
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json)
Hash identifier: P1by86qOGibUbkG+QnuLkTLkLNw797F5/fXJN3vKhEI=
Subject key identifier: 64:71:EF:12:B6:52:CA:D0:B1:27:F3:2A:F8:4A:1C:F2:0B:F9:4F:AF
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 0199FF5938A42301D1012287A0BFF6995529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
Manifest number: 0961
Signing time: Mon 20 Oct 2025 02:01:01 +0000
Manifest this update: Mon 20 Oct 2025 02:01:01 +0000
Manifest next update: Tue 21 Oct 2025 02:01:01 +0000
Files and hashes: 1: 5Es4zPvDm3MMXSDOXrPDEzILG78.roa (hash: WNzo+YIvuvagGYiyG4uSKV3fWrNNz4wRZQOVkyJIxJc=)
2: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (hash: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=)
3: xHaucpgtSJqvYDWEQH_jghu3SHs.roa (hash: 7WTdK2upF+9XygbepRb7SlbpqhR7M3j31Q2B96zjyEA=)
4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: 5i0QZYe04TXno410DGOj9JDtT/vLLK4iiTF0pjzEPSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:38:a4:23:01:d1:01:22:87:a0:bf:f6:99:55:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Oct 20 02:01:01 2025 GMT
Not After : Oct 21 02:01:01 2025 GMT
Subject: CN=6471ef12b652cad0b127f32af84a1cf20bf94faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b6:17:12:9d:f8:68:2e:b4:83:96:e5:38:c3:
c0:ea:07:b0:8c:bc:e5:69:e0:c0:3d:25:68:b7:6e:
38:fc:87:d2:0b:bc:99:48:f7:de:cc:4d:7d:54:22:
d7:f8:2c:a6:f3:cd:95:c2:2a:36:d0:2e:ec:58:cf:
e9:b6:fd:9c:d6:da:49:d5:75:d5:b0:3c:22:7f:19:
bd:35:8a:5b:e7:d9:5a:0a:4e:09:a9:a4:0b:40:23:
88:0b:ec:dd:a4:83:3a:c1:52:48:76:27:4c:2c:0e:
8d:7b:9f:1d:82:29:5a:1b:c1:67:4d:44:c3:a2:ef:
9a:c1:7d:a5:44:5c:21:f3:0a:c1:b7:3c:7e:9e:79:
29:e7:ad:62:4f:88:1f:e6:fa:64:ab:bc:db:1b:a8:
9e:8f:91:3c:ad:91:cd:16:b4:42:d5:a3:d0:a1:6f:
af:07:1e:37:25:b2:0f:76:ed:f5:42:ac:b3:82:70:
84:0d:8c:1f:bd:a1:cd:25:52:d4:e0:04:f5:6d:49:
c4:82:dd:fb:5c:ea:d6:f3:bd:f5:fb:4c:a2:91:ea:
a7:93:f0:f2:99:dc:54:2f:c4:5c:b1:3a:e8:b6:1d:
04:a7:f1:61:d3:09:93:0f:a3:30:51:0e:46:5f:42:
cc:d2:85:ef:73:a8:3f:36:bb:63:74:97:fe:2f:df:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:71:EF:12:B6:52:CA:D0:B1:27:F3:2A:F8:4A:1C:F2:0B:F9:4F:AF
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2c:9b:73:02:37:2c:b3:16:c3:33:4e:77:c9:92:93:33:de:
d7:9d:4e:f0:b6:9d:31:8b:a7:42:60:62:6b:77:a7:16:70:be:
2e:1f:0e:9e:eb:b9:cd:b5:51:e8:cc:be:7a:27:7c:74:a5:92:
03:4a:5c:74:ab:4c:9c:ad:c4:f1:ba:d3:4b:48:1a:30:e7:d4:
0a:8c:2a:08:ff:40:b6:1f:72:ec:e5:a3:40:25:15:6a:1a:cb:
69:d0:0c:27:79:d0:e6:76:a4:70:6d:ea:d7:0f:59:be:99:52:
d0:ad:15:d1:5f:62:42:6a:55:6d:e5:69:85:2e:63:f2:4e:18:
a3:c3:95:44:a4:f1:c3:82:88:4b:4c:6f:f2:8d:3f:0f:27:5a:
b7:1b:23:fa:35:a5:9f:a4:78:42:a8:f7:78:3d:b3:94:48:fa:
02:63:91:ae:fc:fe:24:1d:3c:58:6d:c8:56:6d:8e:e3:f0:69:
db:ef:57:de:40:4d:25:65:54:3c:fd:d2:09:24:97:1a:e7:01:
13:62:93:bf:9c:10:39:93:58:9e:37:c9:c5:ae:73:92:b6:d4:
96:0a:97:df:cf:d6:5e:64:bd:54:82:e2:fb:4e:8d:65:4d:82:
f2:5f:14:94:46:e9:d6:7d:21:e4:4a:b8:76:3f:a9:1a:9b:2d:
6c:27:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:45 2025 by rpki-client