Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: kiNtDOSmhMFEExx8SAsA3nHBdAxK7mEMWZg8tVG4ELg=
Subject key identifier: 13:50:6E:E3:E9:7F:99:59:C2:35:BA:4E:34:99:56:B3:15:16:AE:90
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 0199FAD7AE19DCC4B5CE2CE465E328E05F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0B2F
Signing time: Sun 19 Oct 2025 05:01:02 +0000
Manifest this update: Sun 19 Oct 2025 05:01:02 +0000
Manifest next update: Mon 20 Oct 2025 05:01:02 +0000
Files and hashes: 1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: bYddAtEAp5J64PR8Q0ezRoBabafVY5quBT++7vEz1Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ae:19:dc:c4:b5:ce:2c:e4:65:e3:28:e0:5f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Oct 19 05:01:02 2025 GMT
Not After : Oct 20 05:01:02 2025 GMT
Subject: CN=13506ee3e97f9959c235ba4e349956b31516ae90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:2e:06:71:3e:75:92:03:a6:f9:c7:80:ba:
b4:84:91:95:0d:f5:5c:96:e2:be:dd:0c:82:42:23:
93:f0:ef:80:7a:95:05:c5:1d:01:91:27:3a:31:7e:
63:3a:d9:91:12:aa:91:ca:fd:4e:04:af:81:7c:e4:
26:4e:b4:19:62:cb:c3:fe:d0:8b:3f:a9:8b:d0:a6:
8e:ba:a1:1e:82:3b:51:11:33:4a:e4:6e:f8:44:3e:
ab:d5:45:a5:80:0f:65:30:0b:29:df:7f:3c:ea:e4:
20:b7:83:fa:00:d5:65:5a:09:03:4e:fc:e5:4b:71:
8c:7e:8b:a6:38:7c:27:2f:e7:a2:77:df:9a:77:81:
97:e9:51:40:c9:49:f0:47:ca:3f:29:ba:43:00:e1:
ad:9e:7a:77:c2:2f:ed:d1:93:9f:2e:30:54:88:c4:
45:6c:5e:10:fb:8e:d0:44:c8:c8:09:39:b7:49:31:
a6:a3:3c:89:84:c4:be:f9:6d:74:d1:10:88:b7:c6:
88:5b:1b:ef:00:08:d6:36:18:b0:72:79:01:32:f3:
ed:17:29:21:58:76:61:d3:3d:a4:85:fd:0c:35:ee:
b8:17:4c:9b:6a:a5:b6:c6:db:e0:a5:07:82:2e:05:
f5:69:6d:f1:6f:ab:d5:51:e6:96:7d:e0:8f:89:06:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:50:6E:E3:E9:7F:99:59:C2:35:BA:4E:34:99:56:B3:15:16:AE:90
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1f:9f:26:71:4a:aa:c1:0d:b9:b7:6e:68:78:77:13:61:00:
48:8d:91:90:1a:81:02:ce:e2:49:b9:18:5a:1b:85:a9:13:7c:
97:8b:0d:49:4f:15:20:7b:1b:5e:aa:f7:f4:72:e8:53:ea:d1:
89:b6:0b:02:4b:3c:f4:54:aa:5c:16:5d:00:e7:ba:5b:e9:c9:
9d:bf:69:fd:01:03:1c:34:91:b2:c7:84:a3:bb:99:dd:7d:da:
94:24:43:85:5f:f0:39:90:5c:22:54:f4:d7:59:8a:81:51:92:
bc:3e:d1:f6:e0:95:9a:ab:a5:e6:1e:55:45:b5:9d:bd:64:d5:
d3:af:88:54:9d:3b:95:c4:c3:91:07:18:ca:5e:02:e4:0f:1b:
f1:e1:60:6c:9c:6c:37:c7:05:5d:ab:4a:a6:f1:50:24:ed:99:
f0:ff:89:9d:81:cb:1b:f5:2b:e5:74:25:33:23:8a:84:94:be:
d7:fb:bf:c9:22:92:0c:60:61:67:7d:6b:4d:07:21:b9:b5:55:
1a:5d:fb:18:7d:c9:cc:80:74:f7:91:ef:8c:7c:3f:64:30:75:
79:a8:e6:12:56:72:4f:e2:20:e1:01:1a:dc:bb:06:72:24:a1:
52:61:76:20:4a:77:8c:eb:e7:66:1f:23:b0:d8:75:77:00:6b:
b0:54:5b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:53 2025 by rpki-client