Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier: JVE/GLZNLscwMbPccuq17EHpnhsaOOi88PYKX1ZpB44=
Subject key identifier: 5E:21:A7:A7:ED:B5:61:85:7D:AD:17:F5:D6:FF:27:8D:2C:B8:70:08
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 019A4D73B7F2F3CA688E6B126C67DEF01341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:20 +0000
Manifest this update: Tue 04 Nov 2025 06:00:20 +0000
Manifest next update: Wed 05 Nov 2025 06:00:20 +0000
Files and hashes: 1: fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa (hash: yAyZKCviC/wjO248iuIwgpoUtsrF9JNp+X9B5Xdnj9A=)
2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: vru9YPRw1XT7aY2Ys7O6Gucuxdt09TBux5/LnzpIIw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b7:f2:f3:ca:68:8e:6b:12:6c:67:de:f0:13:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Nov 4 06:00:20 2025 GMT
Not After : Nov 5 06:00:20 2025 GMT
Subject: CN=5e21a7a7edb561857dad17f5d6ff278d2cb87008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:85:05:6d:0a:34:d4:89:5b:bd:3f:66:55:
b3:64:2e:73:96:1f:75:2e:ae:96:5b:56:d1:40:12:
2b:92:a5:93:0c:f4:86:b9:81:2f:ef:70:55:7c:1e:
e8:ec:21:84:94:db:76:f9:31:53:31:49:65:c2:6e:
45:c4:17:d3:f7:10:7b:70:11:74:ae:0e:a7:18:4d:
d6:b2:3a:53:bf:1b:f1:45:6c:c7:28:10:14:ad:00:
75:76:bf:ca:40:44:be:58:0a:aa:5e:76:34:60:31:
51:11:ba:df:00:86:f0:e0:04:61:a4:b7:c5:f9:6b:
05:c9:98:e9:b2:49:65:af:ae:c8:bd:44:1d:a5:63:
b1:0e:10:bd:bc:a8:bd:01:d5:7a:ab:c2:c6:4a:3d:
ba:1f:5f:f8:c3:f7:13:87:82:ef:24:8e:42:46:4f:
fd:3c:49:64:1c:e1:b8:d4:31:82:28:6b:cd:f1:ff:
b6:49:4d:97:7d:d4:f2:b3:10:7b:4d:75:4c:85:97:
11:5b:22:7e:84:21:43:24:cd:74:e5:4a:66:fa:98:
56:c0:3d:49:b3:88:56:7a:8e:f7:bd:84:6d:14:5c:
a0:e2:ef:a3:d6:d9:f8:84:da:7c:02:96:bc:5f:a8:
94:0a:be:59:79:1a:c0:03:9c:f4:1d:62:0a:29:11:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:21:A7:A7:ED:B5:61:85:7D:AD:17:F5:D6:FF:27:8D:2C:B8:70:08
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e7:12:e3:ca:75:90:da:d6:04:b0:65:87:7a:b7:4a:1b:35:
47:ce:17:da:72:df:ef:2c:7b:8f:a3:c4:b6:7e:f9:eb:d3:d1:
02:78:df:c4:6c:35:ba:c7:92:d9:cb:7a:e2:a5:53:39:d2:42:
86:e9:cd:0d:9e:93:e4:69:14:d0:3d:b7:93:4f:f0:22:02:ae:
eb:38:cc:58:db:ba:d0:a1:78:75:ff:7f:74:9e:13:79:62:48:
9c:98:a7:92:40:3c:a0:32:bd:84:e8:5e:fa:b1:8a:6a:61:e7:
46:ac:68:26:02:1c:4f:37:9a:c3:50:d1:30:7f:c3:75:d0:92:
4e:42:d0:9d:3f:92:02:7e:46:cb:47:f0:95:5c:de:20:7c:13:
e7:e4:77:70:ac:83:26:49:da:9c:97:86:9b:48:3b:1a:16:18:
4b:88:b8:2a:13:b1:d3:7f:b9:0d:ad:72:fb:ae:7f:06:da:9d:
27:d5:f2:fd:d3:82:43:18:5a:1b:07:d9:c2:e1:05:7f:ce:55:
fc:e5:3c:d5:52:ee:6d:c7:09:f5:17:c1:ad:17:58:0b:cd:04:
9b:bc:64:4f:b4:dc:b2:d1:20:32:ed:98:60:cf:c8:9c:08:69:
d3:56:a6:4e:4a:67:e2:e2:9d:eb:22:0e:aa:d9:60:9b:34:c3:
0f:1a:e2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:43 2025 by rpki-client