Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: autzGEmnoCzYW4NN8q0HQQ/ZcE6YDas5eUBa4Zp7A7A=
Subject key identifier: 25:7F:DB:7B:8F:18:A6:32:0F:D5:A4:31:35:1E:9A:E8:7A:B4:4D:E9
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 0199FB0F1D16E7D019EC64248F7BC79BD53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 1398
Signing time: Sun 19 Oct 2025 06:01:35 +0000
Manifest this update: Sun 19 Oct 2025 06:01:35 +0000
Manifest next update: Mon 20 Oct 2025 06:01:35 +0000
Files and hashes: 1: XuX7uT8cb5cVhdOXna_jZRuc6JE.roa (hash: 6nSukjm2iQoWm9SssGRSJpva0KahTxgtp11M/o63UVs=)
2: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: 4eB7kt+Js+IowMBjMn33f6VQEZ26LqYuprbUv1ddEMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1d:16:e7:d0:19:ec:64:24:8f:7b:c7:9b:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Oct 19 06:01:35 2025 GMT
Not After : Oct 20 06:01:35 2025 GMT
Subject: CN=257fdb7b8f18a6320fd5a431351e9ae87ab44de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:0a:18:d0:13:ec:02:5c:94:d2:87:17:89:
2f:e7:44:74:e5:d7:e3:ad:62:dc:30:f5:0d:17:40:
c0:5d:c0:81:63:dd:88:b2:87:44:74:a6:fe:98:79:
36:39:a4:ac:dd:2e:de:c6:7b:0e:be:c8:10:20:d8:
37:9c:e0:e4:d2:13:fd:39:3e:75:ce:99:ad:78:47:
b2:1e:8e:8c:b9:fb:63:c6:55:7c:09:0a:64:a3:be:
85:a3:12:67:75:d7:93:f2:16:80:a6:42:73:83:c4:
71:d7:67:3c:7a:98:ec:d9:b3:5e:bc:6f:94:75:07:
1c:16:d3:c8:67:c1:18:cc:0e:a7:dc:83:ae:2b:b3:
a2:7a:79:1f:87:c0:97:2a:a5:00:c9:45:6c:0c:81:
0a:c5:b8:4a:f3:2c:8e:48:40:66:74:20:e4:54:74:
b5:4d:ad:33:1f:c9:2f:70:a2:d1:a6:82:49:bb:9f:
81:92:0b:ad:2e:7c:f7:21:a7:92:03:3e:f0:78:c4:
af:48:0c:86:d4:8a:05:87:e8:a6:55:4f:38:9d:ce:
92:fc:ad:cd:a2:33:51:5c:b2:a5:3a:e3:62:58:fa:
3b:36:00:35:9b:63:44:10:af:d1:a6:63:a2:0c:7d:
3b:15:9b:e0:09:5d:48:d0:90:c7:15:7c:28:3d:f9:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7F:DB:7B:8F:18:A6:32:0F:D5:A4:31:35:1E:9A:E8:7A:B4:4D:E9
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e8:9b:37:20:bb:de:31:b2:12:d7:d2:9b:4a:54:34:3f:a3:
30:12:3e:60:dc:8b:ab:64:90:4e:1a:18:5e:82:3c:1b:c4:20:
ee:0f:95:fa:88:5c:c4:ee:fe:3e:00:b0:cd:50:23:c2:09:8b:
68:27:ab:02:90:6e:b2:54:44:4c:f7:70:71:59:97:e5:6c:0c:
09:1c:0e:cc:fc:97:ab:22:70:22:d1:a6:e3:86:0a:1a:d5:15:
16:57:69:64:06:13:5b:42:57:a1:ce:0c:f7:de:81:75:3b:f6:
a9:44:84:c9:e5:9d:54:a1:5e:7a:b0:4b:08:62:a5:e3:25:93:
d8:6d:7d:c3:12:b9:56:b1:b2:2a:61:80:53:b4:4b:db:64:e4:
2d:fe:69:c0:e7:e4:77:66:90:47:8f:fc:42:7c:51:de:08:7e:
4f:ef:12:4c:e6:b8:3b:94:a3:71:58:f8:2d:7d:fe:9b:bc:79:
97:9b:37:fa:69:50:6d:1c:be:ff:7f:57:63:e5:6d:8d:be:21:
21:9f:d0:e6:87:8e:de:47:b3:bd:10:83:ff:28:ad:1c:5c:1c:
66:e2:f3:77:f0:5e:da:6a:95:64:65:49:23:8c:e4:80:28:10:
84:b6:b9:ea:f8:36:e9:6e:8e:40:df:96:61:de:2c:34:95:60:
a0:3c:9d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:48 2025 by rpki-client