Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: eUwLcWNM7ystlwRKkUiJUa7VClObA7SCI3gyPJkuXKk=
Subject key identifier: 26:23:01:C3:FB:E2:6F:63:21:1A:DE:AC:C1:E7:06:61:41:F7:C9:05
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 019A52D19937B816F566AE2B05F663404664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 0281
Signing time: Wed 05 Nov 2025 07:00:59 +0000
Manifest this update: Wed 05 Nov 2025 07:00:59 +0000
Manifest next update: Thu 06 Nov 2025 07:00:59 +0000
Files and hashes: 1: Ef8_zrRgEL0CLqM-IuSA3dX-ctc.roa (hash: xDWi6ors7AjB8a/zdFVsFoCBfh3PoH6v4N9RTJZoFCo=)
2: wvSIKLseDCti9NDqb3hBoHBh3tM.roa (hash: JuhvfPP6PYd4BnfxxERmMrnoz56rmfAtM3i5xnGfuRs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: jFfzu0/WgrCQc6hlKC+RsEtMjo7lbA66+/H8pjoZBe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:99:37:b8:16:f5:66:ae:2b:05:f6:63:40:46:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Nov 5 07:00:59 2025 GMT
Not After : Nov 6 07:00:59 2025 GMT
Subject: CN=262301c3fbe26f63211adeacc1e7066141f7c905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:37:88:81:34:27:84:d8:42:70:da:ad:12:
cd:9a:a4:83:77:fd:32:9c:d9:c3:2d:26:92:9a:02:
16:fd:2e:92:a6:20:f8:7e:60:b7:77:be:75:d2:8a:
f2:f9:47:10:e9:d3:b9:b3:b5:37:e7:87:9e:6f:1a:
80:62:65:ee:e5:f3:58:29:46:e0:78:30:3b:3b:ea:
84:1a:7a:48:3d:77:cb:6d:a0:04:c8:41:f7:32:0d:
03:f6:df:a3:f3:38:98:6f:61:fa:90:c2:6c:d8:fc:
9a:85:5b:91:c0:9a:89:de:8f:51:a9:44:52:5d:f8:
c7:35:bb:15:35:7c:65:c0:b3:c8:49:64:d8:e3:2f:
73:8a:6d:cf:7a:ea:97:ef:f3:8f:36:a6:9c:57:69:
75:8d:72:97:2d:f0:bf:33:d5:08:21:e7:68:d3:d9:
65:35:03:7d:43:64:e1:31:d8:7c:31:62:f7:68:f4:
c9:f0:a3:83:e1:c9:a1:40:e7:5a:90:5d:4c:d7:4b:
d3:20:14:7d:95:f8:01:ce:37:9c:24:50:19:91:01:
d4:ef:9b:6d:a6:48:63:af:f8:63:f4:e5:f8:1e:2b:
da:17:a8:97:d2:96:07:8c:9b:b6:f8:67:44:12:d2:
7c:21:c7:07:56:f4:3f:9b:a1:d5:ce:e0:b3:4d:7b:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:23:01:C3:FB:E2:6F:63:21:1A:DE:AC:C1:E7:06:61:41:F7:C9:05
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:da:2e:69:a1:4e:f4:bf:8c:a2:97:3f:56:af:00:f8:8b:ef:
c0:af:3c:00:de:27:f5:d6:ed:4d:a5:a4:cc:f0:c4:ff:db:f0:
7f:f1:2a:4b:23:df:07:12:48:e0:ee:b0:9f:64:5b:57:b2:f7:
77:c7:4b:5c:d3:07:86:5e:4b:b2:ea:f0:43:96:59:5f:f9:00:
ed:a7:11:91:b4:db:0d:29:9e:5a:89:11:ba:c6:4a:49:d1:6b:
5c:69:b5:a6:76:c8:7d:74:5c:4d:9d:5d:6e:1b:7f:a4:4a:c4:
90:3c:b9:60:99:2e:f6:93:2d:b3:35:ce:93:a1:be:06:b7:61:
56:fe:da:a2:16:2d:20:16:b0:17:53:20:21:0a:57:8c:c9:d6:
00:11:af:12:bf:b9:83:ae:2e:a9:3e:1a:97:3a:e3:63:d9:99:
f9:e5:94:99:4d:33:c1:6a:c3:39:9d:0f:f0:49:b8:6e:19:5d:
5f:bb:dc:b8:bd:67:b2:d0:17:af:6a:a4:5c:0c:e6:e1:eb:43:
82:13:65:69:2a:7d:d7:d7:f8:59:90:3d:52:e8:5c:37:92:ea:
41:21:80:9d:d3:37:0e:aa:42:6e:cd:52:de:93:c6:bf:ee:cc:
30:10:1b:fd:0b:4d:ea:6c:54:ee:59:4d:fc:d2:4f:01:fa:6e:
38:76:d4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:49:30 2025 by rpki-client