Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: AnqL9RjUq6uQEnVppI3/o/GDEp7reu1MNCWDbfhWWXs=
Subject key identifier: E0:74:34:1C:FF:94:13:40:08:BD:50:CE:9B:87:38:E7:A2:5C:19:45
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 0199FCC6170523026561CBC0B2061CD87EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 062F
Signing time: Sun 19 Oct 2025 14:01:04 +0000
Manifest this update: Sun 19 Oct 2025 14:01:04 +0000
Manifest next update: Mon 20 Oct 2025 14:01:04 +0000
Files and hashes: 1: Lr4RpZkpLhDPvgOVWwNTnRv7-RQ.roa (hash: naREFgV4DFvngojbRTMd+xpA/XYzbvIGMFtbMUsVjzQ=)
2: S0bRpdJWK72QH0WUGiObKU-szZo.roa (hash: nahgUHhIrdKyE1HO3U29HHKRqVvxXNA6pcRe9FHTMjw=)
3: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: uXGWyM06ZP8kKVjOpopeDcM+4FyB7Av0YPoNS3HBJ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:17:05:23:02:65:61:cb:c0:b2:06:1c:d8:7e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Oct 19 14:01:04 2025 GMT
Not After : Oct 20 14:01:04 2025 GMT
Subject: CN=e074341cff94134008bd50ce9b8738e7a25c1945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:7c:de:92:a8:ae:64:09:e5:80:34:04:4c:
03:9a:06:5e:d4:6f:13:9b:b6:f1:53:aa:02:15:bd:
b9:c0:72:2f:82:32:7b:4a:a5:22:ab:4a:a2:fe:8c:
41:c0:8d:0c:29:dd:8f:8c:ac:7e:56:42:88:b5:9c:
02:fb:83:25:73:43:d8:dd:f5:c5:70:94:df:04:f6:
18:ba:eb:b2:6c:80:f3:54:e6:14:2e:c7:df:7d:76:
61:91:fc:bb:03:26:e8:ff:6a:63:20:82:dc:12:1a:
25:61:e7:8e:2a:5f:c2:fb:6a:33:42:95:cb:1f:69:
48:e9:1c:6e:22:fb:9e:7a:a6:83:34:a9:04:50:c4:
b2:7b:dd:4b:6d:bd:4a:8e:ee:d3:5b:2c:d7:d2:f8:
10:38:42:6a:9d:c5:88:4c:23:0f:36:e0:fb:b8:a1:
f7:fc:1e:9b:48:9b:b6:12:28:ee:a8:62:c1:2c:aa:
6d:04:ff:32:1f:12:50:aa:41:87:d9:6b:f5:f2:c0:
7f:6c:01:e6:25:39:b3:44:0b:14:24:ba:1e:ee:5b:
e0:36:d6:3f:66:05:f1:b1:ed:4f:67:88:72:2a:a0:
0c:cc:46:0e:7b:1e:81:91:d1:ca:7d:75:05:f5:07:
ea:5d:d8:4f:07:5d:3f:cb:39:9f:f6:78:7a:a2:79:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:74:34:1C:FF:94:13:40:08:BD:50:CE:9B:87:38:E7:A2:5C:19:45
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fa:08:23:5e:a6:28:13:1d:11:26:02:6c:0a:c8:08:fd:42:
87:70:41:04:8b:e4:71:fb:32:7a:79:8f:0f:60:df:df:99:4e:
68:76:2a:bf:69:65:b5:aa:e7:3d:4d:fe:2b:f9:81:2f:db:38:
66:7d:d3:cc:89:17:de:90:0b:4c:f7:6d:fb:6f:57:f5:ce:4b:
a7:47:18:06:62:f5:ae:c8:78:93:1e:40:7f:2e:cd:99:5d:4f:
a8:67:a5:92:c9:29:c7:1a:9e:d0:82:32:3f:d2:e3:64:04:23:
a9:d2:91:6b:8a:00:22:f9:8e:1f:ce:75:e4:f9:c0:5d:5d:d3:
27:06:fd:3f:1c:f1:c5:78:de:c2:4d:b6:0d:f8:b6:28:95:83:
8a:7e:21:2b:3b:a3:bb:bc:7c:85:c7:2f:17:30:01:bc:28:aa:
a9:54:0c:8f:cc:13:03:98:ba:fe:bb:29:ec:e2:7b:89:e6:06:
34:f0:dc:4a:4d:bd:ef:3a:65:1c:1e:ac:66:00:40:de:95:32:
ea:f0:be:95:82:81:4a:63:cc:41:df:03:c4:65:f8:3a:8c:16:
c7:66:fb:be:81:cb:dd:dd:9e:42:a9:31:77:fe:9c:27:0e:b9:
c1:b0:18:b3:c3:da:5e:7e:3e:18:61:6c:56:6f:b5:4b:89:bb:
70:10:9a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:33 2025 by rpki-client