
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
File: YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft (raw, json)
Hash identifier: N99J6ihhhuXv7Z7tQgeHRE0zOIjrTwnke4h9IyUoGHk=
Subject key identifier: 38:92:9C:5C:DB:C8:E3:D6:28:BC:4D:89:09:C3:1F:E3:E1:3F:BD:8A
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Certificate issuer: /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial: 0199FC590D45CA503F582072D86E9F55A7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
Manifest number: 0C75
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: 4ohGnWINC3iPFe6nDpOqBOx7d2s.roa (hash: 9AbJKb6HLl4DZwmq7R7PVZTsMXxo/QDCXs2EgLL85AU=)
2: YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl (hash: Zu7jI7fUqCVKSBDQygmAzFCJ7oh2LlfRFXYh9GVbnw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0d:45:ca:50:3f:58:20:72:d8:6e:9f:55:a7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=38929c5cdbc8e3d628bc4d8909c31fe3e13fbd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:36:8f:53:0f:d6:79:51:0c:cf:95:6f:b0:
3c:c4:d1:50:34:67:35:f5:36:e7:3a:3d:d6:81:6c:
13:d2:da:b6:f6:d8:d8:56:91:f7:96:58:a1:2a:6a:
66:5b:da:84:02:f4:a4:0b:f2:d1:12:35:9a:3c:3f:
1e:05:97:c9:2b:dd:86:95:60:9d:49:28:fe:03:e0:
ba:e0:e0:76:dc:33:2f:63:2c:22:10:f4:5b:47:84:
7e:4f:75:2e:5e:82:7e:d9:ac:99:86:0b:6b:12:4d:
f2:68:0a:70:a6:6c:2c:ac:72:64:2c:7c:eb:5c:ff:
24:3d:b0:50:1f:48:d5:b9:24:2d:86:97:1b:90:ed:
17:3b:b8:c9:ef:80:4c:3e:c3:57:2c:81:a9:ed:5e:
13:cf:ca:92:0f:ab:d3:0f:f9:49:6a:89:9a:e4:d3:
23:7e:ca:00:59:7c:4c:be:ae:21:7e:00:6f:15:73:
e8:ec:c7:de:12:9c:d9:1d:85:8c:29:7a:d3:36:77:
7d:30:d7:88:f5:1a:0e:30:75:ef:76:d2:14:78:1b:
13:1c:16:a0:fa:44:7b:7b:22:d2:ec:86:5f:d7:9c:
a0:f9:a3:64:fd:21:8b:3e:29:db:a5:66:2a:ac:fa:
74:eb:1f:65:80:c4:dd:dd:03:5a:2c:14:f6:9b:75:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:9C:5C:DB:C8:E3:D6:28:BC:4D:89:09:C3:1F:E3:E1:3F:BD:8A
X509v3 Authority Key Identifier:
keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2c:1e:0c:ae:5e:80:7f:86:8b:69:48:00:eb:2c:79:0a:54:
f5:10:bb:84:ff:c1:87:c7:f6:18:84:94:44:b7:de:c4:04:96:
42:3c:6a:df:f8:11:06:7f:a3:d1:64:ac:f5:2c:e0:8d:46:c1:
52:1f:5e:6b:51:b8:e3:9a:c9:73:c2:09:94:c2:99:37:07:c2:
61:4c:9b:3c:63:07:47:fa:df:b1:b1:95:61:f4:48:76:2f:b7:
f3:41:79:7b:d3:dd:ad:28:f7:e6:2d:a9:23:55:60:0b:6b:90:
b8:e1:c1:34:46:94:72:ed:aa:97:9e:e3:3b:ea:68:58:d8:14:
33:a3:1e:8a:25:b8:68:23:41:0e:6f:12:d3:16:88:ce:d8:33:
d4:70:0f:58:0b:fc:9d:b3:90:ae:ec:15:98:3b:b7:25:69:ed:
a8:04:5b:25:0a:59:a8:b4:f5:61:35:18:bf:f5:41:df:5e:c9:
62:9e:0b:b5:e2:4a:89:37:62:ae:20:9e:02:66:2f:21:38:01:
65:4a:92:3f:e6:f5:84:52:67:1d:b5:ef:8c:d2:00:79:b0:36:
52:a5:ff:d7:9f:d0:41:58:a7:fa:38:d0:b8:74:d8:8f:1c:84:
bc:cf:34:4a:30:18:0c:e3:52:0f:1e:eb:c6:c8:5c:2f:52:62:
15:c0:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:28 2025 by rpki-client