Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
File: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft (raw, json)
Hash identifier: iTon9a1CTFgebY1xD1v2l4qcvbFa1vblMwyiRazAM28=
Subject key identifier: 6F:45:9C:E0:45:4A:F4:F7:67:C3:AF:C4:A6:B7:1A:5D:62:53:8B:39
Authority key identifier: F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
Certificate issuer: /CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Certificate serial: 019A4E86D21F2387D0B470891CDBB8BECF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
Manifest number: 0373
Signing time: Tue 04 Nov 2025 11:00:49 +0000
Manifest this update: Tue 04 Nov 2025 11:00:49 +0000
Manifest next update: Wed 05 Nov 2025 11:00:49 +0000
Files and hashes: 1: 1-PJ8uFT3vIGcdh8Ryvstj5V11gs.roa (hash: flh68N5wBml9poaLXGZmGeNQ/HSV3CHvsWwwddNW1dc=)
2: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl (hash: 43njDCUllkpQIceV0D2WQSrIDGqelrxxkhKCAQz1iDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:d2:1f:23:87:d0:b4:70:89:1c:db:b8:be:cf:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Validity
Not Before: Nov 4 11:00:49 2025 GMT
Not After : Nov 5 11:00:49 2025 GMT
Subject: CN=6f459ce0454af4f767c3afc4a6b71a5d62538b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:cb:c9:c3:87:51:27:f4:ee:97:2d:06:3c:
9d:ff:c2:06:c2:63:f2:8b:31:10:bb:35:14:85:c8:
c6:3d:97:02:97:11:2a:fa:d8:c3:b4:fa:76:22:80:
c7:e1:b3:05:28:79:79:9e:66:f0:49:e2:dc:e6:78:
07:78:52:42:64:a6:f5:d9:0c:18:db:f5:cd:02:51:
ba:a9:5d:21:a6:5f:b6:c8:bd:d2:8e:34:f9:d8:b9:
40:8d:9e:a4:6b:0a:22:17:3d:d0:a3:c3:e8:d1:ba:
dd:d8:89:df:f2:f7:97:a0:3c:18:70:c8:25:df:c9:
85:bf:de:5f:6a:15:c9:86:2d:f1:96:51:3c:2f:3d:
6f:90:bc:8d:34:29:8c:55:16:c8:7f:5b:5c:7a:9e:
52:9a:37:94:cc:8c:09:5d:9c:c7:df:68:cc:fa:b8:
75:92:51:38:53:27:fb:b1:a2:1d:ad:00:d4:36:15:
b4:0a:57:89:3e:37:f6:7c:aa:c1:2d:54:ed:90:a6:
a9:a5:f4:f0:98:4c:e2:72:9a:0a:7b:b8:ec:8f:0a:
0b:4f:e1:a2:79:91:35:65:ea:6d:1a:fb:7e:0e:e7:
47:b2:ee:45:a1:43:ea:cc:82:ff:21:60:1b:52:74:
5d:0f:42:b7:df:2e:cc:58:0c:ae:1e:0d:96:b1:8d:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:9C:E0:45:4A:F4:F7:67:C3:AF:C4:A6:B7:1A:5D:62:53:8B:39
X509v3 Authority Key Identifier:
keyid:F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cb:e4:3a:0d:75:36:62:35:83:2d:86:db:32:b8:93:64:45:
a4:6f:61:92:84:3f:76:a5:0f:c0:31:d9:89:a9:a4:de:78:e2:
84:b0:ea:2f:ab:03:37:3a:72:18:85:10:38:60:4f:24:cd:8f:
b3:33:85:f9:18:e6:9f:47:06:9f:04:42:85:ca:6c:41:64:81:
a3:78:5d:df:87:4d:c4:68:27:ea:f8:47:f6:10:01:f6:d5:89:
83:57:41:4d:72:67:ab:ba:e4:d2:e5:54:95:6b:09:50:56:ef:
f9:7d:4b:c8:1c:a3:76:12:fd:15:a0:f4:cf:3c:98:9b:4e:0f:
56:1d:66:20:c9:51:bf:26:0a:7a:70:c9:50:7b:bb:b1:85:62:
d2:2f:b0:a8:48:63:63:66:5a:f3:2a:36:58:cc:a6:41:10:2d:
42:56:c2:c5:bb:9a:f7:91:58:97:7b:98:1e:e3:ea:9e:c1:69:
1e:e5:bd:8c:65:7a:10:2b:e2:df:8c:94:d8:42:76:2a:0b:f6:
34:12:31:7f:89:1c:a0:0a:90:95:2f:82:38:0a:cf:0a:b5:84:
33:d6:37:6a:aa:a5:a8:52:4b:fa:88:e1:39:aa:7f:c2:22:e1:
82:e6:94:7d:98:d7:24:6a:7e:23:d6:27:43:7f:67:a8:ba:30:
d9:ba:eb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:33 2025 by rpki-client