Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier: MukfPgpOGrYTenRJYpmuQvKAKlyVPB3amER9PQkVcf4=
Subject key identifier: 58:FF:C1:E3:3B:9F:F1:85:D2:65:54:42:72:1D:C2:93:89:90:67:B2
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial: 019A503E00CCB80493AD5460FA993D1A2671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number: 1355
Signing time: Tue 04 Nov 2025 19:00:31 +0000
Manifest this update: Tue 04 Nov 2025 19:00:31 +0000
Manifest next update: Wed 05 Nov 2025 19:00:31 +0000
Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: FjenkQS241pWBlT23XOyDN5LEeFfzR86xJB3XIHOuCM=)
2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:00:cc:b8:04:93:ad:54:60:fa:99:3d:1a:26:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Validity
Not Before: Nov 4 19:00:31 2025 GMT
Not After : Nov 5 19:00:31 2025 GMT
Subject: CN=58ffc1e33b9ff185d2655442721dc293899067b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:3a:1b:8c:47:d5:c2:6e:74:b5:9d:e2:51:
a4:a1:b4:4e:4b:89:78:72:85:cf:46:ab:18:ea:9c:
fa:27:f3:0d:04:0e:ad:8e:3b:61:f4:a5:dc:4d:c2:
23:46:d1:c3:2b:cc:51:8c:4d:3f:31:77:77:84:be:
a4:b4:6b:21:76:52:ea:a9:30:59:88:5f:70:c5:f9:
d1:45:de:dc:8b:5e:41:2d:e5:46:6d:8f:34:5d:ff:
b6:32:b4:b1:f0:a5:f6:5d:b8:a0:eb:1c:97:98:f4:
e1:0d:58:ae:7c:50:1e:be:23:f6:5a:ec:7c:7f:1d:
e6:87:fe:d1:ad:69:d4:ac:49:86:de:c0:dc:6b:1e:
50:b9:20:e7:af:7f:98:7e:29:85:80:c5:15:bf:64:
ff:d4:39:b2:23:bf:be:9f:84:69:31:73:e4:31:c2:
c2:ab:d4:51:e8:4c:f7:ad:83:7d:a8:3b:cc:bf:57:
d3:cb:d1:95:e2:cd:bb:94:23:e3:04:bc:85:0a:04:
be:a5:17:93:d0:76:9b:60:30:84:ed:04:1e:84:3e:
42:79:2e:3f:f6:bc:0b:75:ec:aa:49:0e:fa:e2:5b:
ed:7f:79:ca:b0:69:ae:71:df:e2:f6:90:0c:3a:36:
e8:a3:b8:34:80:43:cb:b7:a9:78:35:1e:84:ec:20:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:C1:E3:3B:9F:F1:85:D2:65:54:42:72:1D:C2:93:89:90:67:B2
X509v3 Authority Key Identifier:
keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b5:f3:33:4d:86:84:72:3a:8c:de:e9:ad:de:64:d3:3f:a7:
f9:09:41:66:3d:a6:36:00:e1:e1:17:48:2b:10:37:6f:c3:27:
9e:e4:c4:4b:eb:7c:5f:e8:91:28:95:27:16:f7:fd:0f:62:31:
5e:85:0f:5d:31:b4:97:8e:a8:82:cd:7b:b2:0f:08:f2:4b:cc:
5e:aa:52:5d:6d:36:24:0c:a7:2c:0d:82:c5:7a:c9:38:5b:f0:
6d:1b:b3:69:e9:ff:77:c3:1a:b5:42:78:06:8c:f5:51:6e:73:
3a:e4:68:a7:cb:1b:d7:ba:42:97:76:f4:21:52:3d:ea:ad:b4:
d3:86:21:3a:19:d2:57:37:9c:61:f8:52:99:d2:57:f2:98:c2:
af:a8:95:25:48:fa:55:18:dc:a1:14:31:38:e4:2b:4f:e9:29:
98:d5:da:81:24:53:6c:09:fe:9e:0a:0f:c5:9c:36:27:d2:60:
e8:6e:44:e0:26:f5:e0:91:77:cf:63:7e:d5:f7:d8:b1:d3:b4:
87:b1:29:03:2a:94:00:bc:15:2d:9f:42:e2:6d:6b:b9:c0:ec:
c6:23:02:00:73:bc:5e:f0:e2:19:64:a1:03:1d:88:b6:dc:ef:
23:8a:8d:07:db:76:6a:85:f8:74:fd:93:38:15:70:7a:ad:98:
ad:bb:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:54 2025 by rpki-client