Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
File: yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json)
Hash identifier: ttxWdmuYwPLFDjeJJPPR69MYiVEAM/ld5F7TVUJEs1s=
Subject key identifier: 6D:E3:A1:B0:3E:09:40:F1:F1:87:FD:41:41:85:61:57:8C:5F:6E:24
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Certificate issuer: /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial: 019A4DE1A9330B69B0751BD2B332067A8592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
Manifest number: 0702
Signing time: Tue 04 Nov 2025 08:00:25 +0000
Manifest this update: Tue 04 Nov 2025 08:00:25 +0000
Manifest next update: Wed 05 Nov 2025 08:00:25 +0000
Files and hashes: 1: xfu021S1jJtouexa28jA9KZojkw.roa (hash: ydYZd2IQ/M2DMWZopd0Btk/t60vr6MsiYiLHbkf4rwI=)
2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: lP8Sys99Ml4e2bqdS5uZBw5rYEh73g2opDNZvc8YKEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a9:33:0b:69:b0:75:1b:d2:b3:32:06:7a:85:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Validity
Not Before: Nov 4 08:00:25 2025 GMT
Not After : Nov 5 08:00:25 2025 GMT
Subject: CN=6de3a1b03e0940f1f187fd41418561578c5f6e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:41:43:61:d1:72:d9:eb:8d:c5:90:5c:c4:2e:
cd:aa:6a:6a:a3:a3:91:aa:98:9a:cc:9a:04:14:2e:
e1:fa:90:9a:00:94:cf:32:5e:83:b7:c1:10:aa:e6:
cf:78:69:d0:7f:ef:77:34:79:16:d7:e7:09:f4:8a:
9a:21:97:c2:a1:0d:39:ce:e0:34:ca:4e:90:49:c9:
80:0f:77:09:2c:63:60:67:9b:9c:ca:0a:5e:f0:84:
ee:95:e8:fe:81:7d:a8:91:47:13:f1:c2:2d:ee:50:
25:50:5a:a6:89:d0:97:2c:49:46:41:00:43:99:6b:
0d:c9:47:04:fe:5d:2a:2a:1a:07:de:4a:54:cb:b6:
09:86:cd:ce:40:23:18:b7:3c:77:bb:bb:4e:17:5f:
c3:1b:3b:e9:7d:fa:56:7e:cf:96:65:25:6c:a6:16:
0b:28:23:14:bb:44:80:41:3a:ec:02:59:a9:b3:4e:
8c:7d:9e:f5:62:29:9c:55:36:71:17:d7:ae:73:72:
23:42:17:ba:4b:2a:ee:64:9d:bf:92:a4:64:ca:96:
8f:66:a0:fd:2c:41:5e:5f:80:72:28:fc:99:04:53:
e7:8c:11:46:1f:57:56:12:68:23:b8:5e:ca:54:0c:
62:54:c9:51:9f:53:0b:25:4b:42:0c:7f:b9:1d:cc:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E3:A1:B0:3E:09:40:F1:F1:87:FD:41:41:85:61:57:8C:5F:6E:24
X509v3 Authority Key Identifier:
keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:87:04:ca:c5:ab:22:88:e9:45:f7:fa:5b:42:d0:46:67:97:
2b:18:d2:2d:cd:3d:cb:08:f6:83:f7:73:e3:bf:63:07:c3:b4:
56:5d:c6:bc:0f:ee:9d:5c:04:f5:af:cd:fe:2c:76:57:34:de:
6a:ea:dd:8a:30:36:22:42:ee:4a:d2:4c:0e:cc:9b:dd:20:a6:
cd:0b:ca:45:be:c3:62:19:99:8c:18:db:b7:bc:09:ff:88:2e:
93:30:15:d8:5b:a8:0c:3c:c6:87:d2:df:b0:e5:59:41:ac:32:
cb:07:18:0c:3c:e1:04:09:83:1d:8f:a3:96:3d:51:4d:60:38:
8a:29:35:52:18:65:66:70:ca:36:e5:5f:64:ca:b8:21:d4:19:
29:e5:be:35:3d:22:83:55:db:c5:66:c7:d9:c4:68:ce:d3:e7:
d9:07:5c:c0:72:bf:85:5a:5f:1d:cc:2e:61:6c:48:1c:08:c6:
2f:69:e9:91:07:b1:d5:9b:b6:e8:4e:60:a8:5a:89:6e:88:77:
5e:50:f7:b9:c9:dd:22:db:d4:e4:25:0d:66:95:dd:e7:9e:2e:
78:1a:1a:aa:77:f6:7e:c9:b5:88:11:15:ca:1d:6c:e0:f6:6b:
aa:61:ca:ee:b4:e0:72:04:24:84:5d:f3:72:74:a9:b9:9c:cb:
ea:ce:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:42 2025 by rpki-client