Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: NQKd8q7QMOBQCGCaOKeoK4AEATJ251j2G/XU3nHrtD8=
Subject key identifier: 8E:80:51:D8:CB:B8:31:41:60:F2:94:E5:04:71:BA:DB:9A:63:F7:30
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 019A4C612DF769AF02EEA75EC0AF5BDCB3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 11A9
Signing time: Tue 04 Nov 2025 01:00:28 +0000
Manifest this update: Tue 04 Nov 2025 01:00:28 +0000
Manifest next update: Wed 05 Nov 2025 01:00:28 +0000
Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: AzttGWSA1Zj+b1x7/pSf9shs3GL8Rj/rNbSwmIH8fbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:2d:f7:69:af:02:ee:a7:5e:c0:af:5b:dc:b3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Nov 4 01:00:28 2025 GMT
Not After : Nov 5 01:00:28 2025 GMT
Subject: CN=8e8051d8cbb8314160f294e50471badb9a63f730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:be:aa:c0:80:fa:12:2a:9c:20:9d:b7:de:
b8:e1:54:b6:6e:7c:06:9b:fb:c9:1d:8c:15:9b:d6:
ef:d9:79:8e:1a:4d:f3:20:df:68:7a:0b:cf:c5:c9:
00:bf:74:67:e9:1f:c9:d4:ba:c7:40:ab:6c:c8:fc:
58:e4:c3:73:a1:dd:98:15:a8:9e:00:51:1c:9f:f6:
db:e7:03:52:25:ee:6d:63:66:e7:a5:23:1b:ff:3b:
2c:d1:6c:c8:89:30:71:1a:28:5f:3b:98:75:f5:a4:
1e:8e:dd:c8:a7:8c:a7:d2:74:c3:a8:5b:c8:c6:69:
c3:de:3b:13:40:e9:c6:6a:48:1a:da:73:fc:51:c6:
37:5a:05:b0:5b:5d:9a:78:78:68:9a:e4:f9:cb:85:
17:97:ac:c9:8c:07:e7:0a:f6:55:ed:ef:f9:95:6c:
f1:c4:aa:5d:cf:33:af:2a:25:3b:4b:77:6e:d1:af:
ee:55:d4:1b:7e:ac:b6:ba:c0:46:8d:84:0b:15:d5:
6d:69:95:f9:34:3a:7b:03:e3:46:d4:51:33:34:09:
ff:0b:97:33:01:4f:9c:0c:41:e8:8c:5d:18:36:67:
2f:8d:0e:ed:b2:f1:2a:d3:66:99:6d:c9:86:fe:de:
eb:53:f8:15:39:4b:46:b9:17:b4:e9:27:42:be:fb:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:80:51:D8:CB:B8:31:41:60:F2:94:E5:04:71:BA:DB:9A:63:F7:30
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:01:4a:59:42:f7:48:73:4b:52:7c:8c:1c:92:3d:bd:c0:b1:
ef:88:89:6a:c9:7a:3e:0b:59:5f:7e:af:5d:5c:25:0d:a5:52:
86:9a:51:2e:e0:86:fa:c6:3a:8c:e2:90:2c:71:0a:72:48:9e:
31:46:bc:3d:cc:7c:98:01:b4:cf:85:f8:14:b3:b8:7f:49:91:
ed:20:90:1a:87:ad:b7:21:5c:b4:6d:5c:21:2b:a9:e3:4b:c1:
25:27:b0:f2:5e:6e:ca:2f:e0:90:91:61:34:04:3d:2b:95:31:
89:0c:38:ba:0c:f7:81:eb:ff:bb:41:03:b3:9b:34:99:67:35:
80:dd:27:f6:4a:26:b2:bf:62:36:78:7b:dd:e7:0e:98:36:97:
f4:14:96:4a:8d:e2:75:9f:64:ce:95:a4:62:c7:07:e1:b5:df:
76:3b:35:2d:ef:62:81:3c:5f:f9:40:4d:d1:39:d5:ef:89:b7:
16:0a:66:bc:f6:c4:86:fc:a0:9d:84:6e:aa:52:56:fe:53:6a:
ea:9e:3f:0f:61:33:55:f9:b8:37:d3:93:7c:05:a6:e4:16:0d:
1a:69:a3:11:ed:87:d9:dd:6b:ea:2b:42:de:2d:6e:6c:a9:b8:
f4:99:a8:b5:37:fe:4b:61:43:e6:69:cd:d9:dc:af:d1:81:32:
48:84:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:50 2025 by rpki-client