Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: bRXC4v+kC8O4OsiSru721PpOgVAbcqCMp9dVmpXDJws=
Subject key identifier: 49:AB:64:A8:EC:0F:48:8B:EC:B2:67:30:50:E4:A4:7D:0A:2D:FE:6D
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 0199FF594003B06B82FA8E76543066C38B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 0BD6
Signing time: Mon 20 Oct 2025 02:01:03 +0000
Manifest this update: Mon 20 Oct 2025 02:01:03 +0000
Manifest next update: Tue 21 Oct 2025 02:01:03 +0000
Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=)
2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: bIDdhUt/u4929mR8RXVRscf1U+BkmnZoOCWFJuJ9/ag=)
3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:40:03:b0:6b:82:fa:8e:76:54:30:66:c3:8b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Oct 20 02:01:03 2025 GMT
Not After : Oct 21 02:01:03 2025 GMT
Subject: CN=49ab64a8ec0f488becb2673050e4a47d0a2dfe6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:8c:5b:06:0b:00:48:81:fe:b7:83:f9:71:
4a:d2:3c:5f:d9:fa:a6:fc:de:a6:41:4d:81:4d:10:
bb:06:e4:05:8c:82:f7:a1:b6:9e:69:8b:bd:90:be:
92:2d:33:43:69:63:2c:41:f9:5d:fc:0a:42:5f:c2:
f6:cb:45:b5:de:ba:5f:40:84:fb:7c:f6:7d:2b:ba:
62:57:ab:e1:66:47:e5:cf:ba:42:47:9b:24:b7:6a:
6b:df:38:30:f7:2d:71:4b:8f:7f:ca:fb:17:65:dd:
dc:f6:35:f2:8b:1a:d2:6b:85:17:f1:01:ec:81:85:
ba:93:19:2c:1b:8d:40:bb:25:2a:5e:0f:13:7e:d9:
03:5c:6c:84:59:b5:e0:15:c9:55:38:e1:79:ee:9d:
29:3e:f9:8b:87:de:2e:51:60:8c:91:3c:f9:2b:13:
83:5e:ef:0f:4c:7f:bd:7b:7c:13:5e:1b:5d:49:26:
be:fe:29:c0:5a:d4:d4:37:4e:c0:c8:03:63:67:e5:
1b:02:5b:9f:37:aa:8c:89:bd:af:81:58:0d:14:e2:
72:9a:96:c4:1c:b8:5d:ee:55:ab:24:72:72:28:c7:
17:e0:cd:b1:31:65:b0:d0:c9:d1:7e:1d:5f:cd:a8:
ba:db:d5:64:97:71:1b:f3:53:b1:ee:78:25:5c:16:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AB:64:A8:EC:0F:48:8B:EC:B2:67:30:50:E4:A4:7D:0A:2D:FE:6D
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b0:56:94:84:52:80:7a:a8:97:d1:4f:ab:59:f4:4e:62:81:
2b:39:10:b4:3a:aa:1f:e2:8a:73:9b:ac:75:af:34:b0:a8:35:
07:e5:59:87:9b:cb:63:2c:51:b1:e9:30:eb:77:7e:ca:bc:5e:
32:38:ce:e1:1f:dd:fb:34:ea:4d:97:19:31:f9:0c:d4:24:95:
7d:6b:cd:0f:27:69:fd:49:97:49:23:e1:54:3e:1a:0b:53:17:
59:80:b4:1c:0d:34:fa:3d:c3:c9:2b:da:e7:a2:94:80:48:4e:
c9:e1:48:ef:8b:4c:b9:61:a0:77:d3:b1:89:65:b9:67:68:87:
60:04:0c:6a:be:16:85:c8:66:ce:b8:2d:11:46:a3:4c:3f:84:
bb:49:9f:cb:fb:71:4e:54:a9:b2:9f:98:bf:8c:f7:e7:95:7a:
68:3a:57:ff:6e:63:1e:a6:15:61:a9:84:d8:3e:4c:cd:d0:83:
2f:ee:26:45:93:df:4b:61:3c:75:4c:e0:a1:cf:cf:34:59:ea:
7b:00:01:84:28:e9:fd:b3:62:5f:de:3f:93:bd:54:e0:eb:5d:
05:98:0b:ab:50:e5:34:47:9b:3c:5f:51:b6:45:01:da:8d:f1:
60:ba:37:df:31:b9:40:4b:53:1d:93:a0:8d:45:0c:ba:51:03:
01:9e:7d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:40:42 2025 by rpki-client