Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier: 6Mq2deT2rPv8dsizROqRK84+4R5y9HP2WTBXWo5TKzM=
Subject key identifier: D5:DE:3C:67:8C:17:5A:8D:67:C7:F8:32:B1:FA:10:EE:A6:90:73:C7
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial: 019A4EF5B673738BE645333A5867C4875E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number: 0A12
Signing time: Tue 04 Nov 2025 13:01:57 +0000
Manifest this update: Tue 04 Nov 2025 13:01:57 +0000
Manifest next update: Wed 05 Nov 2025 13:01:57 +0000
Files and hashes: 1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: uBcB9IrPGYPlskwTXqIwOMSZUM+oUO2iYLFVfIDIwlg=)
2: oVf5pbd8qfOWaMtymVg3zBpo1aI.roa (hash: /JkkHPoUwL9WPqaL9lMZRl9hvH2fpXEuWKNlqu6l9cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b6:73:73:8b:e6:45:33:3a:58:67:c4:87:5e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Validity
Not Before: Nov 4 13:01:57 2025 GMT
Not After : Nov 5 13:01:57 2025 GMT
Subject: CN=d5de3c678c175a8d67c7f832b1fa10eea69073c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:86:1f:23:8e:d8:e8:af:e5:b9:c4:83:3d:
94:06:26:00:98:2b:17:cd:ec:0a:1f:ee:f6:0a:f5:
3c:03:fb:57:38:b2:ac:8f:92:2f:5d:8c:ba:b2:e0:
1f:16:c3:05:c9:fe:bb:24:8d:ca:5f:df:8a:11:cd:
80:17:af:f3:7c:ba:cb:3f:47:f4:70:33:bd:fc:04:
dc:3f:d2:a2:5e:e2:2c:ae:93:8e:38:03:ff:8d:a9:
ec:b8:58:a0:f2:6a:f3:59:2d:fc:35:c2:d7:c0:46:
74:2f:71:e9:19:d1:40:93:5f:f5:d7:63:ac:14:3d:
65:55:21:76:58:31:72:c7:9c:24:58:62:dc:8b:51:
87:ca:1f:42:30:76:02:e7:bc:bb:4e:4f:7d:b0:0b:
3e:81:7a:3b:8d:00:46:3c:bf:d8:57:b5:8c:46:95:
f6:a5:5c:d0:90:5f:93:fe:0e:fa:b0:f5:b2:e8:94:
ae:d2:01:0b:dd:75:3b:1e:13:ea:37:0d:69:22:74:
10:a0:99:3e:9e:a0:7b:0b:7d:c0:25:aa:04:62:cd:
32:56:b4:f9:62:c4:20:21:79:76:e7:c2:fc:8e:c7:
89:5c:ad:df:2f:41:81:0c:93:80:c5:5f:1a:36:8b:
a5:1d:64:b8:fb:44:8a:13:53:3a:31:f7:80:0a:2b:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DE:3C:67:8C:17:5A:8D:67:C7:F8:32:B1:FA:10:EE:A6:90:73:C7
X509v3 Authority Key Identifier:
keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:73:1e:b2:c6:15:e0:a8:ab:fe:0a:1e:f3:da:ef:14:bb:7a:
d8:10:8b:f0:16:53:15:8e:81:48:63:24:09:61:18:1e:15:1d:
a4:a0:02:8a:38:af:41:3d:58:dd:43:10:94:74:90:d2:c7:e7:
d9:59:94:f8:d7:f2:8f:97:79:30:12:ec:f1:14:10:c3:9b:76:
42:a6:d9:ee:0c:1a:d4:fa:27:04:fa:03:bc:d3:74:69:4e:7b:
71:19:6d:56:e3:79:8f:24:75:96:63:4d:3f:73:25:e2:c0:57:
ea:e7:a2:28:51:18:45:a4:81:7f:41:11:5c:81:ee:75:c8:1c:
df:3c:d1:ea:f0:99:35:90:99:41:57:b1:6c:a1:2d:d7:14:2f:
62:98:6c:18:9d:07:4e:91:6b:d7:44:0b:2f:30:60:4e:c5:4d:
4c:74:20:9b:d6:6f:54:91:f6:cf:0f:1f:06:8f:f8:e0:19:25:
ed:f0:17:aa:8f:4e:12:b9:36:3e:b6:3d:9f:84:9b:e6:f0:73:
37:58:23:73:6c:3d:de:a0:c8:3d:3f:5f:8a:4d:d2:45:ca:4a:
77:1c:a5:bd:e7:8a:65:19:a0:97:2b:d7:ad:32:a2:75:c5:f1:
f6:59:0c:86:b1:bc:8c:90:39:ed:ac:44:3b:6d:2a:36:a1:d7:
40:d0:41:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:55 2025 by rpki-client