Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
File: yYlmC_FH9ij7fPiycYc3_qhimNA.mft (raw, json)
Hash identifier: B1HtIMjF95v3nCXgFG3maB+iXgyCJfaIQTsPlckFI1A=
Subject key identifier: 14:25:2A:2E:81:27:A4:F8:A4:14:E7:52:0A:9F:B0:29:75:9F:76:E7
Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0
Certificate serial: 0199FC2179AD118629CC64D80E5F26136708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
Manifest number: 09EB
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: EdKvKktbhV253248rH8OS7KgOJc.roa (hash: OVq8FxeeYttd7uYMiCGl4rm6BCNN8JrWv82y6k+zOKs=)
2: yYlmC_FH9ij7fPiycYc3_qhimNA.crl (hash: Ucyg5CGam2fAxSpyP2XKuk8KTcfPC/4M3Ho8zF6Cmw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:79:ad:11:86:29:cc:64:d8:0e:5f:26:13:67:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=14252a2e8127a4f8a414e7520a9fb029759f76e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:9b:97:02:30:5c:20:18:2e:76:cc:c1:eb:
67:cf:f7:95:2a:04:d8:db:fd:5b:1a:31:87:a5:e1:
0b:27:75:d8:6b:1d:00:08:7d:c6:6d:6a:3f:bb:41:
c6:aa:05:6f:a5:2e:62:a2:70:fe:df:a9:67:3e:ca:
7e:7c:45:51:63:f5:fa:f5:8d:d2:d4:ed:0c:d7:1c:
04:28:39:8b:7d:92:ed:c3:3b:ba:f2:02:14:9d:02:
fd:28:dc:a5:d4:db:48:f8:17:30:7b:21:4b:55:a1:
2d:2f:e1:98:c0:47:3b:d4:56:cf:01:ba:6a:7a:fd:
c5:83:9a:e9:3f:3a:ae:7a:3a:d8:f6:ac:35:9b:7f:
a5:6a:8d:65:c2:09:28:3a:d9:9b:1a:23:94:f2:c5:
53:dc:87:28:cb:1d:bc:1a:6b:d5:e9:d8:4b:d4:1c:
0a:24:7f:00:e8:09:d1:d5:ea:0c:b0:57:68:1b:c2:
f4:49:94:f4:32:16:46:06:68:3a:72:52:fb:51:af:
93:bd:b0:7f:d6:d3:98:bf:02:20:aa:9a:f6:09:f4:
0e:4f:51:37:ba:7a:a4:be:28:a9:ff:c3:3f:2a:b7:
54:36:6b:ee:c2:cf:e8:5d:34:91:05:a0:9d:7a:18:
46:d3:2e:28:94:85:4a:43:2f:13:88:d3:1c:c3:1f:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:25:2A:2E:81:27:A4:F8:A4:14:E7:52:0A:9F:B0:29:75:9F:76:E7
X509v3 Authority Key Identifier:
keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c9:af:de:7e:71:44:0d:aa:6c:f3:4a:e9:e2:76:01:ea:3a:
4b:6f:61:2e:b4:42:41:9e:d3:aa:e9:e4:e6:27:84:d3:43:28:
8d:75:04:bd:bc:61:1a:af:b7:cc:33:e7:ef:16:84:ba:36:ef:
bd:34:07:36:64:7e:73:e9:7b:9f:7f:6f:44:9b:58:ad:0b:4f:
c3:3c:fa:3c:e5:41:11:a1:16:4c:3c:04:1b:96:2b:89:d7:cf:
d2:4b:40:a7:ee:a1:46:2a:85:5d:80:e3:6c:6f:06:e6:67:a7:
5b:26:cb:9b:f9:0f:a3:f5:de:f3:24:0d:de:fc:77:4e:7f:4d:
83:94:bd:56:ff:af:09:ba:ac:46:48:8d:01:17:ba:45:75:48:
40:7b:20:96:1e:ab:cc:79:db:68:ce:82:f7:e9:79:e8:c0:c8:
56:79:1b:19:45:8a:f9:35:3e:45:17:55:5b:44:8f:38:78:19:
ad:68:30:6e:1e:a3:be:49:9b:6c:cc:7a:33:d0:70:5d:4d:ea:
24:ca:3b:0a:f2:03:6f:f0:a5:1e:87:3c:f9:33:18:42:21:cc:
e2:e6:55:27:de:ea:bd:43:2c:da:44:6f:52:82:70:e9:b0:46:
c1:6f:28:aa:d6:3a:60:4e:43:5b:6d:b2:70:88:81:f0:b0:51:
9b:db:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:23 2025 by rpki-client