Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: P4HO0tRzHXuPtYH5U1Ci6rDRe5SIWQw1vTwZnd/WuAY=
Subject key identifier: 5B:91:99:25:D7:9B:BE:EF:69:CE:2A:95:7E:09:A8:7A:2E:DB:D7:BA
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 019A4D73E765E60182CF1E846CC2DECE3FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 1154
Signing time: Tue 04 Nov 2025 06:00:32 +0000
Manifest this update: Tue 04 Nov 2025 06:00:32 +0000
Manifest next update: Wed 05 Nov 2025 06:00:32 +0000
Files and hashes: 1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: ug2jF6CNDTHkH24WidlnCS+laob+DZrFjpZvJi5GF+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e7:65:e6:01:82:cf:1e:84:6c:c2:de:ce:3f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Nov 4 06:00:32 2025 GMT
Not After : Nov 5 06:00:32 2025 GMT
Subject: CN=5b919925d79bbeef69ce2a957e09a87a2edbd7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ca:1e:88:45:ce:84:64:8d:d1:e6:24:11:31:
d3:96:bf:16:14:67:3c:50:5d:fc:b6:f0:f8:ae:93:
79:15:58:13:1f:66:f2:10:03:ca:36:f6:0c:c7:39:
4c:e4:0c:51:92:2b:4d:9f:95:2e:ac:7a:da:2f:64:
f5:f5:22:31:d9:a9:4f:36:69:ff:1e:b4:b2:be:49:
46:ad:75:5c:79:23:97:50:2e:fb:de:7f:80:4c:31:
61:1c:bf:72:b4:15:38:d1:6c:4f:11:1a:bf:91:d1:
2d:63:de:13:f6:b1:84:b1:41:ab:53:a9:f4:b3:20:
12:b7:6d:9c:36:35:aa:47:6a:5e:55:a1:32:7d:93:
5d:f2:8d:31:cb:d6:92:c3:9e:c1:03:a1:54:db:d2:
82:72:a1:82:15:a4:4f:33:71:c3:6e:92:3e:ad:e0:
2c:f9:0c:0a:63:4f:41:2a:44:97:4d:53:32:b5:c9:
e8:79:09:06:85:2e:14:8c:c2:61:c1:30:47:4c:ec:
f0:bc:29:7a:4b:13:b9:5c:c4:e5:f2:51:15:12:b1:
f2:02:98:46:8a:5f:8c:11:d5:f4:ce:a1:76:25:fd:
2d:98:e1:be:94:a1:ad:05:28:a3:c1:cb:e3:b8:18:
5b:c1:e5:dd:02:3c:4e:9e:8d:f8:aa:28:b0:4f:ae:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:91:99:25:D7:9B:BE:EF:69:CE:2A:95:7E:09:A8:7A:2E:DB:D7:BA
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:2b:81:11:0d:1f:0b:24:93:54:fe:5c:15:d9:d6:1f:f0:
cc:b1:59:04:91:97:ac:2d:ab:21:d5:e5:1d:76:f6:58:e2:c6:
49:9c:6b:bd:db:38:2e:e3:49:f6:5e:89:8e:4b:40:69:a1:a0:
6d:16:03:c4:d1:5d:a0:9b:82:bb:9d:1c:f5:d3:50:e6:82:72:
44:75:28:6a:b9:96:77:06:89:0c:cd:1b:84:fd:00:c9:23:56:
19:3a:f0:ba:e9:b0:e0:94:f0:20:7d:f5:05:c5:23:57:35:5f:
20:4b:39:43:99:8a:a9:64:84:44:ff:06:fa:fc:61:ba:ec:4a:
21:c6:92:5b:41:d5:00:6d:bd:7d:af:b1:34:10:ba:16:75:df:
62:7d:26:52:d7:ff:f9:a9:a2:16:b8:16:11:0d:08:57:f0:53:
23:d1:e1:58:7a:46:62:15:5f:e7:42:3d:89:58:6d:aa:8d:36:
b2:33:57:d3:f5:91:ed:a1:74:47:c9:70:06:02:0c:b3:5f:ea:
c8:97:f3:45:27:f3:36:70:b4:5e:4b:09:49:c2:8a:f9:ce:9d:
55:02:70:21:53:db:6a:5d:80:5e:12:df:e4:3d:d7:c5:37:3e:
2e:ba:b0:22:f4:be:e2:73:93:cf:9d:46:96:bd:3b:74:f9:f7:
88:6e:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:33 2025 by rpki-client