Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
File: YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft (raw, json)
Hash identifier: YUij5G8zygeIKWyeoqs5fu42Qs+k9TI/ZAoZeEkXot4=
Subject key identifier: 11:B1:F2:DE:CC:E8:CF:31:2E:FD:86:2D:A2:A7:EF:9F:F6:9B:95:25
Authority key identifier: 60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
Certificate issuer: /CN=6034561c039ac6450bec8fd595c148cc770aa036
Certificate serial: 0199FB7CC2FE48118A28CD37712936EFC5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
Manifest number: 03C0
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: 7xDyuzwf2JBogicNs1WCGieFUKo.roa (hash: KauAldM8NLiLBGjbpKvhWpk4brd0+mLiraKkETNshfA=)
2: YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl (hash: NkxpzwDwEyJIPgwi6oAldcwtLaafi1ze1eBchfl5hA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c2:fe:48:11:8a:28:cd:37:71:29:36:ef:c5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6034561c039ac6450bec8fd595c148cc770aa036
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=11b1f2decce8cf312efd862da2a7ef9ff69b9525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:03:ae:b3:69:59:fd:bb:29:2d:34:05:79:
ec:8b:93:d4:f2:95:53:eb:bd:4b:38:47:3d:7f:35:
72:a0:9b:2e:7f:aa:d3:58:da:5e:53:46:36:26:f7:
0e:3d:a3:60:30:2d:b2:dd:87:0f:c2:75:7d:dc:5d:
06:fa:4d:6c:ac:b5:2d:d1:e4:b3:6b:e2:b9:ac:d4:
7b:5e:e1:8e:63:80:ac:86:da:93:b4:1b:2b:fb:b5:
c8:0f:93:e7:a7:b3:f1:6e:47:9b:ea:22:43:d0:4f:
5b:e7:4e:f5:4d:22:59:eb:6f:29:9a:f8:c2:b0:1e:
d7:2b:f2:d1:95:f8:27:33:7e:85:3c:c0:97:bf:b1:
6f:84:dc:23:77:a1:02:28:50:4d:f8:79:97:ee:d0:
1d:7b:dc:e9:72:f4:1e:d2:aa:33:0f:ba:b9:47:6e:
2a:a7:53:83:a7:33:00:4e:1c:77:b7:d4:5c:0e:b8:
36:16:ba:0a:58:45:53:a0:e3:45:e1:05:ca:ce:22:
85:c4:85:bd:47:93:ae:37:30:38:37:07:8a:5a:fc:
82:1a:b2:e5:af:29:2f:8a:92:32:58:3b:6f:22:98:
6e:e8:4f:6b:cc:d2:52:f5:8b:fd:61:8c:78:ad:c7:
ed:a7:ed:e6:90:02:86:01:01:d5:c9:cf:13:98:ee:
d1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B1:F2:DE:CC:E8:CF:31:2E:FD:86:2D:A2:A7:EF:9F:F6:9B:95:25
X509v3 Authority Key Identifier:
keyid:60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cc:6c:bc:8f:3d:0d:d5:c6:94:87:9f:d0:d9:52:2e:b7:5b:
65:47:85:57:9f:df:b7:33:f5:37:86:60:53:aa:1c:33:de:38:
70:19:c8:ea:f9:4c:da:0f:f3:33:2b:2b:6c:64:ee:1c:04:f7:
5b:49:83:c8:1e:0a:30:ff:e6:2f:88:8c:a6:17:83:95:a0:19:
db:83:c3:83:c4:de:a4:ee:88:a4:69:6b:fc:d3:c0:2a:96:9d:
f5:b1:76:bb:85:a2:c7:6a:eb:de:0a:a3:0f:e5:fa:cd:6b:9a:
de:a4:8a:e8:83:a8:b5:07:62:26:66:6c:33:18:8c:8e:b5:47:
1a:6f:ca:ef:94:af:84:dd:83:be:0b:07:16:a1:e2:88:ac:a6:
25:af:f7:ba:05:d0:ac:80:f2:2d:2e:27:36:42:6b:31:fb:e4:
c1:4f:37:d0:9c:06:f0:6c:07:94:bd:91:ed:d0:8e:91:11:31:
7d:e0:5f:bd:bf:11:05:21:b4:60:ec:f9:87:fc:dd:98:02:3c:
5b:33:56:6a:c5:f7:7e:af:b8:5f:e8:35:4c:cc:38:9b:7a:57:
b5:0e:02:2e:16:8e:3c:5c:66:c6:44:34:56:c3:a5:e5:92:3b:
3b:0a:eb:85:5d:d1:c8:bd:70:80:77:00:6b:e3:95:ac:9f:0c:
76:8b:06:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:09 2025 by rpki-client