Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: BrYN7sOf3iMMJwguntU0dMmWvIXMjnfUAn0dD1LP+sE=
Subject key identifier: 7C:9E:C9:B8:4D:CC:36:C9:A3:B4:2C:7B:4E:DC:41:9B:4C:13:3A:3C
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 0199FB0F26458B0F44052E47D22028ED619A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 075E
Signing time: Sun 19 Oct 2025 06:01:37 +0000
Manifest this update: Sun 19 Oct 2025 06:01:37 +0000
Manifest next update: Mon 20 Oct 2025 06:01:37 +0000
Files and hashes: 1: 6eOqvZGDKFDuA6yXPPPze8WOsrA.roa (hash: ERZvSVqw/o5/S8YL0KRBFbpGBsSfCd4T3Hhjomrg6eY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: SmM1D2XaJHO9+nK3J+NZot8m/EHld6oItb2awbAZ5NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:26:45:8b:0f:44:05:2e:47:d2:20:28:ed:61:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Oct 19 06:01:37 2025 GMT
Not After : Oct 20 06:01:37 2025 GMT
Subject: CN=7c9ec9b84dcc36c9a3b42c7b4edc419b4c133a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:d0:3e:03:9c:42:82:aa:2e:b3:c8:95:76:
58:bc:bd:a3:62:04:82:23:cd:16:94:16:a7:3c:0c:
09:8f:12:be:2f:30:1c:c5:ec:9b:94:5a:2f:55:09:
d6:8c:67:10:c2:52:aa:53:83:71:fd:e9:d7:63:53:
dc:8c:8f:c7:db:0e:13:a7:74:6b:71:1c:ef:39:64:
f1:51:dc:4d:15:e0:3f:b7:ba:14:9a:61:67:1e:94:
53:1d:e0:d1:25:23:f3:25:bb:65:25:29:a3:da:bb:
6e:23:ff:5f:ce:05:ed:0e:a6:dd:a7:7a:a5:37:1a:
f3:15:5f:13:88:9a:e4:b7:4f:b8:32:7b:fc:24:d4:
34:9f:19:b9:bd:f5:49:30:c3:49:e9:ac:d7:42:b1:
9f:a8:6e:dc:61:c5:5a:8c:38:f7:97:f4:21:24:fd:
44:bd:5c:bc:07:fe:ea:6c:74:98:e4:be:ba:9c:d5:
8b:24:98:1e:56:a3:c4:4e:a1:b5:08:d0:6b:4c:f8:
cc:4f:04:c8:b1:38:c8:ce:4a:52:27:db:61:58:e0:
82:5e:83:db:67:4d:48:e4:96:17:39:a5:fd:fd:68:
35:47:a9:22:9d:f8:cc:3d:0d:2a:ed:f0:ec:90:42:
ca:23:f2:2b:4d:10:97:35:7b:51:05:4f:fb:2c:1c:
f1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9E:C9:B8:4D:CC:36:C9:A3:B4:2C:7B:4E:DC:41:9B:4C:13:3A:3C
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6b:42:c7:54:2e:fa:60:37:fe:fd:e6:fe:d3:48:4e:be:4a:
9f:d8:0c:14:48:a7:c9:8c:de:d9:e2:ad:b7:93:34:d5:98:5c:
b0:f7:d5:20:39:76:b8:31:4b:ff:25:d8:56:2b:c3:21:2e:b3:
d3:e8:0b:d5:89:a0:6f:74:e5:69:e1:fb:1c:a7:b3:8c:46:d1:
88:d4:60:04:a7:c5:46:08:ca:a8:b4:01:57:e3:e7:9a:94:fd:
d1:f5:31:e7:dc:dc:0b:ee:08:6f:7d:1a:90:ab:71:17:12:2e:
7e:f0:f9:53:9b:6c:85:3b:c2:0d:ef:4a:a3:89:f2:90:40:a5:
e3:97:3e:c0:16:2a:72:28:2d:0d:73:53:fb:25:a7:77:5f:a1:
34:01:a7:f1:33:c5:28:d9:9c:b4:71:1e:1a:94:0d:60:0d:cd:
e0:c5:dd:c0:26:fc:a0:92:fa:8d:e2:99:7a:18:d3:85:6c:67:
41:90:b2:af:56:a9:20:ef:b1:a7:ad:45:3e:39:e8:2d:65:fa:
19:0d:a9:db:b6:f7:aa:a5:b9:d8:d3:fc:cb:52:b7:a2:f4:11:
0f:f8:b9:97:fd:bf:38:0d:cf:2a:2c:8d:d3:97:25:e5:c7:3f:
de:17:34:d0:af:62:fc:f9:6d:61:21:03:29:e8:44:5a:7c:de:
75:01:dd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:12 2025 by rpki-client