Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: bMN3q93EYjIIKKizoCMnT6VcC91bYhU03dP/yPbC5Ww=
Subject key identifier: C6:07:D7:89:66:1C:F8:2B:FC:BA:58:F2:88:D0:C6:2A:12:A0:39:E1
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 0199FDD90B0DDBBD145B2C9AC613BD19857E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 08F4
Signing time: Sun 19 Oct 2025 19:01:23 +0000
Manifest this update: Sun 19 Oct 2025 19:01:23 +0000
Manifest next update: Mon 20 Oct 2025 19:01:23 +0000
Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: l/IRo3osLGaIWv+eGIs1acoOOW/BtffyG9FTajln1j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:0b:0d:db:bd:14:5b:2c:9a:c6:13:bd:19:85:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Oct 19 19:01:23 2025 GMT
Not After : Oct 20 19:01:23 2025 GMT
Subject: CN=c607d789661cf82bfcba58f288d0c62a12a039e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:1a:87:a5:f9:03:f6:fc:3f:e4:b3:a0:ad:
f9:6c:01:b9:4b:39:32:c0:f9:49:d8:b1:bf:b9:05:
e3:6b:4c:f4:fe:66:39:fb:17:10:70:61:1a:69:cf:
c6:61:ee:2a:dc:ed:13:1c:53:c6:ac:2a:35:37:03:
99:d0:70:51:f7:f9:1e:11:49:64:e8:95:92:2f:6a:
e3:cc:a3:28:e7:61:43:47:2c:97:11:3b:7a:3e:a9:
98:41:16:78:22:ab:01:3d:e1:ed:c2:54:e2:78:75:
41:98:45:73:41:f4:43:e3:70:29:ec:e0:a4:ee:ed:
00:99:8d:9c:2c:a5:53:21:bd:85:81:fd:b2:54:15:
47:93:aa:db:fd:26:5e:84:1a:67:37:38:ba:e4:d3:
4c:cd:62:ad:89:d6:93:4b:8a:a0:51:be:7c:5e:9e:
b4:08:49:f6:e5:33:95:c3:6d:27:a5:ae:fc:ac:b4:
e1:9a:61:96:a7:0b:0f:f5:2f:0b:67:89:e3:a0:18:
36:27:95:b8:ec:bd:52:19:70:19:85:a5:13:26:c4:
5a:ab:2f:b4:e1:c9:4f:ae:83:f3:9e:43:45:71:fa:
5d:e7:b5:0a:e9:5a:2d:ec:b7:30:42:15:58:33:8a:
33:b9:43:ea:a5:63:ba:3c:df:28:32:ec:19:33:c9:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:07:D7:89:66:1C:F8:2B:FC:BA:58:F2:88:D0:C6:2A:12:A0:39:E1
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4b:b3:b0:25:07:ae:87:bc:ff:58:1a:0e:b6:8e:90:9d:4e:
0e:24:9e:7e:77:75:3c:80:e6:4b:49:61:8d:0f:83:e9:5b:fa:
e7:d9:71:4f:5f:d8:54:d1:12:a5:f3:24:ac:5b:3a:d3:6f:00:
43:7a:bc:d0:ba:24:1f:22:e5:3a:cb:a9:16:6b:f0:45:92:37:
0f:0c:6b:48:af:05:2f:be:f7:a1:79:c4:bc:40:b6:f7:be:54:
57:0b:0d:d5:0d:f8:15:34:0b:64:6b:df:9f:a2:7d:02:69:ea:
67:ba:97:fe:0f:51:94:cd:db:b9:9c:9b:72:03:14:7b:0e:68:
c4:ef:3e:de:23:d8:9e:d6:75:e1:a1:fa:3c:83:08:c2:82:2d:
bb:7d:8a:f4:5e:8f:fd:59:4e:c4:69:3c:58:05:e0:8c:9e:cf:
5d:7a:9c:08:29:76:02:ac:9f:92:e4:2f:7c:b6:ff:79:07:ae:
d0:08:ff:c2:9b:82:45:cb:60:8a:18:5d:16:f0:67:f6:6e:ed:
35:52:9e:4d:84:e6:00:14:97:b2:9e:78:23:b2:b1:83:8f:3f:
fa:9c:00:fe:56:b3:9e:14:4c:cc:1f:b0:e3:4a:ab:01:ea:3f:
d9:85:26:8d:c8:50:4b:a9:8a:0b:3e:de:ff:b6:94:25:ba:3d:
09:31:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:46 2025 by rpki-client