Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier: nphRAHoHKn75mqPHWI5GDgPoV6mvgsQBnli+OgR1Uys=
Subject key identifier: B3:C7:7B:1A:B4:70:B5:FA:F6:73:F4:19:73:99:7D:D3:CF:02:E3:BE
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 0199FC58975105D96A000D15F06181634CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number: 0AA8
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: GvnG-mS30kZsC0VMkjG-9H9bKNc.roa (hash: fCMqeP5mwLekpgJxD7sr/iDT7Y2EP3bkaxbq5G7CFnk=)
2: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (hash: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=)
3: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: MUkjk4xbrd9GCVZTZjvs/7D4mUecxjDjwiDVk1MOpxk=)
4: rDRUKkzZmI7yjCKpqiCtK-fUy7Q.roa (hash: uAeF6E4mouy6Lmf4flTkP1sxauS/RBJXZig4r2f6XkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:97:51:05:d9:6a:00:0d:15:f0:61:81:63:4c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=b3c77b1ab470b5faf673f41973997dd3cf02e3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:7d:a9:9c:67:e1:7e:ae:df:49:6a:42:66:
10:b7:ed:aa:82:68:cc:e6:9f:08:b7:0c:0c:d4:28:
07:ed:ec:74:29:71:49:f8:3e:a2:c2:e7:29:8b:65:
01:ae:df:63:c4:01:aa:e7:79:e3:aa:84:28:af:ab:
44:57:fd:66:77:85:81:3f:8f:f5:f4:e3:02:9b:52:
be:3e:a1:10:fc:a3:9c:2d:83:78:6d:41:71:12:61:
06:04:db:bb:35:24:ea:95:f0:4e:27:2f:b7:c1:1d:
de:68:04:52:c9:e0:a6:a5:5c:b1:27:9b:69:9c:cc:
a4:62:c8:ea:49:0b:6a:0e:bf:82:ad:fc:4b:a5:02:
e8:3c:db:ac:04:2e:05:8c:88:bb:f7:f6:5f:b7:fd:
47:b3:bf:55:b9:35:7e:7f:58:68:1d:3b:d5:ea:d1:
8e:12:70:51:98:1c:7e:39:23:4a:ae:f2:2f:69:b1:
12:b6:87:1b:bc:99:07:6b:af:08:22:17:8a:fb:e0:
f6:78:15:c6:fb:7b:27:4f:ef:05:69:ff:85:23:9e:
87:84:44:e7:ae:0a:82:ed:1c:2a:7f:69:c0:73:1a:
7b:8b:11:35:82:ed:1d:4d:03:37:5d:1f:1b:80:54:
71:4c:52:ac:ba:a9:f1:e8:9e:98:b2:01:d0:2b:08:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:7B:1A:B4:70:B5:FA:F6:73:F4:19:73:99:7D:D3:CF:02:E3:BE
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8f:ef:f5:f8:60:82:48:7a:e6:1e:12:fd:a4:54:32:05:6d:
2b:99:2a:b1:36:bc:18:0c:be:bd:79:63:60:44:be:3e:08:0a:
a0:56:f9:b7:6b:7e:06:68:65:7a:24:42:59:79:70:2e:6a:c5:
f7:64:a9:a6:46:56:0d:43:22:4e:46:42:44:ac:67:bf:5f:ef:
82:5c:3c:51:0a:23:66:01:ae:94:ff:8b:79:f2:d4:f0:f5:00:
dc:d0:8d:29:cf:9b:54:2a:ff:b1:e0:fb:19:54:9c:ab:c9:d3:
31:30:7d:8e:93:15:93:b3:e5:e8:e3:03:b9:b5:cd:68:9f:42:
cc:ec:e2:81:e4:7c:07:ef:c5:23:47:c9:32:57:79:23:f5:52:
2b:84:fb:f2:59:ea:0c:a0:6b:bb:da:ab:9f:ed:7a:d6:32:37:
6c:59:60:5a:36:ef:e9:91:c5:e3:c8:ba:4b:51:78:01:15:ce:
9e:4e:30:9e:b6:0e:e4:06:ec:6d:88:8c:ee:3b:a1:bf:9d:b0:
4a:f2:a0:f5:b9:54:f3:f6:df:ce:d6:40:51:d2:22:b6:0a:37:
35:47:33:cd:a5:71:e8:f4:e6:ed:a7:d5:9f:5c:00:54:5c:aa:
3e:e5:35:9f:a7:99:4c:90:75:3d:82:5b:d2:6e:b5:c5:3f:53:
01:3b:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:55 2025 by rpki-client