Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: 98cqbSbRNX0+ZSzRZp8mzoRcoqCONlc2uT4kquFy7qA=
Subject key identifier: 28:40:5A:63:EA:4B:CF:72:93:12:B8:6D:6F:E3:0B:C3:D0:1D:3D:8C
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 019A4DE1C4F07BBCF8B85B9A67C52FA78969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 15D3
Signing time: Tue 04 Nov 2025 08:00:32 +0000
Manifest this update: Tue 04 Nov 2025 08:00:32 +0000
Manifest next update: Wed 05 Nov 2025 08:00:32 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: EXnPrmCUeYbAhm3uclttT/LDyGUsJler+35pwvSrP/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c4:f0:7b:bc:f8:b8:5b:9a:67:c5:2f:a7:89:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Nov 4 08:00:32 2025 GMT
Not After : Nov 5 08:00:32 2025 GMT
Subject: CN=28405a63ea4bcf729312b86d6fe30bc3d01d3d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:8e:4a:f1:19:da:6b:a5:d7:ed:7b:59:a1:
4c:97:7d:cb:ed:55:45:fb:78:30:b6:ec:5a:59:35:
a7:d3:9d:15:05:73:7a:9f:1f:41:fc:ee:cd:4d:66:
ef:cb:b7:3c:2c:f0:e3:c9:bf:9c:fb:66:2d:4a:48:
cf:90:80:dc:8b:88:8d:65:45:c7:43:cc:59:aa:ef:
e1:96:d1:1b:fe:7e:5f:85:71:36:94:31:28:0f:18:
4a:02:c6:78:8f:31:40:16:67:73:6c:39:a2:ef:28:
2a:7e:ae:57:f4:a7:60:15:67:73:84:2f:f2:02:ec:
c9:36:b5:51:bc:1e:4f:48:8a:66:8b:29:a7:c8:50:
23:a2:f7:54:0f:8c:45:5a:9f:76:83:bf:19:3c:f2:
09:50:39:1e:a1:63:9d:20:2f:83:fc:af:0e:f5:97:
e0:8f:e9:b3:f6:da:67:d7:60:98:ca:05:a4:94:57:
0f:a2:b6:34:9b:d2:1e:9e:3c:13:58:6f:53:1f:9c:
a7:15:8d:c1:24:4b:41:5c:2a:12:e1:46:d0:86:e6:
48:fa:18:73:61:22:d5:09:47:fa:c3:e9:3c:85:46:
e4:d7:ba:99:72:55:d3:f2:4c:c3:78:12:2e:0c:9c:
1e:d4:db:9a:8d:39:6b:27:02:38:3b:96:9b:ef:84:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:40:5A:63:EA:4B:CF:72:93:12:B8:6D:6F:E3:0B:C3:D0:1D:3D:8C
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:69:d4:9a:b6:f7:71:13:95:c6:31:41:80:15:bd:7e:41:5b:
ae:f1:05:3b:90:cb:9b:ef:34:1f:f3:45:f6:21:29:7c:36:49:
e2:1b:1c:6f:80:e1:20:e9:59:a5:f2:dc:3a:1d:53:12:5b:96:
25:ed:1f:cd:cb:7f:78:5d:fa:29:09:37:04:42:58:7a:68:bb:
40:e7:e7:50:80:75:17:3b:ec:fe:89:2b:35:a5:45:71:47:ed:
9c:3e:d1:cd:b9:9d:8e:a7:a1:da:7d:72:22:c0:63:eb:b2:19:
7f:c2:3b:bd:b9:66:7d:45:20:fa:79:e7:06:77:7d:6d:83:8f:
9e:23:13:a1:4f:a0:91:75:ff:6e:17:d6:bb:49:75:b2:fc:b2:
24:b0:46:b3:7a:87:8e:bc:80:a7:11:4f:2c:20:88:c0:9f:73:
1e:03:68:79:4d:06:b3:14:bb:ee:8f:92:00:24:ed:c9:c1:b4:
10:8e:0e:86:ae:0f:89:e1:23:95:93:d5:e0:64:14:ee:7f:89:
85:77:e3:de:09:ab:37:b7:1e:1c:88:d6:f2:31:3f:a2:8b:bc:
98:e7:45:c7:05:4c:99:44:43:37:8e:6f:51:e4:49:ef:6a:5f:
fb:33:1f:ea:74:e6:49:20:a5:a7:45:5c:e6:fb:a9:c1:1f:3a:
f5:0e:fa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:46 2025 by rpki-client