Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: r2AIrEglbe+BKB2RkKnsE60HA+L4YwqNCWgmWxrbBcU=
Subject key identifier: 17:BD:5F:C8:BA:B0:73:2C:79:3C:CD:A2:24:E1:23:5C:C0:0A:51:42
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 0199FDD9B2362D5094A130CA98BF6205DDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 157E
Signing time: Sun 19 Oct 2025 19:02:06 +0000
Manifest this update: Sun 19 Oct 2025 19:02:06 +0000
Manifest next update: Mon 20 Oct 2025 19:02:06 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: d4E2tNV0WvMpWFz22K7Ico+KOGXareYIAbCjT22waPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b2:36:2d:50:94:a1:30:ca:98:bf:62:05:dd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Oct 19 19:02:06 2025 GMT
Not After : Oct 20 19:02:06 2025 GMT
Subject: CN=17bd5fc8bab0732c793ccda224e1235cc00a5142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:64:8b:6b:9d:48:62:fd:c1:6f:25:f7:09:
56:c9:fd:58:05:9d:a4:5f:9a:2e:02:40:3b:f0:0a:
e7:a8:9c:02:f3:49:8d:83:54:25:c3:26:34:06:98:
36:da:d6:39:9b:ae:59:1a:78:36:2e:9c:ec:5f:7c:
94:83:05:6a:62:de:e0:4f:1a:d0:be:ac:b5:1e:d6:
01:da:c4:b8:9d:04:04:85:4c:a8:44:4b:b9:fd:6a:
30:1c:60:4e:1b:20:6e:6e:7a:46:df:73:8a:e8:3c:
79:fd:d8:dc:84:31:fb:26:2e:8a:ac:47:ba:b0:7a:
2d:87:6a:9a:bb:26:19:0f:4c:a1:ff:f0:38:d3:e0:
36:01:60:ef:30:fa:e7:d4:16:1e:93:04:11:a8:f1:
09:1d:3a:e3:70:f1:94:8a:c8:65:62:fd:90:86:08:
5a:70:4c:0d:42:c7:d3:b2:42:56:9a:0c:d2:55:71:
0d:70:45:4b:32:85:2c:17:c7:64:58:7f:07:df:12:
37:4a:2f:19:6c:46:1b:d7:73:97:c2:2f:bb:56:41:
c3:45:fa:32:72:b4:3d:b5:4e:f1:74:c9:0d:2a:bd:
f2:ea:ca:81:45:66:d1:d1:97:95:ca:31:68:01:f7:
84:e8:ef:8c:7e:0d:2c:50:3b:df:a7:ef:cf:28:36:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BD:5F:C8:BA:B0:73:2C:79:3C:CD:A2:24:E1:23:5C:C0:0A:51:42
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f1:cd:4c:89:d1:91:87:cb:9b:40:e5:1f:bd:23:12:55:06:
54:9c:da:20:0b:f0:2b:7d:01:33:cb:5b:85:8e:9c:18:e8:ee:
cb:f8:71:d1:b0:38:79:6a:c4:81:d4:42:04:5e:ac:69:9c:d1:
cb:c2:a8:ca:5f:8a:67:83:a2:19:09:5e:49:3e:99:a0:4e:23:
eb:0a:b7:08:8c:2f:b6:7a:5b:71:d9:4a:ee:0e:6d:18:9d:30:
c3:be:40:49:7f:55:5e:0f:d5:d3:c5:89:df:c4:f1:24:e7:6b:
55:12:b5:81:be:a2:c6:01:43:2f:2c:83:39:cc:82:d8:70:5c:
05:08:94:7e:06:5d:ed:91:ff:41:79:95:22:6e:a0:00:0a:7c:
fe:fa:92:cc:19:3e:3c:91:ad:cf:90:48:53:1b:b9:9c:0c:7d:
ab:17:ca:79:5a:b0:a8:3f:bd:c0:fd:75:bd:55:30:6d:57:d4:
8e:cb:a0:c8:68:d4:e9:60:30:47:84:1e:f0:a6:6a:d9:00:a7:
b7:47:a4:29:03:0e:94:8a:66:6d:89:9a:24:3e:2e:a2:a1:bd:
2e:6a:08:c9:5e:fc:a8:3f:f1:33:3b:bb:79:d7:0f:0f:0f:93:
4f:b2:fa:16:8e:a0:45:99:c6:3d:21:e3:d4:1b:8e:3c:b0:d0:
44:49:41:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:32 2025 by rpki-client