Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: 60H+/WrsRMqXxTdqSvOgXAxyiF4PsbOP0ZSls3k3KN8=
Subject key identifier: 91:F5:03:1F:EC:26:47:09:83:B3:89:C8:AF:B1:DE:A0:1C:CB:A3:4B
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 0199FC583F9830AA9420B8C0FF7A25CE6178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 140C
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: PPDcjsjoszwTm8EI4XbGMJZozgI.roa (hash: 7Lx0Qx1q5+o5Xi1eI3iJhMLtFTgxseeHLhiTQPfBYeo=)
2: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: nheTJk3Z09AYP0QB5rxqCWFn0iziXt18VElmrsqT/tQ=)
3: tedYlf87S78MkPQe8A70plM_Ngw.roa (hash: R2UtbWccTfdmsOnpPUNeRj+D5AnPyUqgeXRoHV5PeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3f:98:30:aa:94:20:b8:c0:ff:7a:25:ce:61:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=91f5031fec26470983b389c8afb1dea01ccba34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:c8:0e:e2:7e:4b:f3:ec:a3:4e:b3:99:ba:
fd:9d:82:05:1e:19:a0:3e:9f:e7:74:a7:20:20:52:
69:e2:cf:79:b2:6f:0f:3b:73:09:d1:b2:d5:1e:ac:
af:c0:c4:90:08:c0:d2:3d:2d:89:b8:b4:4e:86:42:
bf:e1:c8:2c:0c:c7:d1:ea:07:50:87:0d:b8:0e:72:
95:3c:94:c1:e6:45:0b:54:cb:87:67:51:a2:ca:56:
48:f5:f5:43:8b:05:4b:9c:ba:00:08:89:75:69:e4:
f1:da:02:b4:b9:94:0b:8e:3a:d6:0e:97:44:89:43:
d8:99:68:b9:26:c8:88:f1:85:8f:97:89:43:c8:bd:
4e:e1:2b:16:04:66:ee:6d:84:0b:1f:25:5b:2b:9e:
77:36:aa:6a:de:64:f4:49:2b:f7:ea:ce:04:b8:8e:
eb:33:4b:40:30:d5:cb:84:19:1f:89:74:56:90:38:
4d:17:01:52:65:32:d1:64:ca:f0:5f:fc:0a:1e:d1:
fc:0e:6e:68:83:52:6d:df:3a:8f:22:c5:d3:3b:c6:
43:87:c9:63:1d:30:e5:f0:af:11:89:39:f2:ed:4a:
5c:44:1a:cf:b6:15:f9:26:a5:22:98:3a:bd:0b:b9:
3b:75:de:d0:f3:99:39:da:c1:81:98:d4:a4:d2:f5:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F5:03:1F:EC:26:47:09:83:B3:89:C8:AF:B1:DE:A0:1C:CB:A3:4B
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bc:d5:3c:8a:02:3c:37:ea:fe:62:f0:7e:b9:f5:e2:55:d8:
7e:6c:b5:f3:ce:0e:8d:b6:b2:75:aa:37:10:68:93:ad:c4:0b:
01:b0:75:cf:15:08:2c:95:a6:d8:1f:e5:f9:d0:11:bd:be:5a:
0e:a7:26:73:34:09:59:40:da:7f:75:0b:d5:13:cc:f1:90:0e:
d5:da:d4:6a:86:03:0d:08:12:25:3d:21:46:b9:1b:73:1b:c4:
c7:3b:d4:be:90:88:fa:a8:e1:38:35:d4:7c:79:34:0a:44:6f:
d1:31:b7:6e:08:b1:ad:59:4d:a3:d5:dc:ba:ff:a8:81:11:a5:
df:2d:0a:6d:1c:bd:a4:8c:54:87:c8:a8:74:68:54:93:fa:5c:
d0:53:1b:1e:e9:f5:50:d5:0c:a0:2e:82:c2:db:75:4f:98:ff:
7b:18:4d:1c:9a:ae:b9:03:2a:50:65:d9:a3:65:2e:23:b6:a5:
d5:82:53:ad:36:18:50:11:25:b9:59:7d:f9:04:a5:9c:18:cc:
e4:02:51:18:86:62:e2:e9:29:6d:9c:48:a2:b1:65:92:8d:a1:
1b:77:6c:35:57:25:f6:55:d0:d6:1a:4e:d6:e0:9c:81:d4:a0:
2b:73:e8:ae:68:cd:d9:92:35:b0:6b:a4:4e:f9:4c:90:a9:d8:
20:44:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:18 2025 by rpki-client