Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: MZw2SsK/EmdVqxPcXqSkerBxgVgGIZ0dRvdd9572yr0=
Subject key identifier: 99:93:20:12:BE:76:94:9B:B1:28:09:54:61:12:EE:6C:6F:88:B9:84
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 0199FEEB9FC1A39008C1FA5858360C5D593A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 00:01:18 +0000
Manifest this update: Mon 20 Oct 2025 00:01:18 +0000
Manifest next update: Tue 21 Oct 2025 00:01:18 +0000
Files and hashes: 1: TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa (hash: zRKBbHZChcvp4qDJB7Pkx8ohWvBK1TWvnJD0kE9wiHc=)
2: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: QU3kovs0LxKSlTxyQcFoBdDY/EE4WGV1K6bE8M7WUXc=)
3: hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa (hash: NbIM1acTbudT3ToneHmDuzQP2dnfQF8A/BNgiqfCI44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:9f:c1:a3:90:08:c1:fa:58:58:36:0c:5d:59:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Oct 20 00:01:18 2025 GMT
Not After : Oct 21 00:01:18 2025 GMT
Subject: CN=99932012be76949bb12809546112ee6c6f88b984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:30:8c:bf:aa:3e:df:75:2c:3d:51:db:18:
67:e7:70:a6:43:ad:d2:fd:cd:15:f7:95:59:bf:f9:
35:77:91:56:3c:e2:a0:31:66:35:a7:c2:af:b2:24:
10:3e:ed:bf:06:9e:c2:59:29:db:b7:38:dc:cd:de:
ef:72:7f:e8:47:0b:01:97:7a:4b:1c:78:a0:91:f7:
e7:47:ef:bd:d3:6a:ab:9b:c6:5d:d4:ff:a1:c3:f4:
35:87:16:03:2c:ab:57:9f:b5:de:1e:ca:49:a5:45:
5c:a0:b1:d2:ec:13:d6:af:a5:e4:f0:64:d6:0d:a2:
d2:2c:cc:b1:7b:93:f9:2f:1e:72:24:20:a4:ca:19:
56:d4:e2:99:22:5c:a8:d4:30:86:f4:da:99:81:c2:
aa:57:49:b4:c4:1c:5a:d0:47:a3:a5:b8:86:2f:0c:
82:bd:4d:36:19:72:8e:d5:03:0e:bc:49:59:3a:92:
d9:8a:59:ac:26:81:fd:e3:4a:c8:fb:f6:75:bd:a9:
68:39:94:00:d2:ec:78:81:d6:2c:bc:fa:8f:70:b6:
b8:50:17:09:bc:0d:98:9f:3a:37:76:59:dc:c9:df:
41:ab:b6:de:50:08:63:7b:3f:14:90:3a:d7:a8:50:
89:27:ae:d6:8d:c6:eb:4b:bb:b3:59:a3:98:08:75:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:20:12:BE:76:94:9B:B1:28:09:54:61:12:EE:6C:6F:88:B9:84
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e0:9b:e6:0b:49:e9:fd:5d:f3:83:89:1d:55:20:a0:5c:e2:
63:83:97:d3:4e:6b:7c:f2:30:fa:43:63:27:30:26:c2:e5:9e:
a1:cb:69:21:43:45:bc:22:8b:63:c1:d6:46:61:60:ac:68:a1:
de:17:b0:d1:1d:2d:d6:56:c3:72:4d:c2:75:89:31:c9:b5:08:
db:19:35:fb:8f:ea:b7:48:da:35:ec:d5:2e:d2:88:a6:38:dc:
e2:71:e9:75:4a:37:c4:3f:a4:76:e2:15:bb:df:e8:3c:a4:1a:
49:c2:08:90:f5:7a:80:ed:d8:dd:d8:dd:34:24:0d:d0:d7:c1:
dd:4b:55:78:05:00:de:29:70:34:92:49:1f:56:cb:6b:ff:de:
03:b2:2e:59:e7:de:d1:49:bc:45:bb:e5:4f:10:31:1f:7a:69:
9f:ee:16:16:fb:39:2d:dd:9c:cf:b2:c1:bb:7a:88:ca:3c:9b:
55:4f:0a:5a:93:5c:9e:8c:91:fa:9c:c2:a4:52:c0:a0:40:73:
53:42:41:a7:b8:8d:59:c6:85:72:c6:02:89:91:6f:1d:cf:fb:
72:08:0d:5c:09:a7:64:b2:fc:37:a6:05:7e:79:9d:95:f4:e6:
3d:d5:f7:91:94:69:9f:4a:3a:19:54:88:99:c8:ad:fa:d0:dd:
8a:7a:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:54:29 2025 by rpki-client