Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: tmjmE1LtLUUP01WkLqXqWGAHpPD+qnd+jKFD1qR4jJo=
Subject key identifier: 59:4F:72:7A:41:87:5C:70:72:E9:34:F4:C3:B6:43:A3:EB:E4:5D:37
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019A50750B464E5CF893D453C0D61512CA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 20:00:39 +0000
Manifest this update: Tue 04 Nov 2025 20:00:39 +0000
Manifest next update: Wed 05 Nov 2025 20:00:39 +0000
Files and hashes: 1: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (hash: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: LNOOKUAZc17KMjrqngAycMYME7vhw13iQYL9VoR95X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:0b:46:4e:5c:f8:93:d4:53:c0:d6:15:12:ca:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Nov 4 20:00:39 2025 GMT
Not After : Nov 5 20:00:39 2025 GMT
Subject: CN=594f727a41875c7072e934f4c3b643a3ebe45d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:2a:de:a5:83:78:d1:51:8a:be:b0:6d:f9:
2d:01:50:a4:00:31:ad:d7:30:08:e1:bb:2c:25:8f:
bf:23:be:22:5f:7e:c0:c0:7e:a7:d1:09:68:30:83:
8b:a4:23:f1:11:9e:a3:e3:bc:75:2d:6c:98:5d:9f:
4d:bf:f5:32:1f:79:9a:2a:59:7d:11:5c:de:e3:fb:
cd:fd:1e:1e:dc:20:cf:c3:17:2e:15:a6:57:55:ef:
f5:10:04:90:69:4f:21:22:c1:99:2c:bc:a8:0c:b5:
ad:ab:f0:29:7f:27:25:a7:41:d4:91:75:04:55:c2:
bf:ac:a0:0a:35:4f:49:aa:6a:77:45:4b:e3:00:5f:
81:b5:c0:59:48:2e:8c:ed:bc:54:32:7a:1c:3c:31:
90:b3:1e:0b:2d:3a:f5:04:7c:fd:50:e7:2f:4e:14:
42:16:56:45:76:01:53:d7:65:10:ea:5b:a4:d8:38:
90:af:61:86:f9:ad:38:3c:9b:a6:45:65:21:f5:88:
36:b6:9b:9a:ce:73:f6:17:6a:fd:61:64:f8:9c:7d:
a2:e7:ec:cc:19:55:81:b0:4a:83:26:77:8d:69:cb:
72:35:3b:25:3a:42:60:ec:e5:20:f0:d0:bd:ae:21:
13:34:45:51:2c:f2:6c:1c:c3:db:d7:69:c6:af:ff:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4F:72:7A:41:87:5C:70:72:E9:34:F4:C3:B6:43:A3:EB:E4:5D:37
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9b:19:a5:c2:ba:9b:03:9b:ae:30:57:a3:db:43:0b:de:5a:
69:e7:ee:d3:98:85:a1:d9:2e:06:fd:27:7e:31:19:2f:0e:8c:
21:ec:b9:66:ed:98:da:29:00:0d:c0:cb:2c:70:fe:a2:f7:e4:
4b:75:ef:f4:7b:8f:75:62:a1:d3:56:09:fa:fd:18:24:9d:40:
52:68:87:a7:7c:81:cc:4b:f4:44:78:f6:5a:08:bc:f2:90:91:
8c:b4:07:89:43:94:59:95:3f:8b:3d:26:3c:9f:f2:4b:a2:b4:
bc:bc:7b:8b:4c:42:0b:37:27:17:05:10:b3:8d:4c:66:d8:b9:
39:6c:48:6d:37:f7:10:b0:a6:6e:5b:c8:a5:d5:fb:3c:31:41:
ee:ec:48:fe:0d:a5:1f:9e:c8:cf:b4:26:dc:1c:27:fb:02:17:
4f:f2:63:cd:32:18:9c:58:0d:56:b4:4f:71:11:61:90:d9:da:
c0:48:ac:06:d3:51:84:0b:53:ff:3a:17:0f:8b:6e:e2:1c:db:
39:e0:2f:33:30:c3:4e:f3:3e:c5:bb:bf:4a:b7:e6:43:a0:a8:
56:4f:d4:a6:bc:eb:6a:d0:6f:6b:c3:37:21:89:a3:32:93:a7:
de:9d:fe:c1:35:34:04:cf:ee:b0:9a:44:78:d2:6a:8f:d8:62:
70:fc:e2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:30 2025 by rpki-client