Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier: u7WkPZOOkCWJAUbUNzzJkZYSJECm45Cy6t5ZQbVzFGA=
Subject key identifier: 12:70:9A:88:22:CB:0D:2A:53:24:5C:01:58:4F:CC:E9:B0:04:C4:88
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 019A50E40759BF46B57E37969F04566DAC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number: 1077
Signing time: Tue 04 Nov 2025 22:01:52 +0000
Manifest this update: Tue 04 Nov 2025 22:01:52 +0000
Manifest next update: Wed 05 Nov 2025 22:01:52 +0000
Files and hashes: 1: 1bT_z3QhDrRtR0bAMfMHm2giTF4.roa (hash: UdAyHLTajp0O5fgzTOphNRIpwXVUSlhxrrLMkoKDUAw=)
2: C1FyQJSK2-uv7URyciZXxMvVb6c.roa (hash: CAmInxyQhyb9MZHRVwkcOEX1WeCGUI9sXRoPqIH4UiI=)
3: IELJH6M7c-qGa_xF_N_rVAXGjYc.roa (hash: QPFfU1BkEUCanKp/XJb5ENTQ74R8UjYATL4PwXWDHyg=)
4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: CIAqwuBRS9nrjqCM+gglkWY2kZM4YRTDVVb8OczsBfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:07:59:bf:46:b5:7e:37:96:9f:04:56:6d:ac:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Nov 4 22:01:52 2025 GMT
Not After : Nov 5 22:01:52 2025 GMT
Subject: CN=12709a8822cb0d2a53245c01584fcce9b004c488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:3d:7d:c6:12:a1:79:10:e6:b7:b3:c3:b3:
e7:ec:af:b8:b9:25:94:6f:af:49:5a:86:9d:88:8b:
3e:e0:79:ba:d8:91:a6:0b:3a:eb:4e:1d:5a:7e:b0:
6b:6b:f0:9e:0a:92:5f:20:d1:f7:09:de:c1:15:bd:
23:ef:c5:ca:5d:2b:ef:a4:7b:13:61:4e:91:23:82:
9c:af:12:9c:1e:22:8d:90:f4:34:f6:9d:c8:34:4f:
2c:64:cf:4f:a9:a7:83:99:d0:95:99:ab:dc:c2:49:
c1:11:4e:30:68:a8:d9:08:d3:30:ce:34:40:c4:b2:
65:19:1c:f7:80:75:af:b2:42:cd:cb:11:dc:07:bb:
b5:a1:15:2a:ef:d5:dd:5c:e1:60:e7:ac:d9:7d:39:
04:5f:8b:be:92:39:a3:7b:f6:74:f4:71:da:0a:77:
b7:3f:b9:2e:50:08:e7:ce:56:16:3a:c3:e7:dc:49:
05:ff:5d:69:84:81:35:65:23:c8:fe:ef:f4:84:6f:
10:8f:be:d0:f0:58:df:3f:57:8d:36:91:19:c6:ac:
51:0c:7e:8f:22:86:e1:a6:31:9f:c7:88:32:dd:09:
92:3a:b8:1a:ba:79:62:95:bc:fc:22:b0:1c:44:ae:
39:50:81:05:4a:d4:81:d3:1a:84:3d:80:3d:58:1b:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:70:9A:88:22:CB:0D:2A:53:24:5C:01:58:4F:CC:E9:B0:04:C4:88
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:70:c0:aa:36:68:6f:c0:07:25:f9:9c:ec:6f:dc:9e:3c:ae:
97:9e:e2:21:9e:3d:f9:1e:11:d3:eb:4d:8e:09:d7:08:4f:17:
a5:7f:b2:fb:d8:46:20:9a:54:10:03:41:ab:7d:7c:6f:5c:69:
1e:74:6d:21:a8:c0:3d:69:92:14:e2:44:4f:f5:ae:96:85:52:
b6:4b:a3:e6:45:0f:74:68:b9:74:3d:b0:f9:1a:de:a0:d7:13:
a2:cc:b9:10:ec:05:bc:c8:d3:31:c2:59:ef:1b:dc:50:20:81:
eb:92:0e:96:ec:4e:d6:9b:d3:2d:d2:1c:92:fc:81:64:89:46:
cd:41:9e:db:29:85:10:be:8d:25:e5:bb:7d:fe:e5:91:35:f6:
82:7c:df:a7:6a:cf:62:1e:10:36:57:e3:4f:f3:0f:2d:08:b3:
43:d4:df:5e:ff:3b:29:6d:ca:01:f1:14:1d:a4:f6:21:0c:1d:
c3:b4:be:b8:53:33:47:35:89:b6:ac:5c:36:7b:9b:c0:4f:3d:
24:62:33:c4:ed:7c:7a:64:00:b4:27:bd:f5:c9:5c:40:6b:3f:
5d:40:2f:d4:fe:e7:3c:78:d2:f7:bd:2e:90:6c:0a:fa:d3:a3:
56:4b:63:d3:51:a1:c4:67:f4:4d:17:14:37:5f:c8:e3:47:64:
3c:0b:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:10 2025 by rpki-client