Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: 9s7fYxbGiGNTNvQm11UgsS8zcpqIBW5YfcydUXYeCmw=
Subject key identifier: 74:BD:95:00:3D:B5:3C:B3:C5:7C:D7:F2:B4:CE:47:FA:6D:A6:59:77
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 0199FD3475E017621FA8B6942161F500DE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 1180
Signing time: Sun 19 Oct 2025 16:01:37 +0000
Manifest this update: Sun 19 Oct 2025 16:01:37 +0000
Manifest next update: Mon 20 Oct 2025 16:01:37 +0000
Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: w8wHxF7VcOqVK+uOvBaOEskkeSmFkofrqf8e4eZPTAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:75:e0:17:62:1f:a8:b6:94:21:61:f5:00:de:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Oct 19 16:01:37 2025 GMT
Not After : Oct 20 16:01:37 2025 GMT
Subject: CN=74bd95003db53cb3c57cd7f2b4ce47fa6da65977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8e:27:0d:85:31:44:5c:36:6c:7b:a4:50:d4:
dc:a7:3c:77:62:bf:70:e1:96:eb:b8:b8:0d:2a:07:
e7:8d:27:3d:b1:39:7d:2f:e4:38:e0:32:ba:ff:5c:
26:8a:1a:26:a7:07:e0:5e:86:e3:fb:06:08:ac:72:
d5:80:08:16:93:9f:39:b0:4e:a2:6a:59:b8:26:37:
81:46:82:2d:b8:8f:db:30:6a:3a:7e:76:ce:b6:1d:
9c:9d:45:56:56:d3:47:e2:46:a0:a2:45:bd:1e:fc:
20:01:e5:87:19:2f:50:60:a4:30:56:69:24:bf:8e:
29:cc:93:5a:4b:93:bc:5d:e6:7f:98:19:db:90:62:
c6:7c:a5:46:c8:2c:f0:8d:21:d1:97:54:1c:78:a5:
00:4b:62:6c:22:93:00:ad:a2:06:44:8e:31:88:18:
48:34:8b:6f:af:e3:04:09:ed:39:00:88:83:3e:a1:
b8:43:90:af:7a:67:01:9c:cc:d1:3d:87:39:a8:6f:
a7:cc:ba:a2:90:62:a9:2b:7b:5a:7c:1a:d7:cb:43:
a9:d2:2d:13:5b:c3:5e:13:8f:ec:95:0e:19:03:3e:
e4:db:5f:d3:30:91:f3:75:2b:eb:5e:16:95:3f:b2:
0c:1d:a4:5f:d5:0e:c5:c2:fc:e9:91:61:47:07:25:
78:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BD:95:00:3D:B5:3C:B3:C5:7C:D7:F2:B4:CE:47:FA:6D:A6:59:77
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:82:67:f2:60:92:d5:90:20:53:f0:11:8c:11:f0:c4:61:64:
19:c1:aa:21:51:ff:81:88:90:76:32:a7:f5:11:47:2f:2a:53:
b6:d7:67:74:68:84:3a:92:7d:94:17:39:45:17:f5:7f:f2:24:
11:40:15:44:e3:95:1a:a5:f0:90:d9:20:a6:38:a3:5d:0c:15:
2c:f3:09:b1:91:b2:6d:d5:ef:1a:14:64:56:da:38:ec:f6:b1:
4f:df:79:2d:6c:4c:f9:f2:9c:3a:46:ad:b0:21:3a:71:d0:61:
a9:c4:e1:ef:3a:6b:d1:51:55:c3:ce:13:de:95:88:f1:2c:25:
b0:f6:65:b9:a1:07:4d:06:89:be:15:1e:b0:c6:76:64:61:e8:
60:d9:33:de:64:47:4b:28:44:bb:a2:98:ab:47:24:7f:5a:f7:
64:c3:cc:28:ff:25:c1:82:91:56:62:49:b1:42:e6:05:b8:2a:
65:00:5e:02:94:fc:b4:f7:37:e4:2b:3f:b1:7d:40:34:7e:6d:
91:e9:3d:5e:d4:ed:c8:34:b3:0d:40:5e:06:19:1e:bf:14:89:
8e:86:50:36:ec:33:63:7b:2d:f2:f8:53:a8:b5:11:de:52:88:
45:54:44:98:74:6c:15:4c:03:9e:5a:bc:65:86:a4:9d:92:78:
72:3b:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:24 2025 by rpki-client