Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
File: ySynGDiuM8zsxfEKtU7D_HG_u4I.mft (raw, json)
Hash identifier: jfwQJ10SyzJvjXAPXDAFC4iayIWDyN+sKy49vtDW2qI=
Subject key identifier: 53:84:B9:7F:B3:3B:19:FD:8B:03:E0:74:FC:6F:F5:D1:83:2F:3A:AB
Authority key identifier: C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
Certificate issuer: /CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Certificate serial: 019A4C60F9B77B0EADE74C9D65A3CE3A4B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
Manifest number: 08E3
Signing time: Tue 04 Nov 2025 01:00:14 +0000
Manifest this update: Tue 04 Nov 2025 01:00:14 +0000
Manifest next update: Wed 05 Nov 2025 01:00:14 +0000
Files and hashes: 1: ySynGDiuM8zsxfEKtU7D_HG_u4I.crl (hash: l1GtkQsSH4lrajRiYE7gkrbvWVhWR1eg3CyLTsiTBYg=)
2: zvBXOGhz3yT7vvMi09ydKdR3St4.roa (hash: 74R93MmSYu/Sf7aVGk3wE3AF+gpETbgTfHomBAiI6ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:f9:b7:7b:0e:ad:e7:4c:9d:65:a3:ce:3a:4b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Validity
Not Before: Nov 4 01:00:14 2025 GMT
Not After : Nov 5 01:00:14 2025 GMT
Subject: CN=5384b97fb33b19fd8b03e074fc6ff5d1832f3aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:92:46:41:c2:aa:7d:10:a5:c0:b3:fe:ab:
9e:2c:cd:45:fd:34:1e:ae:ae:6d:2e:eb:94:da:8b:
1b:e8:f0:56:5b:42:94:60:fc:ca:fd:0d:28:88:f6:
12:5c:1d:35:27:7e:16:e8:57:f9:92:e4:21:38:c8:
a0:6a:c7:67:eb:0f:e5:3f:de:28:63:79:d8:5d:c7:
06:4e:9b:48:1c:58:98:8d:6d:fa:6e:4c:77:51:d0:
d4:0f:31:9e:be:3c:cf:28:28:14:67:42:03:70:bf:
6a:3c:4f:ab:18:84:a3:6f:03:60:91:d7:62:89:7f:
2e:21:5e:b8:f9:58:fb:09:fc:77:df:72:d4:38:57:
7c:3e:3e:fd:ce:3b:e8:a3:e5:03:41:0a:79:87:6c:
c6:e6:66:5c:c5:eb:ec:77:67:65:47:32:c8:18:ba:
78:1b:a6:1e:d8:5f:f7:95:9b:26:da:58:a3:35:50:
b1:94:da:2c:67:63:a7:07:63:2b:11:84:a3:2d:0b:
0c:93:c2:5d:a0:49:2a:11:5a:c7:f8:0f:ed:29:fb:
4d:ba:4d:80:57:e6:d5:73:d6:35:af:1d:3a:3d:04:
99:62:5a:b9:52:23:10:51:d1:1f:bc:9c:aa:91:25:
0c:1c:5a:3e:27:5e:99:1f:c6:59:4e:19:b2:36:0b:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:84:B9:7F:B3:3B:19:FD:8B:03:E0:74:FC:6F:F5:D1:83:2F:3A:AB
X509v3 Authority Key Identifier:
keyid:C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d3:32:e8:f8:07:c3:13:9e:5a:23:0a:24:82:98:24:a9:02:
8d:4c:78:78:a2:85:fd:f1:da:4e:c7:03:60:88:2f:09:9e:7b:
c9:02:6d:c2:6c:9e:ba:83:25:50:ea:42:cd:3c:98:8b:e6:00:
eb:da:1d:a0:9e:5e:1d:1e:55:4b:c5:e5:c8:39:89:a3:e2:98:
e2:1a:68:fb:8e:db:ac:c4:b5:bd:a2:67:ab:9e:81:c7:76:36:
7f:c5:76:3c:01:bf:7b:b4:02:98:1a:9e:59:a9:9c:8d:30:2e:
b9:b8:a4:c4:3d:7a:7a:93:99:9e:7b:6b:c9:e0:37:3a:bc:68:
56:90:c1:bd:c5:fc:a0:57:b7:09:dc:a7:a0:a3:80:34:64:02:
e5:99:f6:2d:9a:c7:5d:49:d4:9a:04:a9:3a:89:ee:92:13:af:
07:f3:6f:15:b2:84:b0:4a:da:16:92:83:7e:1b:39:87:44:83:
69:4b:a8:74:60:2e:df:28:af:39:af:f9:43:8b:cf:6a:83:42:
4c:40:94:da:07:5c:b1:96:57:1d:20:b5:fe:b7:d1:18:a2:2e:
7f:40:e3:cd:eb:8b:dd:fa:09:74:ab:30:09:bb:f5:bb:f1:c7:
3a:b0:25:9d:cd:92:d2:79:f6:fa:d7:63:41:f8:1a:2b:b7:0e:
50:b7:27:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:05:19 2025 by rpki-client