Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: fn+/DqyujamrRXC/VPf5WMp8yCpNikmVO3u4PF+bLls=
Subject key identifier: 56:00:1D:55:FA:28:0A:57:87:E2:DA:16:34:73:7D:3D:05:BA:56:1A
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 019A4D05E306EF425BEE9323E0D625D0A833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 065B
Signing time: Tue 04 Nov 2025 04:00:22 +0000
Manifest this update: Tue 04 Nov 2025 04:00:22 +0000
Manifest next update: Wed 05 Nov 2025 04:00:22 +0000
Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: WmP/ryJJd1E6yms6ic+OtqsHXiLef9iUqsLO1vXgiB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:e3:06:ef:42:5b:ee:93:23:e0:d6:25:d0:a8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Nov 4 04:00:22 2025 GMT
Not After : Nov 5 04:00:22 2025 GMT
Subject: CN=56001d55fa280a5787e2da1634737d3d05ba561a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:b8:93:c6:42:07:2e:fc:a9:f6:31:00:85:
dc:ce:dc:e1:a8:88:f0:ec:42:da:ed:92:ae:29:67:
c0:54:c0:22:07:af:05:c2:a7:d7:04:6c:9e:52:6a:
9e:b5:f7:e8:90:ba:dc:bb:b9:bd:f7:20:d9:d5:33:
15:fe:11:f3:20:f6:eb:9a:1d:92:85:65:af:15:7a:
b2:66:82:1d:58:36:fe:8c:ad:d1:b4:03:1c:43:a8:
94:04:5f:a0:ea:a9:5a:df:97:ce:fd:81:ae:21:a5:
3c:11:e4:b5:47:85:98:15:f2:d2:99:c6:de:b2:ef:
66:56:f1:79:4a:30:c3:cd:01:38:79:b5:4e:a3:23:
bd:0b:13:72:c1:e9:a4:76:9f:41:30:b3:7e:cf:53:
5d:1d:55:1a:3b:f1:40:6f:6c:8d:f7:0d:d2:d3:95:
d3:6f:cb:1d:20:ca:07:18:8f:bb:ca:2e:f7:dd:b7:
2f:73:b7:1c:82:2e:c0:cb:e6:b4:22:9e:25:39:59:
b1:35:46:f4:87:83:c3:14:66:0e:a4:53:27:f7:51:
4a:e5:25:b3:cb:b5:d2:92:8a:dd:a0:89:49:04:4c:
04:24:c2:be:21:99:26:a1:7f:8b:a2:ab:8e:95:15:
a1:b2:81:61:b6:bf:2e:58:0d:9a:a5:45:6a:51:da:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:00:1D:55:FA:28:0A:57:87:E2:DA:16:34:73:7D:3D:05:BA:56:1A
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2e:ef:9f:16:ea:ed:62:46:e1:6a:a1:cf:49:3c:c4:f9:36:
1a:3c:f6:a4:d2:3b:f2:16:1d:8a:48:de:cf:a1:cd:20:38:5d:
6e:a7:4e:13:de:5a:64:34:85:18:2e:a0:89:d1:7a:b4:72:10:
17:fa:ef:db:c7:c4:98:a2:c7:44:f6:9d:15:db:e8:ed:a4:45:
d3:5c:d0:d8:a9:a5:c8:51:de:f0:3e:f8:0c:b4:8e:db:3f:6b:
ef:6b:42:94:fa:c2:30:71:1c:b5:31:c1:62:af:cc:25:00:34:
43:5c:79:02:0c:8a:d1:e1:3e:3c:45:bf:01:7a:cb:71:6b:f8:
2a:2f:87:c1:40:46:d7:ed:27:42:4d:da:ee:37:62:ce:6d:05:
8a:a8:b4:32:c2:9d:2c:6d:10:24:76:97:23:98:da:61:2b:b9:
de:f3:37:df:cb:66:e3:d6:a5:ec:90:50:37:54:dd:c2:da:a7:
f1:20:4f:61:0e:af:bf:21:11:ce:aa:c6:17:e7:7c:96:6c:ba:
e7:db:3d:25:55:c0:92:4e:73:33:7b:e4:8e:0f:63:87:b8:c4:
69:4d:a9:f5:78:0b:a5:72:c6:a2:5c:d0:0f:85:3e:1a:fc:85:
41:48:c9:61:3d:58:4f:b4:d9:29:c3:55:f9:09:6e:9a:26:9f:
6b:0c:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:48 2025 by rpki-client