Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: Hx98WXNbtTmDcMMSBeZmIrN+x2kLrUZdgx6y/hx1he0=
Subject key identifier: B7:94:2E:C3:F7:71:0D:C4:08:B7:52:7A:0E:BA:69:79:F5:F7:EA:FF
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 0199FCFD83D3D24674309E124A7D8D701166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 1082
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: 97jI24RHbUGOgV5kNsVD0b3izYrogWYSUENCYAgT6p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:83:d3:d2:46:74:30:9e:12:4a:7d:8d:70:11:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=b7942ec3f7710dc408b7527a0eba6979f5f7eaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c3:d0:28:f4:8d:48:ac:1e:ac:d2:58:bd:4b:
9d:ab:05:78:03:91:87:30:02:a2:e2:40:a2:22:4a:
d9:b7:26:25:0a:7d:75:6c:b0:a9:11:03:c5:d1:0b:
3f:fa:4d:82:93:93:a4:ca:bd:c2:34:be:70:35:9b:
c4:de:eb:6c:ff:d1:0b:dc:40:8a:80:b6:22:0a:76:
f4:28:56:af:ea:56:02:53:50:8d:b5:0a:0f:94:fe:
d8:75:15:0b:fd:78:0d:76:27:3d:74:5c:77:cb:c4:
03:ef:e4:f0:d9:cc:ce:39:38:6f:85:40:93:2f:40:
c2:f0:23:80:dd:75:e6:98:93:5a:bd:06:52:d1:cf:
e5:5e:7d:d8:d8:fd:83:a2:58:c5:c5:61:cc:dc:9c:
33:d1:45:49:43:e9:3b:e6:d2:08:c3:5b:28:92:60:
e9:20:6b:c1:23:56:d8:b8:d1:29:37:a9:08:69:c5:
ff:9a:74:7f:93:18:75:65:22:41:8f:bf:cd:5b:e6:
fc:7d:0e:85:24:91:5e:66:09:c1:50:36:33:bf:ef:
c3:cf:36:ea:28:5f:e4:08:0f:0e:0a:d0:29:43:a6:
ae:a5:8f:e9:c1:cd:3b:14:26:4d:6c:72:ce:e0:2f:
eb:f8:ca:d7:65:0b:9f:d7:83:06:c2:05:b4:75:c1:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:94:2E:C3:F7:71:0D:C4:08:B7:52:7A:0E:BA:69:79:F5:F7:EA:FF
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:20:9c:1b:25:db:a2:28:ea:ac:ac:a2:ee:ec:8e:25:3e:47:
ba:ef:48:bd:a9:ae:3b:18:91:fd:79:03:88:ec:9e:bd:84:9f:
f7:c5:99:79:56:d5:2f:91:bb:da:cb:d6:88:db:53:af:fd:61:
6f:21:aa:ea:ba:e3:21:c9:38:19:32:8e:67:e1:82:92:ab:9c:
c9:90:ea:83:2b:a3:1a:41:1a:c4:61:44:87:53:bc:29:14:bc:
39:d0:d1:bf:69:e0:0b:a4:7e:d5:81:57:a7:04:d6:d5:60:08:
fc:56:84:cc:36:95:a3:a1:98:e1:13:0f:ae:97:62:21:58:90:
05:fa:bd:e1:58:f4:5d:90:e2:32:3c:fe:76:21:e2:2d:52:5d:
8e:2a:ca:b4:69:69:10:4f:6f:27:c3:3f:4d:9e:0f:19:a9:c1:
0e:76:48:e4:00:6f:5c:94:a8:b0:cf:b8:64:21:e9:13:08:0d:
e6:ba:29:b0:f8:28:de:9a:46:00:a1:c1:e3:0a:f0:4e:1e:e1:
80:2a:23:b4:6c:fd:9a:0d:93:6b:f2:7f:c7:fa:30:31:fb:8c:
fa:ab:74:e1:2c:47:c5:46:dc:b0:6b:c0:16:90:49:71:f1:99:
dc:ba:e3:1c:c9:33:1d:d4:1a:cf:c2:fa:76:58:c0:45:ce:1b:
18:4c:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:53 2025 by rpki-client