Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
File: yliutBKfjiybxCzRkYXI1_Dm6vk.mft (raw, json)
Hash identifier: WN4J2BB08SM9rOtgVoLoWeG1eK34kwq1vZTZZPJrd6M=
Subject key identifier: EC:1F:80:4E:7B:CB:92:70:F3:0C:C6:81:7C:A6:D3:39:B9:FC:0F:3F
Authority key identifier: CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
Certificate issuer: /CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Certificate serial: 019A4DE193467885A012E53498EC34B55028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
Manifest number: 07CE
Signing time: Tue 04 Nov 2025 08:00:20 +0000
Manifest this update: Tue 04 Nov 2025 08:00:20 +0000
Manifest next update: Wed 05 Nov 2025 08:00:20 +0000
Files and hashes: 1: 0HTDBk5MYK2X7vH3zirTqZcpE2s.roa (hash: Sj1nNxaVvmVnP+tRZkLAz31ImmjJvQaxWp+RCkXDwnM=)
2: WfvC6123xfKENVd-zb3XlASAszo.roa (hash: 6SvW+m32iHXt+VqGMoFD6E0jUHXyHvqrZQ85os+ovbw=)
3: yliutBKfjiybxCzRkYXI1_Dm6vk.crl (hash: ns//rb1qGXEU9zrYiKlH+oXajXVaiTOf5xt94HSYNo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:93:46:78:85:a0:12:e5:34:98:ec:34:b5:50:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca58aeb4129f8e2c9bc42cd19185c8d7f0e6eaf9
Validity
Not Before: Nov 4 08:00:20 2025 GMT
Not After : Nov 5 08:00:20 2025 GMT
Subject: CN=ec1f804e7bcb9270f30cc6817ca6d339b9fc0f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:d1:2e:77:80:a4:87:35:b9:d3:91:55:ae:
99:0d:c4:77:b1:97:04:ac:c8:c1:69:ed:19:12:d5:
01:12:17:31:7d:2f:e0:38:11:07:94:3b:27:f0:fb:
a9:a0:cd:68:ce:97:23:e3:51:64:08:09:6d:b9:6e:
21:e7:e2:2d:3b:cd:dc:4c:ad:64:b3:16:ca:75:6e:
e2:af:09:4d:0b:f8:f2:4a:8b:8f:a8:af:a6:e2:5b:
5f:91:ab:eb:2c:65:20:a8:21:a4:25:40:00:30:57:
07:32:5a:ad:8a:42:b1:7c:b5:e8:2f:70:c0:f8:e8:
a2:e2:5f:5f:fe:a1:25:a6:10:a8:b8:e4:26:0c:8b:
cd:e3:ef:30:02:c8:55:e9:7c:f3:fa:3d:e0:23:f3:
7e:fc:10:6a:a8:3b:47:84:ee:a0:f6:3a:ed:f8:d8:
8c:07:c0:e3:bc:a5:c6:ea:2e:a0:5b:34:61:5f:25:
64:9d:bb:08:7c:16:f1:d1:0b:de:d8:84:3c:24:38:
db:d4:d3:0d:0a:7e:0b:75:34:ac:17:54:53:57:2a:
a9:0b:b5:7f:d7:38:51:5f:ad:94:82:b3:cb:6e:d6:
2a:76:8d:e6:19:4c:35:6b:b3:19:d1:57:8e:47:30:
0b:ea:f3:de:0b:e0:72:9b:53:89:85:3d:2c:5e:f1:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1F:80:4E:7B:CB:92:70:F3:0C:C6:81:7C:A6:D3:39:B9:FC:0F:3F
X509v3 Authority Key Identifier:
keyid:CA:58:AE:B4:12:9F:8E:2C:9B:C4:2C:D1:91:85:C8:D7:F0:E6:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yliutBKfjiybxCzRkYXI1_Dm6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8f0218-543d-4943-8e3c-aef1b34a287d/1/yliutBKfjiybxCzRkYXI1_Dm6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b8:73:cc:97:55:d3:a1:67:a1:db:79:6e:68:ee:21:fc:20:
16:1b:5e:0a:3e:89:60:6c:87:86:4f:1c:78:8a:74:d2:98:e2:
91:8c:0e:ec:69:d0:84:3a:f5:2a:96:00:71:9b:4b:55:f7:74:
10:08:51:bd:79:b5:fc:f1:a3:90:8f:d2:81:81:59:e4:6b:17:
5c:f3:14:3f:bc:3d:76:8f:fc:a3:55:66:aa:fa:dd:ff:f5:9a:
69:43:72:6c:ec:06:f5:52:46:9d:82:09:b3:d0:48:9a:fc:9e:
0f:b4:e6:9b:b3:ce:21:b4:98:4b:f8:2b:a8:0f:11:10:b3:8a:
1a:72:e0:f9:ea:db:53:b0:50:a9:ae:66:f7:89:95:b0:81:4b:
43:e3:6d:95:ae:93:7a:33:b5:13:15:3a:00:f2:9e:2b:a2:19:
ac:d2:18:99:dc:a7:cd:ee:c4:86:22:07:8a:b5:98:92:17:53:
a3:1a:0a:00:f7:bc:6b:27:ec:56:99:92:53:90:36:f6:38:ca:
e3:23:6f:b9:a1:d4:c0:c4:83:3f:85:e8:c9:c6:26:7f:eb:38:
18:4b:42:ff:6d:f7:f8:dc:c3:f4:1c:ea:fe:67:11:4c:cf:f8:
34:15:40:4d:d6:63:9e:31:cb:12:8f:a3:b1:e8:7d:8d:e2:06:
62:92:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:53 2025 by rpki-client