Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File: ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier: 0ZKtAWop8MctdVTpdgeCjJ16GN7n9Qdh1BHWGyVZ8HM=
Subject key identifier: 83:86:77:E3:AC:72:F8:EB:E0:12:F1:DB:81:CB:5B:2A:90:8E:C9:30
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial: 019A4D05B08B4D150BFC5ACCFC3982B3743F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number: 0992
Signing time: Tue 04 Nov 2025 04:00:09 +0000
Manifest this update: Tue 04 Nov 2025 04:00:09 +0000
Manifest next update: Wed 05 Nov 2025 04:00:09 +0000
Files and hashes: 1: KsdzajN30uY3uVW5kyMxHSnmmxU.roa (hash: zPl4WlZ128vZPWoXYgcZMpH4uHo4BsQGARRVppJ+QiM=)
2: astDnoUMy7KdbJvyyxpisdgmA6U.roa (hash: bNOHZXfFwYEoQ+krisGaY+9Oi+royBJVdqPCFFROjZw=)
3: mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa (hash: w701bJj/u4XbtOJf+uHhePRlT4YH8B1JtsulPqw9bWk=)
4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: /1eCIgC34uKTMK3AkwWYTIjFhxCY/y54MJTLe0/IhSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:b0:8b:4d:15:0b:fc:5a:cc:fc:39:82:b3:74:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Validity
Not Before: Nov 4 04:00:09 2025 GMT
Not After : Nov 5 04:00:09 2025 GMT
Subject: CN=838677e3ac72f8ebe012f1db81cb5b2a908ec930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:58:50:db:58:e1:d9:3b:94:18:3f:c9:b9:
58:05:77:58:ab:de:ce:08:69:51:ca:43:8f:c3:cd:
ab:b2:3f:ed:5f:4e:c0:92:af:ba:b0:c5:12:36:64:
bd:0b:39:1f:26:20:71:22:61:85:05:ad:3c:97:d9:
40:d0:a4:8d:2c:12:26:d5:46:2a:39:f9:7b:5d:e0:
17:7d:e6:bb:da:a4:42:ad:91:17:1e:5d:93:f3:3e:
b4:ff:eb:da:2b:1a:40:e8:ea:2f:39:52:cf:42:ae:
b4:14:52:b8:02:40:ba:78:1b:e0:0a:48:b8:92:4f:
09:2f:69:2c:0d:43:01:d5:e7:59:d1:f3:95:d8:fc:
f6:b5:e4:71:a4:bd:03:7e:30:15:b1:d1:72:de:f0:
89:f0:11:20:5a:0e:b7:10:4b:70:e5:37:55:47:67:
d7:8d:0f:8b:a6:20:bf:66:8d:d1:51:74:f9:df:68:
87:8b:6c:bf:1b:22:19:ae:91:f9:dd:ef:f0:47:ca:
c7:89:93:c6:79:66:79:91:19:c5:11:c0:35:9f:c5:
fa:f3:1c:4a:8e:d3:f7:70:ec:7d:82:ba:60:32:35:
c1:f7:6d:06:28:f3:73:f5:7c:64:50:31:75:a1:e7:
38:57:a3:f4:b8:3f:be:ec:c0:d3:ab:12:ac:f8:ec:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:77:E3:AC:72:F8:EB:E0:12:F1:DB:81:CB:5B:2A:90:8E:C9:30
X509v3 Authority Key Identifier:
keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1b:5f:b8:fe:35:c7:e8:f5:27:a6:85:09:19:38:96:82:f3:
04:d0:55:34:be:ee:6f:7c:ec:f5:ed:9b:be:b6:cb:dc:0b:cd:
98:b5:4e:d0:4c:a0:dd:c9:e9:1a:58:9e:a7:74:77:c4:01:9b:
8e:40:c0:57:9b:ce:48:56:49:98:06:66:e2:25:6c:00:71:b4:
b3:9d:e4:3c:58:c5:6a:a6:15:28:b9:ab:45:1b:cd:ab:f0:8e:
2f:7e:5b:22:f0:e5:27:60:2e:87:c4:31:f9:c3:b8:c7:06:84:
1d:24:37:ad:73:19:7a:3a:39:03:7d:22:8c:78:28:02:2f:4f:
b3:46:3a:b8:6f:ee:f6:39:16:2b:5a:37:19:e6:62:54:b0:f1:
a2:62:1b:72:6d:57:f5:b6:7e:7e:5f:60:87:bc:df:aa:3f:38:
1d:50:19:c0:4b:65:22:df:c9:80:a5:97:92:c5:c4:23:95:e1:
30:8c:98:03:33:ae:45:35:5a:f3:5a:94:d3:db:1b:1d:55:ba:
09:d2:58:09:f6:1d:bb:48:b9:ac:0a:c7:d6:0d:d8:e8:28:6d:
e7:95:5c:e1:b2:c3:65:11:8c:56:97:67:17:be:a0:29:7e:c9:
ef:fb:d0:d1:cd:35:68:7e:9e:93:56:71:94:57:b1:78:7e:9f:
4e:e0:f0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:22 2025 by rpki-client