Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
File: yydiBw8SVD8bCscZgqxxAlgQ_18.mft (raw, json)
Hash identifier: qj6r4zJ1nKrolDlet0KikMpcxvEP7UW//d/apxPVzBY=
Subject key identifier: CA:3F:28:0C:00:C3:51:1A:B9:4A:D6:4B:7E:8F:42:17:0A:F8:96:0A
Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
Certificate issuer: /CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Certificate serial: 019A4DE182CCDB430D2C044CA822CFD37616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
Manifest number: 0928
Signing time: Tue 04 Nov 2025 08:00:15 +0000
Manifest this update: Tue 04 Nov 2025 08:00:15 +0000
Manifest next update: Wed 05 Nov 2025 08:00:15 +0000
Files and hashes: 1: rnkd3aH7pF24TCTJAylZcN41MhA.roa (hash: 1F1EwEJKOPyNW/NE+25aYXPL5wdqrlw2U+Z2MniW564=)
2: yydiBw8SVD8bCscZgqxxAlgQ_18.crl (hash: tb1w+YaoJM1yotoPtiSHsTjoela4HKaT2xDZhgL7xx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:82:cc:db:43:0d:2c:04:4c:a8:22:cf:d3:76:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Validity
Not Before: Nov 4 08:00:15 2025 GMT
Not After : Nov 5 08:00:15 2025 GMT
Subject: CN=ca3f280c00c3511ab94ad64b7e8f42170af8960a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:89:81:f7:64:dc:12:54:70:21:da:61:4e:
2f:98:80:68:2e:46:a2:16:6f:ce:5e:6a:e7:84:41:
81:7c:20:31:27:35:61:8f:bb:94:2a:2b:86:e6:53:
a1:f1:8e:2b:3f:39:ec:09:a1:95:ae:50:6a:a9:ae:
95:17:99:57:e0:7c:04:8d:a5:ee:1f:22:9a:a1:99:
94:5f:c6:26:f2:f9:e3:45:4b:aa:2b:a7:e2:31:85:
a3:fa:a6:11:da:7f:20:05:4a:02:2d:b4:49:30:12:
45:42:06:dc:90:ab:3e:1b:61:18:7e:bc:38:0c:f5:
f6:67:be:cb:18:54:08:57:0f:f5:e0:b8:da:75:76:
19:f8:8d:33:68:25:0e:7b:ca:0b:9d:1e:99:74:23:
39:43:c9:ef:4f:76:65:e0:7f:75:fe:e6:2b:b3:ed:
94:ab:bc:81:72:9c:67:d4:ef:68:5a:e5:9e:64:d9:
97:73:c6:03:b6:2e:76:88:50:02:ce:ee:77:07:48:
69:d2:89:7e:60:07:62:eb:95:c7:70:91:10:b4:6a:
2b:91:7e:e6:b4:23:f0:44:ce:34:c8:88:08:28:a2:
66:00:b6:33:c2:70:3c:8b:b5:7a:2a:3e:d6:43:cc:
7a:4e:52:7d:69:a5:ff:3e:b4:df:e3:2d:85:ef:a9:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:28:0C:00:C3:51:1A:B9:4A:D6:4B:7E:8F:42:17:0A:F8:96:0A
X509v3 Authority Key Identifier:
keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6a:97:af:98:ab:62:b2:52:4c:d2:7b:f4:9b:4f:23:82:d3:
94:1c:a5:29:91:02:ef:e4:6c:90:4a:0d:d6:e0:5b:89:25:d7:
9e:05:1d:1e:0c:7a:42:64:86:ce:c1:6e:18:ed:62:9b:94:90:
30:be:af:d6:a7:ab:c5:55:33:d9:3f:7c:f9:38:58:fc:15:98:
02:62:98:5f:60:af:d0:2a:66:54:e1:cb:54:20:bf:12:69:a1:
3f:61:ee:87:fc:97:3f:f6:b4:02:6f:53:ba:8e:bb:3d:c7:5b:
dc:4f:07:73:37:42:7d:7c:49:26:c8:2b:03:32:ab:d6:2c:f3:
7a:d0:1f:2e:f4:32:ad:7a:f0:3e:ba:73:f6:cc:5c:6e:85:97:
cf:81:ac:d8:37:22:fe:a6:a7:cb:65:a4:28:04:2e:3a:4c:90:
a4:1a:f0:9c:87:b0:0c:d3:b5:a6:67:1d:cd:54:a9:33:fc:8d:
d6:7a:2b:25:19:7c:1f:7d:89:65:fb:70:cf:2c:eb:c4:ba:8f:
6e:d8:c5:4e:22:20:47:40:1b:1e:1c:e6:3d:a4:6d:2b:e6:66:
c6:a4:58:5b:64:4e:f9:2b:91:ce:59:78:e8:89:fe:6c:71:9f:
89:26:1d:83:67:5c:e1:3f:60:a1:01:22:c5:03:2d:d6:9d:cb:
1c:b4:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:58 2025 by rpki-client