Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json)
Hash identifier: q1yqcRAWgqhoKmLX3LE9VsTH5WIIYkvkDvEi3iZ8S3w=
Subject key identifier: 04:8A:FF:00:51:5E:DD:6C:BF:42:EE:B2:BA:A1:E7:1A:C2:20:9B:A6
Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Certificate serial: 0199FD6B264CD10BB896F2CFC106C21BB2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
Manifest number: 0430
Signing time: Sun 19 Oct 2025 17:01:21 +0000
Manifest this update: Sun 19 Oct 2025 17:01:21 +0000
Manifest next update: Mon 20 Oct 2025 17:01:21 +0000
Files and hashes: 1: 59CnxlbcT-ZaaTX2J23S31L7ijw.roa (hash: b+AnFw3X9M74fTji1fm9+zA2kxxckPu0ywAdpSQ21NA=)
2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: +m+dLzjqYVc5dFws2yP/tL8VQgB+MhsAftGLQRhFkjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:26:4c:d1:0b:b8:96:f2:cf:c1:06:c2:1b:b2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Validity
Not Before: Oct 19 17:01:21 2025 GMT
Not After : Oct 20 17:01:21 2025 GMT
Subject: CN=048aff00515edd6cbf42eeb2baa1e71ac2209ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:64:7d:db:54:96:08:7b:80:fa:93:60:d9:
41:af:3f:69:79:04:98:33:af:ef:47:ed:48:7c:d2:
dc:1b:78:5c:2f:34:da:42:ac:ed:62:29:97:fd:11:
d4:df:b7:ca:8c:77:55:5f:7a:bd:4f:81:06:18:93:
33:ac:3e:3d:8c:e7:1c:31:2c:24:60:b7:19:c1:2c:
81:92:a8:94:27:dc:9e:e3:cc:b7:27:45:72:93:44:
74:02:88:42:40:64:76:72:27:8e:d1:fe:d4:71:1d:
a2:a7:b5:90:7f:14:4f:e6:33:76:4c:2b:c6:5a:99:
3f:9b:42:26:49:0c:f0:fd:cb:0b:07:b0:f2:5b:59:
d3:ea:ca:73:f7:25:ca:57:11:2f:10:7c:2f:ac:cc:
85:c5:eb:53:2e:44:7b:b3:bc:c1:02:34:b5:8b:19:
3a:57:c0:d1:2f:92:4f:d0:9e:53:2a:9b:b6:97:e6:
b5:9b:14:f7:5a:56:63:37:3d:10:99:ac:6b:6d:b7:
57:93:ec:c4:3f:33:1a:b1:a5:b3:d5:8d:47:4c:4d:
c1:97:83:8a:37:4d:1a:62:45:17:b8:03:33:ee:0e:
3f:82:19:ab:5a:02:c3:44:92:92:b5:59:91:dc:1c:
a7:f7:7b:65:8b:ad:60:e8:41:15:5d:bc:68:5c:e9:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8A:FF:00:51:5E:DD:6C:BF:42:EE:B2:BA:A1:E7:1A:C2:20:9B:A6
X509v3 Authority Key Identifier:
keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bc:c6:15:4a:93:f1:75:7f:28:2a:e8:90:b8:61:8a:ad:fb:
f1:58:13:98:d4:90:9f:2d:8b:db:6e:f3:be:58:ba:5a:bf:72:
61:c5:5d:67:4d:d1:fd:f6:55:3f:02:d8:a6:9b:56:0f:2b:de:
0c:69:e4:a7:20:ed:32:05:98:e3:c8:bb:a5:d3:05:9c:b9:a2:
7e:8c:23:d0:0b:79:81:86:6b:68:c1:4e:bc:31:90:32:9a:16:
ab:8b:6b:36:a7:bf:4a:ac:da:ec:73:96:66:cb:cc:16:df:a1:
c5:0a:88:57:41:d1:b7:d9:33:b8:f5:2b:34:7b:fe:6f:4b:7a:
e6:8d:88:2f:9c:de:0e:58:0d:15:2f:a1:96:0d:e7:77:66:e5:
30:6f:a4:2f:96:06:a5:22:d9:73:d4:26:6d:21:df:b5:9c:73:
dd:5a:df:8e:1f:01:22:fa:e8:87:8e:8d:d4:26:a6:56:bf:31:
78:c7:0f:39:b0:a9:b2:55:35:12:55:d4:00:98:5e:0e:d9:1e:
48:2e:f4:80:1a:2c:3e:74:17:e0:c5:64:c9:3b:58:77:6a:92:
78:a2:7b:02:06:14:fb:5e:24:ff:b3:4d:d8:5f:bd:16:e4:c9:
bf:d5:fc:62:85:22:04:28:fd:6e:44:e0:92:9b:55:5c:22:92:
48:70:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:39:14 2025 by rpki-client