Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: qY9qkE79SswoSxmxiRoDktBzaBWLv756LgaYmlQ5RAg=
Subject key identifier: 6B:76:B4:CF:70:6F:B7:C5:E5:8D:D4:3B:D6:20:98:E4:4A:C8:B8:6C
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 019A541A8B7D2B156EDC7E6D1133F093A55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 16A4
Signing time: Wed 05 Nov 2025 13:00:17 +0000
Manifest this update: Wed 05 Nov 2025 13:00:17 +0000
Manifest next update: Thu 06 Nov 2025 13:00:17 +0000
Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: 9XJIhhvvMe8pb4PcSY+XAH9GAgKC+iHR4beGluBLBqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:8b:7d:2b:15:6e:dc:7e:6d:11:33:f0:93:a5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Nov 5 13:00:17 2025 GMT
Not After : Nov 6 13:00:17 2025 GMT
Subject: CN=6b76b4cf706fb7c5e58dd43bd62098e44ac8b86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:02:65:3d:8c:e1:e3:c9:8c:54:d9:f0:b1:
d3:c2:31:d4:39:28:a3:32:81:38:80:87:3c:73:a4:
29:2c:cc:54:eb:ae:fa:d7:00:9c:c1:eb:be:c0:89:
b4:9f:8e:ce:28:ca:47:58:c9:56:70:ee:c4:ed:7e:
7a:15:86:f5:63:95:51:63:3c:cc:fe:17:33:bc:b8:
27:15:84:57:76:c8:be:72:c5:1d:cf:df:6f:0a:f7:
70:a7:d4:c5:be:4a:44:66:64:fc:e9:b7:d9:f3:d0:
90:bf:f9:af:a8:15:5a:72:2e:d7:36:1c:df:d6:a9:
39:81:0d:f9:9b:99:61:52:8c:18:c3:b4:fc:0f:38:
6e:76:10:f9:96:9e:a7:b1:07:b1:1a:37:eb:fa:78:
c6:dc:4b:80:5c:f2:e8:23:f6:4f:45:36:dc:7b:1f:
65:09:b4:a9:34:36:8d:75:86:89:57:8a:90:06:15:
d6:10:f3:ca:98:d2:c3:6e:6d:26:74:37:ce:f3:58:
cd:79:fa:6f:66:c5:55:a4:8f:54:9a:72:38:41:f5:
f8:d7:8a:11:f5:67:79:91:13:a7:1e:fb:4b:fb:38:
5e:09:09:0b:b0:5f:29:38:09:46:a3:27:ad:b3:dd:
64:3b:42:a0:48:31:f2:1d:d4:ff:23:b0:84:d9:d9:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:B4:CF:70:6F:B7:C5:E5:8D:D4:3B:D6:20:98:E4:4A:C8:B8:6C
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2e:3d:39:7d:cb:3e:8f:b9:ae:74:9b:f8:60:0e:4a:c4:90:
82:7e:d7:05:98:b3:8a:58:3b:52:42:d5:f8:fa:27:7a:d8:04:
68:30:50:e6:d6:c1:7f:d6:82:b4:01:eb:5d:ca:3c:fb:df:81:
c7:f6:c5:b9:2d:d9:51:2e:40:c0:f5:de:83:36:f3:23:9e:85:
bd:54:07:02:27:b0:b4:62:a4:48:08:78:3c:b2:ac:ee:1b:25:
f4:7f:09:57:64:40:ec:51:eb:41:d0:36:9d:68:4e:5a:12:c7:
ad:79:16:fd:c6:5f:51:66:5d:97:49:6a:2e:c3:c4:4a:55:a0:
60:3f:0f:c6:3f:9f:a9:98:d2:eb:06:c4:1c:ba:f6:f2:b4:0d:
f8:f1:89:ba:e3:93:64:58:d0:23:23:12:52:1c:c8:b9:06:52:
0b:e6:91:b3:7d:38:fa:ac:35:2f:15:92:8b:1c:a6:12:76:c0:
94:8c:8a:d7:54:5f:7c:b2:95:b7:70:e9:c3:db:7d:11:57:9c:
96:ed:f6:87:22:01:6f:47:52:62:85:f2:cd:82:44:f0:27:5f:
30:33:ab:10:cd:79:81:59:fe:9b:db:41:85:7b:3f:7e:79:c6:
cc:74:f0:d9:a8:a3:77:a4:25:4c:c6:63:f2:05:c0:20:4d:10:
c9:33:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:37:20 2025 by rpki-client