Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File: yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier: Peir4hY8JKgiBkjOStjMkfMutqguwUcQKBzMBWqnr5I=
Subject key identifier: D1:64:30:C9:F8:48:47:94:D8:64:48:0B:A5:2C:91:81:D4:CF:64:AA
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 0199FD6B13D30C2FBBBFA729E2A6297429F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number: 03B4
Signing time: Sun 19 Oct 2025 17:01:17 +0000
Manifest this update: Sun 19 Oct 2025 17:01:17 +0000
Manifest next update: Mon 20 Oct 2025 17:01:17 +0000
Files and hashes: 1: 9G61nTw40oudLW3JOC_FQ0aHHQs.roa (hash: PZHJFgFZ1M5t+8j0But6rI9U9bsojNq5vU54p68gWrI=)
2: AdoLpxkGdJU9MVB2mFDieYW6JUM.roa (hash: M3306US/H6B4VGXvtuAxz3jajRvPMjKiTsFnDjT1Itk=)
3: ajlhxYNtAPzeTPjXCJjwu3u7DCY.roa (hash: IqXuM6//Ku9jh4JzK+2CUndK/ugkLqCne4Oz+cOP1rE=)
4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: lSvlLGZtsRpfC9rCltITGZv1fzsEhZ0ONkzlX0nfObg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:13:d3:0c:2f:bb:bf:a7:29:e2:a6:29:74:29:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Oct 19 17:01:17 2025 GMT
Not After : Oct 20 17:01:17 2025 GMT
Subject: CN=d16430c9f8484794d864480ba52c9181d4cf64aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:8d:2c:36:6b:c8:f5:9f:73:d0:ca:0c:64:
0a:e7:73:f1:bc:34:2e:8b:6c:9d:9d:2e:d1:48:e2:
77:40:5a:67:45:68:aa:1f:fd:4e:2e:0b:d1:9c:82:
5e:22:66:5c:02:9e:65:e6:e7:aa:f3:1c:f8:86:e5:
6b:d7:41:7e:18:7f:e7:cf:7c:8e:16:92:f8:46:57:
1f:23:d8:c6:8b:ab:6a:c2:02:15:82:70:99:7a:e9:
f0:4b:d4:71:7b:c9:4f:99:e1:9a:2e:c1:f2:83:cb:
0f:b0:66:c7:3c:1a:ff:e2:2d:d2:e9:28:dd:83:30:
2f:9f:52:60:29:8a:56:11:26:cc:a1:b4:0e:4c:a2:
bd:16:ee:4f:63:63:06:e6:b8:5e:2f:77:89:30:84:
66:ac:45:10:f0:e6:a5:ee:fa:6d:ff:2d:e9:14:7d:
31:ca:e0:b1:77:a0:35:c7:89:9c:53:ec:f0:ee:89:
1c:ef:44:7e:24:4e:36:51:4a:a9:3b:9b:1f:f9:bd:
2d:2b:30:26:10:79:6e:ab:a6:08:78:f8:a4:03:f8:
4b:b2:ea:33:9c:07:db:e3:47:e2:3a:da:79:a3:14:
d7:fd:99:2b:32:bc:e3:40:e4:fc:42:6e:eb:4a:e9:
ac:75:cc:39:94:33:7f:cb:35:e6:6f:61:3e:d3:f9:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:64:30:C9:F8:48:47:94:D8:64:48:0B:A5:2C:91:81:D4:CF:64:AA
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:97:3b:c0:64:9f:38:b0:bd:33:ad:b0:1d:4e:49:72:ad:d7:
e3:e6:2a:19:ae:32:82:03:53:f9:82:d2:e4:0c:2b:02:60:3c:
f2:6a:1e:d3:82:e0:b5:6e:3a:ea:a7:05:dc:d0:e4:ce:20:82:
dd:09:18:dc:0b:79:78:83:43:24:ba:00:60:fa:e1:c7:ab:6a:
0f:4d:43:50:6b:48:ab:ae:72:bc:b1:8f:7f:2a:00:77:56:85:
89:3e:61:8a:ea:35:df:57:64:39:cd:9e:ce:1a:bf:55:e7:d9:
d9:bc:a5:47:f5:ce:c8:43:e8:3a:2e:68:2a:cf:5a:00:e0:aa:
ef:60:88:bb:f4:74:b9:32:d7:dd:47:8f:2b:fc:8a:ed:a1:1a:
08:6d:f6:c5:16:b2:91:f6:2c:05:95:af:a0:90:9c:da:32:1a:
ff:5f:65:29:ec:21:c8:8a:00:16:4f:f7:94:4c:d2:b8:e9:15:
a5:36:93:a3:0d:42:ba:02:6a:f6:14:9e:a0:44:6e:01:1d:23:
05:b9:cd:a9:bc:c9:64:6f:4a:03:93:ca:41:02:5a:9d:9d:3d:
0a:83:04:25:97:1b:56:12:50:39:db:cf:5e:32:9f:2c:4c:22:
3b:bb:b7:2a:2f:43:be:8d:8b:fd:70:fb:c4:76:10:b3:c7:61:
2f:96:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:23 2025 by rpki-client