
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: bIugr/7YhLWHHZfvmoZbkBGUGEVJLolKprwMtXW7jl8=
Subject key identifier: E7:B6:02:99:77:CF:B1:EB:F1:87:15:05:7E:B4:05:BD:89:A5:9C:87
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 0199FBEBC5BB75FD05D160CB179669D67300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0B05
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: YIzXk3w2A_mHXnQwfHIRuGRDzO0.roa (hash: w+KFjfkzM8iWvfdH1LsSPeTDcAp7/XS8C3VsFxe8b1Q=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: Q70LyKxgzzQZQE9bJZEnLyGJm/8W8qCgXfzpuAN84d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c5:bb:75:fd:05:d1:60:cb:17:96:69:d6:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=e7b6029977cfb1ebf18715057eb405bd89a59c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7d:ed:89:32:f2:9d:be:bf:7b:8d:db:3a:27:
8a:5b:2a:06:c8:02:86:76:ba:a3:45:33:54:78:fb:
51:7e:32:d5:8a:93:90:a9:71:da:6b:9f:33:fc:56:
0f:ca:80:28:81:18:d7:7c:f2:85:eb:ab:e7:d9:81:
b5:ad:d3:74:69:08:57:b3:7a:f7:e0:3d:d6:c2:44:
0f:d5:1e:b0:55:ba:04:85:20:16:d3:f1:0c:d7:ee:
a9:f0:8a:a1:19:30:81:c6:10:75:51:3e:1c:53:7a:
4b:53:63:b0:f7:92:90:70:3e:85:ba:4a:3b:87:a8:
7e:84:34:7d:71:9f:22:71:80:02:5a:18:30:51:0a:
1a:e7:65:b4:81:5a:96:26:bf:4e:ea:96:08:de:03:
0e:63:62:b4:a8:59:98:0a:6c:f9:f9:89:1a:4a:98:
be:15:0e:1e:4c:cb:d1:30:cb:f1:bb:d5:22:ee:1c:
00:24:2e:f1:2b:5f:76:a6:af:14:21:21:54:e5:f6:
2e:1b:10:d4:b6:14:e6:aa:e9:cc:e4:35:ed:03:b3:
79:13:73:3b:93:3d:b9:f8:8c:99:c1:c4:02:82:f4:
9d:ad:29:2b:11:ce:21:bc:5f:28:6a:c0:64:89:f9:
f3:42:d1:b5:df:a5:09:8f:6e:99:f8:d0:c5:46:56:
bf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B6:02:99:77:CF:B1:EB:F1:87:15:05:7E:B4:05:BD:89:A5:9C:87
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:02:ac:08:06:09:33:0e:87:92:5b:f6:f5:60:4e:b2:4c:e4:
bf:4d:bb:cd:34:80:2c:be:76:4c:ef:ed:e9:f2:d0:83:7b:09:
17:45:f2:04:9b:2e:44:97:a5:95:7e:68:c1:8f:2f:fe:0e:88:
1a:bb:95:66:96:da:f3:ba:f3:48:03:1d:9e:95:77:b9:93:92:
e5:83:e9:5b:1f:9c:12:13:12:d4:c2:01:8c:1a:56:36:e4:db:
ac:46:f1:f4:50:e2:68:1d:9f:93:32:99:4e:0b:57:ea:03:b1:
e8:af:4d:5e:5e:da:5e:51:ac:9f:43:66:b5:df:af:d9:ed:47:
a4:25:8f:06:5a:14:43:64:45:cd:b3:e4:30:bf:ad:eb:ec:91:
29:95:83:c5:a0:2b:f0:72:2f:ec:56:69:2d:b0:d2:6b:2c:2f:
23:69:d0:11:e0:cc:a6:ee:87:ae:bb:46:31:bc:6e:b6:e4:33:
4c:8d:e3:58:42:88:c2:78:44:01:51:a9:33:32:3b:74:cc:5a:
84:4b:ce:63:01:b0:f1:bc:95:eb:8b:44:79:7e:40:62:11:5f:
e7:7a:40:56:e6:b8:3b:15:52:0a:9a:c7:94:51:44:af:04:38:
00:27:1c:6f:f3:32:1f:e1:39:02:1d:4b:d4:77:62:b7:63:10:
d0:b5:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:50 2025 by rpki-client