0uM9PlPyE=
Subject key identifier: BB:24:DC:FF:5C:F1:5F:20:F9:09:D0:64:BF:B8:B9:E2:E3:AC:47:85
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 0199FCC6A471C192851B1AA6334D91051899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number: 08C4
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: 1-dSr_bwrsUwvfc9qQEvsXILMv3w.roa (hash: SF5ovM+mleomLfSZp/NHDAE5s82AVbxDbWTJFXrQrE0=)
2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: tcQNsRg9a38eDWBpuVgbMJQ0psb4YqLs+clF6ZrTD+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a4:71:c1:92:85:1b:1a:a6:33:4d:91:05:18:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=bb24dcff5cf15f20f909d064bfb8b9e2e3ac4785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9b:68:4f:71:b1:7a:86:b0:0a:75:a4:9a:24:
cd:c5:5e:03:ff:15:d6:f1:10:25:84:82:29:db:52:
11:b7:33:cd:49:7d:c1:65:9a:b4:94:89:5b:7f:e4:
1c:79:64:78:8b:46:65:02:55:08:fd:a4:e5:2e:ea:
56:40:a0:60:55:fe:76:a9:f0:67:1e:82:ef:3b:6d:
f7:6b:52:0d:e3:8c:19:88:cf:70:6e:b4:f1:71:a4:
e8:10:87:c7:bb:57:0c:1d:53:18:4d:c2:2d:cc:39:
54:a3:ae:ab:16:5d:d9:b9:42:74:ee:ca:dd:ba:4d:
4d:c0:65:2a:f5:79:e3:62:72:9b:a6:8a:5f:0b:19:
02:fd:fe:5d:82:92:b9:6f:ed:74:1f:b4:32:c6:43:
60:1c:1a:12:38:9b:be:fa:5a:fa:a8:8a:a7:06:7b:
6a:4d:b3:92:be:8b:ce:06:06:98:d9:13:5b:fb:5d:
b7:8f:dd:25:af:fe:c7:3f:70:55:51:bb:f5:54:cd:
4b:43:b3:3a:5f:13:43:7a:3a:4d:22:4d:c3:f6:ff:
41:ea:f0:44:5d:a3:c5:b6:5d:d3:a0:3f:bb:a4:ca:
ac:32:32:68:fa:e8:7c:bc:c6:c1:46:0d:82:2c:d6:
c8:9a:e2:35:fa:eb:a0:e5:7b:ad:96:75:58:5c:73:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:24:DC:FF:5C:F1:5F:20:F9:09:D0:64:BF:B8:B9:E2:E3:AC:47:85
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:75:77:c7:e8:64:8d:54:e6:3e:df:b5:f7:10:e4:03:01:4d:
b9:61:a9:48:e3:dc:db:29:3a:84:9e:e6:f9:ae:b7:a8:0f:a1:
2b:21:38:cf:9d:19:8a:d9:7b:7b:64:a0:16:b9:0f:e3:0c:27:
81:a5:99:dc:b0:b5:37:a0:99:e3:97:4f:06:af:97:51:88:e9:
f6:75:3c:71:02:c1:14:6a:e7:02:5a:4a:79:b2:70:65:09:61:
97:12:04:0f:56:81:01:57:64:9f:2f:58:90:91:79:f7:a7:f9:
26:47:96:87:6a:c2:cd:58:34:61:a6:55:d8:4f:06:1e:34:64:
3f:4a:57:a0:70:f5:c4:4a:96:c9:f9:b1:31:6c:be:17:fd:8a:
75:14:e7:af:77:aa:c6:62:3c:29:fe:e6:f7:1e:f8:32:21:be:
48:c5:d5:d3:c1:35:ea:d4:15:59:89:c3:c8:37:85:2e:0d:79:
98:a9:4a:a6:2d:ce:15:7f:35:3f:7a:b1:da:44:13:a0:df:f8:
d5:b3:da:27:35:c6:b7:cb:b0:4d:9e:5c:d8:9b:33:a3:51:1c:
c9:43:ef:bf:95:a7:c6:cd:e0:76:b6:de:4a:f7:2f:dc:83:ef:
57:f2:84:ee:d5:1e:40:ee:3a:23:ae:55:55:13:28:b6:6c:cf:
4f:0d:18:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:34 2025 by rpki-client