Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: sFajfaFDdwqWNz2TcZR54zHS1zyk8jCHkAcM223TZnQ=
Subject key identifier: 5F:4A:0C:02:D7:50:EE:C1:CD:45:24:9D:15:92:57:51:B8:C3:30:A5
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 019A00356060FCE50A5FDDF96A1303954720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 12B7
Signing time: Mon 20 Oct 2025 06:01:29 +0000
Manifest this update: Mon 20 Oct 2025 06:01:29 +0000
Manifest next update: Tue 21 Oct 2025 06:01:29 +0000
Files and hashes: 1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: Jp6BahM+l01d/r8dY8cVQHKHtvFDhbPKqZfsI3nQwtM=)
5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:60:60:fc:e5:0a:5f:dd:f9:6a:13:03:95:47:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Oct 20 06:01:29 2025 GMT
Not After : Oct 21 06:01:29 2025 GMT
Subject: CN=5f4a0c02d750eec1cd45249d15925751b8c330a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:5d:14:da:d0:22:42:80:a4:63:2d:0f:db:
86:9e:ef:5d:6e:8a:ca:25:15:13:bd:58:32:4f:ca:
31:b7:78:70:af:59:d5:44:a8:10:27:18:c5:76:1f:
60:b9:e9:0b:43:45:92:13:a4:be:c2:64:39:96:5c:
c3:e1:cb:df:52:ad:65:63:b7:5a:58:b0:18:92:0f:
0a:4f:77:7b:b9:ec:3a:4a:7a:ec:4b:15:1b:ab:ec:
8a:d3:c8:1b:46:1b:9e:86:f9:c8:15:e7:01:1b:c3:
56:47:5f:54:3a:51:39:53:ef:5f:a8:fb:b8:5d:de:
03:49:8a:b4:7a:dd:e4:a7:d3:e3:13:5f:d4:c7:99:
80:c4:5e:f9:1c:a2:49:f2:af:dd:1b:d6:a5:9b:88:
b4:42:fc:a0:80:ab:c9:ff:8b:fa:1f:7e:d3:d6:0a:
6c:3f:e6:00:ff:78:77:e2:56:34:09:b7:3f:f6:d1:
49:0f:87:ce:d5:1f:1a:4c:07:93:bd:5c:95:e2:bf:
6e:9e:bc:d1:e7:43:7f:c0:a1:8a:f5:da:e5:6c:7d:
6c:66:92:34:83:70:43:72:a6:c7:55:d6:33:95:1b:
42:23:76:ab:f1:ee:f4:68:8d:f7:7a:f7:d3:a1:eb:
7f:94:bc:ce:95:6a:42:d7:5c:75:74:40:ce:55:88:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:0C:02:D7:50:EE:C1:CD:45:24:9D:15:92:57:51:B8:C3:30:A5
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6c:8a:0e:0a:8c:72:dc:77:2c:44:4b:a9:da:25:cf:e4:87:
73:37:bd:d3:81:c1:fb:db:c2:0e:36:7d:d3:14:d6:9d:3c:72:
28:0c:68:02:60:4a:e3:15:2b:05:b2:94:ed:cd:56:35:98:24:
28:18:3f:f2:8a:0b:42:8c:c9:45:b1:98:ec:0b:59:ab:8c:64:
d4:55:6b:1c:7f:1f:06:25:83:6c:c3:20:ae:2e:bc:b6:74:b8:
88:5b:c2:9e:2b:9d:db:48:29:35:1a:d7:84:46:e6:73:2e:4d:
38:0b:49:8b:e6:fb:9b:c3:33:30:c5:d5:e8:a2:ea:13:da:f5:
4f:65:af:c5:3f:0c:aa:93:ee:14:41:ba:fb:8e:19:69:ba:25:
bc:7b:c4:d5:bc:d3:62:4d:22:e2:d6:5c:2d:a1:c9:06:ec:5b:
c1:8d:11:46:fa:c9:85:fc:06:d5:0a:49:24:59:de:fc:de:b6:
0b:12:c0:60:37:28:fc:97:55:88:38:79:be:8d:84:e6:1d:8b:
d9:8e:e2:23:89:5b:77:92:04:15:06:29:fd:f2:f2:b7:20:27:
f4:e5:5b:a2:5a:1f:0a:47:e4:e2:ed:0a:54:74:b6:77:f4:5f:
d7:54:ef:24:60:6b:29:26:21:d4:7d:38:10:68:31:68:92:b5:
6e:0e:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:00 2025 by rpki-client