Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: 9CCLq1oYt/huRDLI02BNxqh601n5QUpO6J7nWdlvhrc=
Subject key identifier: 07:B4:E0:7D:7A:CD:13:85:42:C9:42:35:33:2F:F5:F8:5E:F6:D4:39
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 0199FDD9593A3A8C3D796551B3F8D1C76D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0B6E
Signing time: Sun 19 Oct 2025 19:01:43 +0000
Manifest this update: Sun 19 Oct 2025 19:01:43 +0000
Manifest next update: Mon 20 Oct 2025 19:01:43 +0000
Files and hashes: 1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=)
2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: ABcvnsw3mF02TWy9NWp/E9ohHVhuKUgD/rkgrL9DGFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:59:3a:3a:8c:3d:79:65:51:b3:f8:d1:c7:6d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Oct 19 19:01:43 2025 GMT
Not After : Oct 20 19:01:43 2025 GMT
Subject: CN=07b4e07d7acd138542c94235332ff5f85ef6d439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:89:80:c9:ce:85:51:ee:da:3f:37:fe:37:
98:17:75:3b:86:00:4a:97:c0:85:33:79:9c:ce:10:
ac:2f:13:89:45:8e:dd:a3:0a:6c:6b:9d:d7:dd:f4:
a7:a8:53:b2:88:3b:82:5e:45:1a:19:7d:a4:4b:7d:
54:79:c3:26:d0:fd:35:4e:ca:33:a4:51:ed:bf:74:
ab:f4:90:b5:37:e1:80:61:1c:51:46:bf:63:ba:01:
14:f1:2e:2f:03:26:b8:5a:28:82:aa:04:7a:09:fc:
bf:37:f3:20:0d:5e:ae:e0:9a:88:e1:35:69:e3:88:
d6:14:65:16:7f:7e:13:95:95:c9:19:e9:f6:8a:6b:
b7:6c:a9:b1:2f:8e:a6:63:9b:d2:38:51:a9:69:31:
87:9b:88:57:d3:27:56:da:63:f4:f7:43:73:b6:28:
03:c5:10:86:7f:24:6c:8c:1c:29:2b:34:44:f8:c7:
81:54:3e:56:0d:d0:06:91:10:c8:3a:07:6f:cf:da:
bb:bc:b2:16:d2:ab:ad:cf:43:ae:68:4d:e0:91:7e:
21:09:00:f8:c8:c6:1d:d4:2e:cd:34:de:cc:95:c3:
8e:81:bb:9a:05:00:e9:97:7b:b9:5a:90:07:d3:63:
8f:8b:60:ff:b3:ec:44:25:a9:b8:29:c7:5c:2a:16:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B4:E0:7D:7A:CD:13:85:42:C9:42:35:33:2F:F5:F8:5E:F6:D4:39
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:48:28:13:40:a2:4b:1f:78:f2:b8:6b:b7:10:f6:28:48:74:
e4:38:9e:29:28:32:7b:40:7d:86:ca:f2:65:31:da:8c:21:fb:
31:49:2d:67:6b:89:d3:86:68:94:2b:61:78:e9:79:1c:1c:c0:
13:4c:d9:ed:40:47:13:d3:af:ff:77:c8:1c:83:ff:39:ad:cc:
ce:2e:74:b3:34:59:f6:c8:41:c7:df:ec:2c:11:ea:9a:41:90:
a1:82:da:5e:bb:2d:f3:96:04:08:0b:c7:a1:03:43:30:e5:31:
2e:ff:41:4f:50:9c:b1:15:31:ff:9f:18:6e:bc:81:03:b1:f0:
b0:ea:1f:16:bb:8c:ed:a2:20:ea:aa:7a:6d:56:61:9b:c6:e9:
a9:d8:b8:e6:f5:e6:dd:ac:f2:d0:c4:80:42:a9:bb:31:7b:73:
cc:6d:48:a6:ac:26:84:7c:bc:20:44:fe:1d:28:6c:9c:e7:bd:
87:7f:85:6f:c5:b1:9e:a8:51:0a:d8:f7:92:18:9f:9e:b1:b4:
46:b6:9e:f5:89:e3:e5:0d:bb:05:3f:ac:d7:b5:da:f9:f9:d4:
9c:13:2d:63:84:47:c3:d7:50:b8:6f:e0:17:62:27:d9:00:9d:
45:4b:b4:8c:b5:5b:94:a4:a1:9d:db:3a:04:b4:89:85:c6:28:
f8:08:98:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:59:50 2025 by rpki-client