Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File: YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier: 0gx0DuVG6UCtIqyNjjTt1Jk9fiaRCnV2OEf4c1cSj1M=
Subject key identifier: 73:5E:98:4F:64:46:0D:E8:02:02:39:CB:3F:31:0B:87:67:91:96:F1
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 0199FC21B7EF7452BDB39B1FFCC131C2087C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: 7vWonm9bF5IcZc4b_JwarXdqm9s.roa (hash: hJURA5qklA/bOkBC37NwKVvc+QzGI8iekbBVx5yVdVA=)
2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: dYoqVJ5BSda5wtZZB+Ss13vk+fDGAV9Z4DXwtMiu/aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b7:ef:74:52:bd:b3:9b:1f:fc:c1:31:c2:08:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=735e984f64460de8020239cb3f310b87679196f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:ce:fa:32:a2:11:fb:48:1e:92:7f:28:a8:
e7:33:ed:6d:26:11:5a:1f:4e:c0:87:97:52:ee:43:
72:ff:1b:a4:a6:d1:d5:ec:39:cc:27:98:7b:48:a3:
0a:4b:f9:ad:33:e8:84:86:25:b3:cf:d6:6b:a0:fb:
2d:b5:5e:51:3e:64:74:30:d0:90:53:e3:8e:ae:82:
bf:84:13:f2:6e:02:f2:01:c1:8c:8d:b5:fa:54:32:
7b:71:59:37:99:c4:49:8d:0a:1d:b8:cb:eb:d5:69:
67:86:28:14:92:e5:85:08:d2:a2:89:b9:29:e3:f6:
23:a9:2b:9d:af:48:ae:59:9f:fd:03:3a:ee:db:c2:
b2:61:2e:d4:a5:f1:3a:69:f6:d4:ed:9c:a0:2b:60:
d6:f4:fe:8e:9d:cc:9e:14:82:ea:fc:46:b2:b1:41:
b1:07:6b:b4:64:8e:4e:42:a7:b0:0b:fc:34:28:d7:
77:dc:d0:98:59:c4:11:b3:1f:c7:9f:e0:f0:97:35:
1d:00:40:de:b5:8a:15:97:61:24:08:ea:a9:37:9b:
e3:ea:a7:ea:dd:38:3e:21:a1:19:bb:d4:cb:df:91:
65:7d:ef:78:4b:ab:ad:f9:db:98:56:b5:98:7e:de:
cc:c0:9b:ef:18:f7:a0:8c:20:49:1c:3b:be:cb:e9:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5E:98:4F:64:46:0D:E8:02:02:39:CB:3F:31:0B:87:67:91:96:F1
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2e:26:55:d2:c9:45:f8:93:e6:70:d0:43:2a:01:cc:89:85:
ad:da:96:8f:61:77:53:df:04:07:26:6e:f9:39:27:55:5f:81:
85:b9:b3:a8:14:5d:77:67:cc:03:39:60:a7:ec:3c:c7:3f:71:
b2:46:fd:30:51:19:c4:bf:ef:42:60:ce:4d:0d:d5:b7:08:16:
1c:a5:f3:0b:a1:4b:5e:de:f1:77:24:4b:8c:81:4e:aa:75:20:
58:62:7b:2a:d0:70:c3:3e:8b:1d:53:6e:4c:e4:1f:69:cc:c4:
32:b3:99:2e:60:39:2b:27:b7:7b:0f:9f:74:80:99:f8:86:aa:
ca:98:72:c5:b3:dd:50:c4:7d:af:8a:63:a9:6b:eb:ee:15:3f:
6f:bd:6a:94:0d:2b:e9:15:f5:0c:da:e9:9e:03:9b:fc:9b:e2:
6e:4f:f2:61:6c:2e:3d:b9:7e:29:37:4d:7f:8e:3f:6d:5c:5c:
0c:e0:f8:40:b9:fd:c6:16:c4:fb:b9:29:4c:28:e6:46:e7:2d:
d7:68:52:bb:59:0e:30:91:74:42:47:a2:a6:06:31:60:c6:e0:
a9:5a:d8:66:11:ee:fa:b1:0c:cd:b0:79:29:78:dc:01:99:b4:
7f:1d:00:db:b5:a1:3c:14:d6:74:14:0d:7d:0e:c3:58:17:22:
ba:d3:13:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:53 2025 by rpki-client