Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
File: yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft (raw, json)
Hash identifier: AX0abVqvmJJxp4Q5eEbIAum+Yxx8yj66ZDqE+2lsXDk=
Subject key identifier: D1:61:EA:07:98:72:C5:8D:B4:2D:CA:B5:9F:AC:0A:3D:51:38:29:24
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 019A4E8694EA55C77644271E014C09F5744A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
Manifest number: 0443
Signing time: Tue 04 Nov 2025 11:00:34 +0000
Manifest this update: Tue 04 Nov 2025 11:00:34 +0000
Manifest next update: Wed 05 Nov 2025 11:00:34 +0000
Files and hashes: 1: yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl (hash: 1KjSzUq1ExfSbicwlRgBZzBadJzcR1jJo0ABX/tIe04=)
2: z4GL3R9iwn241BwmecTavitjvmk.roa (hash: gozzqy0wMPz097Vp/T+QSgyQzissUGlOoz2lP5A4OOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:94:ea:55:c7:76:44:27:1e:01:4c:09:f5:74:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Nov 4 11:00:34 2025 GMT
Not After : Nov 5 11:00:34 2025 GMT
Subject: CN=d161ea079872c58db42dcab59fac0a3d51382924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:be:5d:78:82:82:71:70:62:9c:b4:01:1d:
a7:8d:28:83:cc:bf:00:35:d8:81:09:5f:75:07:1c:
82:ac:5d:2e:da:34:44:8b:7d:65:7d:df:a4:7a:d2:
96:42:69:1e:61:a1:2f:1b:94:de:5e:3e:3a:a1:75:
9f:2e:79:be:6b:cd:63:94:7b:09:c7:01:8c:42:b5:
43:8d:ea:d7:9e:47:c2:71:da:59:88:54:7c:44:e5:
da:f2:c0:2d:ac:2d:c8:e1:5b:aa:ba:86:cd:c9:cc:
c8:a1:10:d5:0c:b8:b6:25:1e:14:2c:e3:44:05:ea:
a1:2f:9f:ac:8e:b8:0c:66:f9:b8:af:8c:5f:2d:b3:
6d:16:5e:db:07:23:95:16:c5:8d:82:4a:29:33:fb:
cc:fc:4f:69:35:4f:7e:3c:61:34:f4:21:2d:c7:0e:
b0:9d:75:56:35:49:6d:6a:68:49:f8:41:f3:b3:5a:
bd:cd:50:44:e4:e4:31:d7:71:58:bd:2b:f3:37:d0:
55:89:d2:43:d7:5c:94:0d:59:26:ea:25:7d:78:ce:
e7:5f:48:cd:63:58:32:0d:d3:7a:29:41:24:d4:0e:
2a:41:e2:6b:4e:1a:ed:63:32:04:e7:2c:f5:35:14:
5d:b2:23:8c:75:18:8a:3e:e0:5e:8f:13:36:e2:eb:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:61:EA:07:98:72:C5:8D:B4:2D:CA:B5:9F:AC:0A:3D:51:38:29:24
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:00:91:05:db:13:24:1f:7d:b2:83:69:b3:4c:8a:a9:92:f8:
fe:77:ac:ce:5f:d9:25:18:0e:1b:c8:ef:90:a8:cd:57:a3:4b:
83:e9:7f:23:11:c0:07:d8:56:f3:87:ad:3f:b1:f8:5e:33:19:
63:ef:59:30:f3:0b:43:0a:e9:56:c4:16:3f:81:51:89:9d:ac:
ef:7c:09:6f:35:7e:3b:19:c8:f1:03:c8:54:de:63:89:05:ab:
9e:a2:25:9c:1f:a6:63:68:2d:0c:76:ea:f6:7c:1d:42:85:3c:
20:09:7b:a4:8c:b0:d9:67:30:33:eb:d1:d0:a3:0b:b5:7f:f5:
ae:8e:51:78:76:5e:ca:0f:ea:bc:d6:e3:18:de:da:17:8e:30:
a3:c2:98:84:4f:76:11:27:f1:c0:9b:a1:09:41:38:aa:7d:e6:
af:19:c8:d5:72:69:10:4e:24:49:9c:3c:31:8c:5f:76:97:27:
4a:5a:37:45:86:24:2b:6f:8f:71:22:fe:09:98:2c:d7:e5:fb:
bc:ed:a0:5f:40:1f:09:8c:1e:12:1a:f9:13:72:e3:e9:1f:fc:
2e:00:ae:86:08:8b:e2:54:f6:37:13:6f:79:00:ff:3d:6f:29:
20:68:6d:ff:70:bd:3e:54:1a:7e:56:2f:56:d4:13:95:9e:0a:
60:ce:56:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:37 2025 by rpki-client