Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
File: cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json)
Hash identifier: R9xYck7jDO39MFoM6ns5njSHvZ9uSDZxOlbFKnhYCp8=
Subject key identifier: 64:13:E2:52:F6:96:F5:F0:C9:A2:1C:89:A1:27:84:00:4E:4B:8E:66
Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Certificate serial: 019A541B2BEC04B848C6C1EB7EC14814F576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
Manifest number: 13
Signing time: Wed 05 Nov 2025 13:00:58 +0000
Manifest this update: Wed 05 Nov 2025 13:00:58 +0000
Manifest next update: Thu 06 Nov 2025 13:00:58 +0000
Files and hashes: 1: WBSDkIaVRxspnZB85zHlZDMPBvE.roa (hash: dKGj0UbI6Hyodic4ujzyMQO0izNi4N6MDbaDGIVHoXI=)
2: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: 0mBwuza3g71fI82ZMRDA/0b8REee+VPaXEB9p5TX9J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:2b:ec:04:b8:48:c6:c1:eb:7e:c1:48:14:f5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5
Validity
Not Before: Nov 5 13:00:58 2025 GMT
Not After : Nov 6 13:00:58 2025 GMT
Subject: CN=6413e252f696f5f0c9a21c89a12784004e4b8e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:e9:fc:63:94:0b:71:75:d8:2c:41:f9:1b:
5d:6c:c8:30:c5:f0:06:02:32:75:91:3c:e0:f8:e0:
5f:8f:44:4f:f4:53:27:83:34:af:c2:ac:08:33:96:
85:1f:04:0e:ec:75:a9:52:ac:78:57:f9:9d:0c:02:
4f:11:cf:14:ca:c8:4d:11:68:bb:2d:60:26:92:04:
5d:55:0d:49:b1:93:bc:ed:e2:d0:a0:ee:5c:6a:cf:
ac:87:1a:c8:2a:5b:fc:93:6c:28:05:91:33:9f:36:
4d:89:c5:3f:b6:ee:fc:26:7c:13:e3:89:0f:eb:b4:
9a:f2:e9:4c:42:c2:6f:c8:6d:ed:bf:c0:dd:26:71:
02:68:2c:4e:22:da:d8:74:0f:53:9a:cf:9e:7c:03:
5d:e3:0f:3d:4f:7f:e3:f0:9a:86:05:ed:a6:a0:9d:
12:1b:58:e0:9a:65:56:a1:8f:66:07:f9:57:aa:c7:
90:50:0f:41:2d:f1:27:e1:5b:26:68:75:94:4f:e8:
a6:1a:9e:ae:20:fc:90:83:57:6a:4a:6c:42:ed:8f:
f1:e0:29:94:63:d4:5c:a6:78:99:94:e5:d6:0b:04:
56:c5:bd:50:12:94:cd:ab:0a:ba:86:4f:7d:9b:ef:
88:f4:57:a8:c9:3f:f5:1e:31:fc:34:0b:54:93:d7:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:E2:52:F6:96:F5:F0:C9:A2:1C:89:A1:27:84:00:4E:4B:8E:66
X509v3 Authority Key Identifier:
keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ca:be:bd:ce:fc:39:d6:fc:2c:29:a5:14:be:90:ba:43:a3:
cc:99:d9:5c:83:3f:1d:14:fc:99:e6:44:1e:41:f6:e5:79:83:
23:b0:fa:41:fc:4c:f0:90:2d:e4:d1:a9:97:b9:a8:43:8b:2b:
1a:4a:1d:ed:a4:4c:d7:e4:6c:2f:53:13:af:b5:53:a6:dc:97:
de:dc:52:92:01:e8:1b:90:dd:c8:9d:fe:a7:20:c7:16:26:62:
c5:15:b6:54:c9:84:fa:e2:bb:3d:fa:58:0c:fa:5d:ef:d9:40:
62:e2:d2:71:cd:2f:3c:ec:11:94:8f:06:8c:38:94:3e:5b:03:
ac:df:6a:80:16:a4:2d:bf:df:60:a8:5c:18:11:30:53:4b:48:
e0:fc:fe:01:ea:7f:77:45:80:db:a9:6d:4d:17:6a:27:bf:91:
3c:7b:c5:ba:95:66:e3:70:5d:23:a5:f1:2f:1f:4c:0a:12:55:
4f:80:38:44:4c:b2:39:b9:ef:c2:67:dc:dc:59:dd:cf:8f:9e:
16:42:38:47:62:35:fc:e7:00:38:07:05:6e:04:18:dd:65:13:
b8:3c:a2:9f:84:10:53:90:97:0b:ca:b3:c5:b2:63:80:39:5f:
26:62:c2:a2:fd:51:47:7c:a5:db:ec:32:57:08:85:ce:cf:4e:
3e:fa:c1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:36 2025 by rpki-client