Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: +AS2F023K9BqQ6o+hHG9NpyMnMQo++q5Z20Z9idsM1w=
Subject key identifier: 9E:BC:A5:27:B4:37:79:AB:AF:85:99:A7:4C:74:9A:57:73:2F:D4:F6
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 0199FB7C9C2A799426310430A837ED34D508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 0531
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: N0QT2FYAWsPv7LEE9C/KK/G9XxTLBmG7/LPB5y6RdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9c:2a:79:94:26:31:04:30:a8:37:ed:34:d5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=9ebca527b43779abaf8599a74c749a57732fd4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:c8:bf:a1:79:05:c9:b6:c8:ea:b0:ee:69:
60:73:4e:45:62:a3:2e:37:86:68:11:d6:bf:d3:c7:
0f:78:b5:84:d8:56:9f:ed:87:80:01:ab:0e:e2:53:
70:fa:11:e5:6c:a6:51:00:b4:95:fd:3d:82:8c:2c:
35:84:08:93:58:ca:02:bf:1f:87:0b:a4:82:83:37:
22:40:62:00:d8:b8:13:ed:0b:62:f9:66:f5:48:f4:
57:3b:b2:62:50:d6:92:51:60:9c:31:75:30:34:a0:
7f:09:21:77:9c:22:93:3c:f7:c1:8e:94:cc:39:5b:
2a:04:94:db:9e:a9:a4:ac:b9:4e:e0:38:5a:b7:63:
cd:ad:99:31:88:b7:e0:38:b6:7e:53:ba:38:95:fc:
a8:aa:2b:19:79:06:2b:0e:4e:e9:27:04:fb:ad:65:
eb:cf:8a:c6:df:61:ed:b6:4b:17:88:b8:a6:c2:83:
24:e0:18:aa:91:b9:8f:df:f4:aa:13:0e:22:96:21:
f5:f4:dc:b5:01:f1:97:fe:1f:c3:50:da:35:dc:ed:
e7:91:60:7e:d7:cf:0c:a7:ec:9d:6a:cc:be:73:96:
bc:e8:f0:63:a7:e5:b7:6b:9f:92:22:78:83:95:05:
da:cc:d0:60:64:c4:b6:75:9f:0c:74:9b:ef:13:ad:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BC:A5:27:B4:37:79:AB:AF:85:99:A7:4C:74:9A:57:73:2F:D4:F6
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:83:6c:59:de:f8:71:99:a4:08:c2:cb:e6:93:15:da:9e:2d:
60:42:64:c1:6a:40:ae:87:17:cb:8f:d1:b5:77:52:5c:a3:07:
69:f6:af:58:86:a0:15:c5:04:d7:99:ee:66:3f:e2:12:68:ee:
b3:a4:da:42:6d:21:42:d8:3d:06:c2:1c:36:d7:82:47:84:ab:
47:d9:4f:4c:b7:fa:e2:ea:ad:c1:56:68:55:7f:48:6e:37:eb:
f4:7b:1c:38:88:b1:c6:e3:38:ad:54:1c:a3:e9:e1:97:5c:90:
c5:48:6a:6c:77:fe:c3:72:ba:b9:fa:16:7c:da:ba:47:c9:3d:
b8:66:95:2b:f8:14:60:a3:fc:36:dc:69:10:1a:7c:2b:e5:10:
6c:bb:66:70:1a:cb:76:6f:85:72:26:8a:1c:01:4e:e3:d4:dd:
db:b8:fb:15:ac:cc:e8:b9:20:63:5f:ba:f0:a1:11:f3:71:70:
bd:74:1d:5c:bc:7c:6d:41:df:8b:33:e3:5f:fb:83:6c:07:55:
d7:7a:8a:c5:b1:39:f9:51:c4:05:7e:6e:44:3e:a3:3f:28:a2:
01:68:b9:6d:70:5e:b9:72:a6:71:6b:16:cc:b8:4d:e5:be:22:
86:1b:03:e1:da:fb:09:a7:b1:b5:d6:c0:19:1e:ff:2e:e7:8c:
37:1c:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:44 2025 by rpki-client